Edit tour

Windows Analysis Report
http://45.125.67.168/stelin/Crawl.exe

Overview

General Information

Sample URL:	http://45.125.67.168/stelin/Crawl.exe
Analysis ID:	1587322
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

AI detected suspicious URL

Machine Learning detection for dropped file

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Downloads executable code via HTTP

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

PE file does not import any functions

PE file overlay found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3128 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://45.125.67.168/stelin/Crawl.exe" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: GET /stelin/Crawl.exe HTTP/1.1Host: 45.125.67.168Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic

DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443

Source: 735fac18-f9b9-4d91-968a-1bb264fc2711.tmp.0.dr

Static PE information: No import functions for PE file found

Source: 735fac18-f9b9-4d91-968a-1bb264fc2711.tmp.0.dr

Static PE information: Data appended to the last section found

Source: classification engine

Classification label: mal76.evad.win@18/4@2/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\735fac18-f9b9-4d91-968a-1bb264fc2711.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://45.125.67.168/stelin/Crawl.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3128 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3128 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: Z:\scvhost\Release\scvhost.pdb source: Unconfirmed 977607.crdownload.0.dr, chromecache_44.2.dr
Source:	Binary string: Z:\scvhost\Release\scvhost.pdbd source: Unconfirmed 977607.crdownload.0.dr, chromecache_44.2.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 977607.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 44	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\735fac18-f9b9-4d91-968a-1bb264fc2711.tmp	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 44
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 44			Jump to dropped file

Malware Analysis System Evasion

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: Unconfirmed 977607.crdownload.0.dr, chromecache_44.2.dr

Binary or memory string: COULD NOT CREATE CHILD PROCESSWOW64DISABLEWOW64FSREDIRECTIONKERNEL32.DLLWOW64REVERTWOW64FSREDIRECTIONABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ\WMIC.EXE\..\\WBEM\\SYSTEM32\\WINDOWS\C:\SHADOWCOPY DELETEAVPMAPP.EXE,ECONCEAL.EXE,SECHEALTHUI.EXE,RUNTIMEBROKER.EXE,ESCANMON.EXE,ESCANPRO.EXE,TRAYSSER.EXE,TRAYICOS.EXE,ECONSER.EXE,VIEWTCP.EXE,FSHDLL64.EXE,FSGK32.EXE,FSHOSTER32.EXE,FSMA32.EXE,FSORSP.EXE,FSSM32.EXE,FSM32.EXE,TRIGGER.EXE,FPROTTRAY.EXE,FPWIN.EXE,FPAVSERVER.EXE,AVK.EXE,GDBGINX64.EXE,AVKPROXY.EXE,GDSCAN.EXE,AVKWCTLX64.EXE,AVKSERVICE.EXE,AVKTRAY.EXE,GDKBFLTEXE32.EXE,GDSC.EXE,VIRUSUTILITIES.EXE,GUARDXSERVICE.EXE,GUARDXKICKOFF_X64.EXE,IPTRAY.EXE,FRESHCLAM.EXE,FRESHCLAMWRAP.EXE,K7RTSCAN.EXE,K7FWSRVC.EXE,K7PSSRVC.EXE,K7EMLPXY.EXE,K7TSECURITY.EXE,K7AVSCAN.EXE,K7CRVSVC.EXE,K7SYSMON.EXE,K7TSMAIN.EXE,K7TSMNGR.EXE,MPCMDRUN.EXE,NANOSVC.EXE,NANOAV.EXE,NNF.EXE,NVCSVC.EXE,NBROWSER.EXE,NSEUPDATESVC.EXE,NFSERVICE.EXE,CMD.EXETASKKILL/IMNWSCMON.EXE,NJEEVES2.EXE,NVCOD.EXE,NVOY.EXE,ZLHH.EXE,ZLH.EXE,NPROSEC.EXE,ZANDA.EXE,NS.EXE,ACS.EXE,OP_MON.EXE,PSANHOST.EXE,PSUAMAIN.EXE,PSUASERVICE.EXE,AGENTSVC.EXE,BDSSVC.EXE,EMLPROXY.EXE,OPSSVC.EXE,ONLINENT.EXE,QUHLPSVC.EXE,SAPISSVC.EXE,SCANNER.EXE,SCANWSCS.EXE,SCPROXYSRV.EXE,SCSECSVC.EXE,SUPERANTISPYWARE.EXE,SASCORE64.EXE,SSUPDATE64.EXE,SUPERDELETE.EXE,SASTASK.EXE,K7RTSCAN.EXE,K7FWSRVC.EXE,K7PSSRVC.EXE,K7EMLPXY.EXE,K7TSECURITY.EXE,K7AVSCAN.EXE,K7CRVSVC.EXE,K7SYSMON.EXE,K7TSMAIN.EXE,K7TSMNGR.EXE,UIWINMGR.EXE,UIWATCHDOG.EXE,UISEAGNT.EXE,PTWATCHDOG.EXE,PTSVCHOST.EXE,PTSESSIONAGENT.EXE,COREFRAMEWORKHOST.EXE,CORESERVICESHELL.EXE,UIUPDATETRAY.EXE,VIPREUI.EXE,SBAMSVC.EXE,SBAMTRAY.EXE,SBPIMSVC.EXE,BAVHM.EXE,BAVSVC.EXE,BAVTRAY.EXE,BAV.EXE,BAVWEBCLIENT.EXE,BAVUPDATER.EXE,MCSHIELDCCC.EXE,MCSHIELDRTM.EXE,MCSHIELDDS.EXE,MCS-UNINSTALL.EXE,SDSCAN.EXE,SDFSSVC.EXE,SDWELCOME.EXE,SDTRAY.EXE,UNTHREAT.EXE,UTSVC.EXE,FORTICLIENT.EXE,FCAPPDB.EXE,FCDBLOG.EXE,FCHELPER64.EXE,FMON.EXE,FORTIESNAC.EXE,FORTIPROXY.EXE,FORTISSLVPNDAEMON.EXE,FORTITRAY.EXE,FORTIFW.EXE,FORTICLIENT_DIAGNOSTIC_TOOL.EXE,AV_TASK.EXE,CERTREG.EXE,FILMSG.EXE,FILUP.EXE,FILWSCC.EXE,FILWSCC.EXE,PSVIEW.EXE,QUAMGR.EXE,QUAMGR.EXE,SCHMGR.EXE,SCHMGR.EXE,TWSSCAN.EXE,TWSSRV.EXE,USERREG.EXESEDEBUGPRIVILEGECOULD NOT SET SE_DEBUG_NAME PRIVILEGE

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	11 Masquerading	OS Credential Dumping	2 Security Software Discovery	Remote Services	Data from Local System	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	13 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	11 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://45.125.67.168/stelin/Crawl.exe	100%	Avira URL Cloud	malware

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\Downloads\Unconfirmed 977607.crdownload	100%	Avira	HEUR/AGEN.1319254
/opt/package/joesandbox/database/analysis/1587322/temp/droppedscan/chromecache_44	100%	Avira	HEUR/AGEN.1319254
C:\Users\user\Downloads\Unconfirmed 977607.crdownload	100%	Joe Sandbox ML
/opt/package/joesandbox/database/analysis/1587322/temp/droppedscan/chromecache_44	100%	Joe Sandbox ML
C:\Users\user\Downloads\Unconfirmed 977607.crdownload	71%	ReversingLabs	Win32.Ransomware.Genasom
Chrome Cache Entry: 44	71%	ReversingLabs	Win32.Ransomware.Genasom

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	142.250.185.100	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://45.125.67.168/stelin/Crawl.exe	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
45.125.67.168	unknown	Hong Kong	133398	TELE-ASTeleAsiaLimitedHK	true
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587322
Start date and time:	2025-01-10 07:11:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://45.125.67.168/stelin/Crawl.exe
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.evad.win@18/4@2/4

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.251.168.84, 142.250.74.206, 142.250.186.46, 142.250.181.238, 172.217.18.14, 199.232.214.172, 192.229.221.95, 142.250.184.206, 172.217.16.206, 142.250.185.206, 142.250.184.227, 216.58.206.78, 142.250.186.142, 2.23.242.162, 4.245.163.56, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://45.125.67.168/stelin/Crawl.exe

Input	Output
URL: http://45.125.67.168 Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": true, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://45.125.67.168

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12774
Entropy (8bit):	6.166060341643116
Encrypted:	false
SSDEEP:	384:5jzKAMkfoyPgQb+Hdxyp7dFqwxkd+jOGWOY6zve4EN/VpvoA9:kJogg49
MD5:	D0A55F7F755F9DE526D76197293C2BF7
SHA1:	83A19D88684A61D2F1DCD0B6EB14563651AD15CD
SHA-256:	A6CD814D478764BF857E14815FAB0FE2954F73A5D41DA878CAB8396AE33F7CF0
SHA-512:	98862EC0B4761BB589BD104A35A919B26A329B08835009D7D2F20AC4FD9DAD9F79958469E178D31E94ED3F37C7173A2D5D04E579694297EDDCB5745171D4519D
Malicious:	true
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{h.............x......x..p...x......o......o......o......o......x......x..........p....o.......o...............o......Rich....................PE..L.....\|g.....................$......j.............@.......................................@..................................K...........q...................`...... b..p....................c.......b..@...............8............................text...4........................... ..`.rdata..............................@..@.data...l....`...^...F..............@....rsrc....q.......r..................@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 977607.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	892416
Entropy (8bit):	6.5971053798287205
Encrypted:	false
SSDEEP:	12288:CfT9qqQfsr85q5+OeO+OeNhBBhhBB2Lq/5/1G9ba6qCX0GuE3mczIedIHEXNuQ8k:CfT9q1fsr85hJCX0GuWIEXAihyh3LEk
MD5:	2D2C7EE748D941798466B19B53DA88BB
SHA1:	7C0CF86F123F2896795ADD3ECC7BAFC30FDC87BC
SHA-256:	066DC9A1134B1DB77C1574A52002F53B28CC29D0A3769BD5156D1E0E0A51A91A
SHA-512:	9F5A9B6CE25222219F6EF07AC85E5FDF834215DCAC81006629B21667AEB4EF9A809E336A66EAD9FDCDE0AF8F51FA7D459B4875BF4023D6CEE1EB189EBA341912
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 71%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{h.............x......x..p...x......o......o......o......o......x......x..........p....o.......o...............o......Rich....................PE..L.....\|g.....................$......j.............@.......................................@..................................K...........q...................`...... b..p....................c.......b..@...............8............................text...4........................... ..`.rdata..............................@..@.data...l....`...^...F..............@....rsrc....q.......r..................@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	downloaded
Size (bytes):	892416
Entropy (8bit):	6.5971053798287205
Encrypted:	false
SSDEEP:	12288:CfT9qqQfsr85q5+OeO+OeNhBBhhBB2Lq/5/1G9ba6qCX0GuE3mczIedIHEXNuQ8k:CfT9q1fsr85hJCX0GuWIEXAihyh3LEk
MD5:	2D2C7EE748D941798466B19B53DA88BB
SHA1:	7C0CF86F123F2896795ADD3ECC7BAFC30FDC87BC
SHA-256:	066DC9A1134B1DB77C1574A52002F53B28CC29D0A3769BD5156D1E0E0A51A91A
SHA-512:	9F5A9B6CE25222219F6EF07AC85E5FDF834215DCAC81006629B21667AEB4EF9A809E336A66EAD9FDCDE0AF8F51FA7D459B4875BF4023D6CEE1EB189EBA341912
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 71%
Reputation:	low
URL:	http://45.125.67.168/stelin/Crawl.exe
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........{h.............x......x..p...x......o......o......o......o......x......x..........p....o.......o...............o......Rich....................PE..L.....\|g.....................$......j.............@.......................................@..................................K...........q...................`...... b..p....................c.......b..@...............8............................text...4........................... ..`.rdata..............................@..@.data...l....`...^...F..............@....rsrc....q.......r..................@..@.reloc.......`......................@..B................................................................................................................................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 07:12:18.494755030 CET	49675	443	192.168.2.4	173.222.162.32
Jan 10, 2025 07:12:23.613333941 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:23.613379002 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:23.613445997 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:23.613640070 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:23.613653898 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:24.278744936 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:24.279160976 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:24.279187918 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:24.280898094 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:24.280961990 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:24.282335043 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:24.282424927 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:24.321547985 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:24.321556091 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:24.368429899 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:25.326646090 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:25.326872110 CET	49742	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:25.331583977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:25.331681013 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:25.331736088 CET	80	49742	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:25.331854105 CET	49742	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:25.337389946 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:25.342183113 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239587069 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239640951 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239681959 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239718914 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239754915 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239789963 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239794970 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.239795923 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.239825010 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239860058 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239878893 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.239896059 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239917040 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.239932060 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.239979029 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.240041018 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.240156889 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.240217924 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.241501093 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.241565943 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.245037079 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245107889 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245145082 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245179892 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245189905 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.245218039 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245232105 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.245421886 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245472908 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245486975 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.245508909 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245526075 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.245543957 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245579958 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.245636940 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.246309996 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.246364117 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.246376038 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.246400118 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.246436119 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.246471882 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.246507883 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.246536970 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.247195959 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.247236967 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.247276068 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.247319937 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.250081062 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.250118017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.250169992 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.250190020 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.250329971 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.250524998 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.250561953 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.250597954 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.250617981 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.250941038 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251110077 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.251162052 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251195908 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251231909 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251282930 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.251633883 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251697063 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.251842022 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251878977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251914978 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.251966953 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.252370119 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.252537966 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.252556086 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.252590895 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.252619028 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.255938053 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.255954027 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.255970955 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.255986929 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256023884 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.256059885 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.256143093 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256159067 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256176949 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256194115 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256207943 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.256237984 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.256602049 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256618977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256635904 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256652117 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.256683111 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.256710052 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.257013083 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257029057 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257045984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257062912 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257088900 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.257118940 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.257492065 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257508993 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257525921 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257541895 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257559061 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257565975 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.257575989 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.257585049 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.257622957 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.258100033 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258116961 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258171082 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.258367062 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258382082 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258399963 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258414984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258433104 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258445978 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.258450985 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258466959 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.258503914 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.258941889 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258960009 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.258985043 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.259001017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.259025097 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.259057045 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.259324074 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.259354115 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.259408951 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.260930061 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.260946989 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.260965109 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.260981083 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261029005 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.261059999 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.261116028 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261143923 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261159897 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261178017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261207104 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.261233091 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.261539936 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261568069 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261585951 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261603117 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261634111 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.261663914 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.261930943 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261960983 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261979103 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.261996984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262010098 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.262049913 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.262284994 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262341976 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262394905 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262396097 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.262429953 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262464046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262499094 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262515068 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.262552023 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.262878895 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.262916088 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263006926 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.263078928 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263114929 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263149977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263185978 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263201952 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.263238907 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.263478041 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263513088 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263547897 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263582945 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263600111 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.263628960 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.263701916 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263736010 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263771057 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263804913 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.263820887 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.263869047 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.264142990 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264178038 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264214039 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264247894 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264270067 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.264282942 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264296055 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.264317989 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264353037 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264389038 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264405012 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.264441013 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.264718056 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264753103 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264789104 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264823914 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.264839888 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.264869928 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265130997 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265166044 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265202045 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265235901 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265254021 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265270948 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265289068 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265305996 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265341997 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265376091 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265393972 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265412092 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265430927 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265446901 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265481949 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265517950 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265532970 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265568972 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265743971 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265779018 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265832901 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265866995 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265899897 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265899897 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265917063 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.265937090 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.265971899 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266007900 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266024113 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.266061068 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.266361952 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266400099 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266437054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266463995 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.266474009 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266750097 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266788960 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.266803026 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266838074 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266856909 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.266871929 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266907930 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266942024 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266959906 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.266977072 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.266997099 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267009974 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267050982 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267092943 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267107010 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267129898 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267146111 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267164946 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267199993 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267235041 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267251015 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267271042 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267286062 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267307043 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267389059 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267424107 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267442942 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267460108 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267477989 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267493963 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267529964 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267586946 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267709017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267757893 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267761946 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267797947 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267831087 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267883062 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267909050 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267919064 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267932892 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.267956018 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.267992020 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268026114 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268043041 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268060923 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268079996 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268099070 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268134117 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268167973 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268193960 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268204927 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268214941 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268239021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268276930 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268311977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268331051 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268345118 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268354893 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268381119 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268435955 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268490076 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268493891 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268528938 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268547058 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268564939 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268599033 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268634081 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268651962 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268681049 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268688917 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268724918 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268758059 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268793106 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268809080 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268830061 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268843889 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.268887997 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268942118 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268975019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.268992901 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269010067 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269023895 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269045115 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269081116 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269114017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269131899 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269150019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269161940 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269185066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269218922 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269275904 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269275904 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269309998 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269325972 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269345999 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269381046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269413948 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269433975 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269448996 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269476891 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269493103 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269526958 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269562006 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269581079 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269606113 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269709110 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269742966 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269778967 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269834995 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269906044 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269956112 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.269957066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.269994020 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270026922 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270061016 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270080090 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270097017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270112991 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270133972 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270168066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270201921 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270220041 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270236969 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270253897 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270272017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270307064 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270344019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270361900 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270379066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270390987 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270415068 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270448923 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270483017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270499945 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270519018 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270538092 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270567894 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270601034 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270637035 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270657063 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.270673037 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.270679951 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.317137957 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.373296022 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.373341084 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.373379946 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.373416901 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.373445034 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.373478889 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.374001980 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374037027 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374073029 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374106884 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374123096 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.374162912 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.374555111 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374588966 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374624014 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374656916 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374676943 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.374705076 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.374710083 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374767065 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374819040 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374862909 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.374870062 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374905109 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374911070 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.374955893 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.374989986 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375034094 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375045061 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375086069 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375096083 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375128984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375163078 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375202894 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375215054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375250101 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375255108 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375304937 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375402927 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375432014 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375449896 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375473022 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375487089 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375545979 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375587940 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375596046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375632048 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375683069 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375705957 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375716925 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375750065 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375782967 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375792027 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375817060 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375821114 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375852108 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375885010 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375910997 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375917912 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375951052 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.375957966 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.375984907 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376023054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376055956 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376064062 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376090050 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376094103 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376128912 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376162052 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376194954 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376204014 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376229048 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376234055 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376262903 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376296997 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376332045 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376339912 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376367092 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376370907 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376410961 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376462936 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376497984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376506090 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376532078 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376538992 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376564980 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376597881 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376631021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376640081 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376667976 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376668930 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376702070 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376734972 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376769066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376779079 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376796961 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376810074 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376840115 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376873016 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376879930 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376904964 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376939058 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.376969099 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.376971006 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377005100 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377007961 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377043962 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377079964 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377127886 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377130985 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377165079 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377170086 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377197981 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377230883 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377264977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377270937 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377317905 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377324104 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377352953 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377403021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377445936 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377459049 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377499104 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377506971 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377542019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377569914 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377603054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377610922 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377638102 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377640963 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377667904 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377698898 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377732992 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377738953 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377773046 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377773046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377808094 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377840042 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377871990 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377882004 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377902031 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377909899 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.377933979 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.377966881 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.378000021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.378006935 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.378032923 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.378037930 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.378065109 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.378098011 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.378133059 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.378140926 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.378166914 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.378170967 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.431241035 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.606579065 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.606626034 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.606663942 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.606705904 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.606790066 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.606817961 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.606875896 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.606883049 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.606937885 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.606949091 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607001066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607036114 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607089996 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607110977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607147932 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607156992 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607202053 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607260942 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607310057 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607331991 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607384920 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607387066 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607418060 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607470036 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607520103 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607523918 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607569933 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607579947 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607609034 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607642889 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607676983 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607698917 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607721090 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607729912 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607763052 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607826948 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607878923 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607886076 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607909918 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607927084 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.607944012 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.607976913 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608009100 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608026028 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608042002 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608057976 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608074903 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608108997 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608141899 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608161926 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608181953 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608186007 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608237028 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608288050 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608342886 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608346939 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608401060 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608407974 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608437061 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608486891 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608537912 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608542919 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608566999 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608589888 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608620882 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608676910 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608709097 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608726025 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608743906 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608762026 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608777046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608808994 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608841896 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608865023 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608875990 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608910084 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.608911991 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608947039 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.608978987 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609000921 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609014034 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609024048 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609044075 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609078884 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609112024 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609138012 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609146118 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609174013 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609180927 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609213114 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609246969 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609263897 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609278917 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609302044 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609313965 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609345913 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609385014 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609402895 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609415054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609431982 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609445095 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609478951 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609507084 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609538078 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609540939 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609556913 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609575987 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609607935 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609642029 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609659910 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609674931 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609698057 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609710932 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609744072 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609776020 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609800100 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609807014 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609817028 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609841108 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609874964 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609910011 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609926939 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609944105 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.609960079 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.609978914 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610013962 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610042095 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610069990 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610078096 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610085964 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610112906 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610146046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610178947 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610212088 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610214949 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610232115 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610245943 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610277891 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610294104 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610312939 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610344887 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610378981 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610399961 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610409021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610428095 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610441923 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610475063 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610508919 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.610524893 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.610559940 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.614253998 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614305019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614341021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614392042 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614407063 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.614428043 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614450932 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.614464045 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614501953 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614530087 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614562988 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.614563942 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614583969 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.614599943 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614634037 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614651918 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.614669085 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614701986 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614737034 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614756107 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.614770889 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.614792109 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.654947042 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.693171024 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.745271921 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.831836939 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.831872940 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.831907034 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832093000 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832333088 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832365990 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832396984 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832401991 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832451105 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832489014 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832524061 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832539082 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832547903 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832571983 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832626104 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832629919 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832681894 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832730055 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832761049 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832782030 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832808018 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832808971 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832840919 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832873106 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832905054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832926035 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832937956 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.832947016 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.832972050 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833023071 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833055019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833076954 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833086967 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833098888 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833122015 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833153963 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833184958 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833204031 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833215952 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833245039 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833249092 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833276987 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833307981 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833328962 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833340883 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833348036 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833374023 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833408117 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833441019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833467007 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833472967 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833489895 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833540916 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833571911 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833604097 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833627939 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833646059 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833667040 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833714962 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833746910 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833777905 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833798885 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833811045 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833817959 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.833842993 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833901882 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833950043 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.833955050 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834002018 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834002972 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834052086 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834085941 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834132910 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834137917 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834166050 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834183931 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834197998 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834229946 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834265947 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834283113 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834315062 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834321022 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834348917 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834381104 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834404945 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834429979 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834461927 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834492922 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834511042 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834525108 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834537029 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834556103 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834604979 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834636927 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834656000 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834667921 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834687948 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834753036 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834785938 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834816933 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834837914 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834850073 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834880114 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834882021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834914923 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834945917 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834966898 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.834978104 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.834989071 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835011005 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835043907 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835077047 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835095882 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835108995 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835122108 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835141897 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835174084 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835206032 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835230112 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835282087 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835297108 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835345984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835378885 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835408926 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835432053 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835442066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835449934 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835474968 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835506916 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835537910 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835556984 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835572958 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835580111 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835604906 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835639000 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835669994 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835689068 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835701942 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835711956 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.835735083 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835767031 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.835815907 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.839729071 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.839759111 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.839793921 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.839808941 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.839843988 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.839849949 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.839883089 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.839916945 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.839965105 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.839970112 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.839998960 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840014935 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.840033054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840066910 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840097904 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840121031 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.840131998 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840137959 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.840163946 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840195894 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840224981 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840255022 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840256929 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.840277910 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.840287924 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840320110 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840352058 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:27.840372086 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:27.840394974 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.057607889 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.057658911 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.057696104 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.057739019 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.057991982 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058027029 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058042049 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.058060884 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058096886 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058116913 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.058134079 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058182955 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.058568001 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058602095 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058634996 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058655977 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.058669090 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058705091 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058726072 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.058821917 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058872938 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058877945 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.058924913 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058963060 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.058979988 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059012890 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059063911 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059075117 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059098005 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059129953 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059149981 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059179068 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059211016 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059231043 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059243917 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059277058 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059294939 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059309959 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059369087 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059374094 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059401989 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059442043 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059474945 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059474945 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059526920 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059526920 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059562922 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059612036 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059617996 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059644938 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059690952 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059694052 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059726954 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059758902 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059776068 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059792042 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059823990 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059840918 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059858084 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059889078 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059907913 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059921980 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059953928 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.059969902 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.059988022 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060020924 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060039043 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060054064 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060084105 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060101986 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060116053 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060164928 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060169935 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060203075 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060235023 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060256004 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060266972 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060316086 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060319901 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060365915 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060415030 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060417891 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060447931 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060497046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060501099 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060549021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060597897 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060628891 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060628891 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060663939 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060682058 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060698032 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060729980 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060745955 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060762882 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060796976 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060817003 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060828924 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060864925 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060873985 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060895920 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060929060 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060941935 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.060961008 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.060992956 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061007977 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061024904 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061058044 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061088085 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061089993 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061122894 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061136961 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061155081 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061187983 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061203003 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061218977 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061252117 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061268091 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061284065 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061316013 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061331987 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061347961 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061383009 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061394930 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061415911 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061449051 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061463118 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061480045 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061511993 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061525106 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061559916 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061594009 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061605930 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061625957 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061659098 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061676979 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061690092 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061723948 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061742067 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.061757088 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.061803102 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.066526890 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066560984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066593885 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066623926 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.066625118 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066670895 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.066678047 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066728115 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066773891 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.066786051 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066818953 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066850901 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066864967 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.066883087 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066914082 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066929102 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.066946983 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066978931 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.066992044 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.067011118 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.067043066 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.067068100 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.067075968 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.067110062 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.067126036 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.120630026 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.283027887 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283057928 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283077955 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283222914 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.283360004 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283376932 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283406973 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283420086 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.283426046 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283443928 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283448935 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.283463955 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.283535004 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284029007 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284044981 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284063101 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284075022 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284081936 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284126043 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284173012 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284188032 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284220934 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284368038 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284384012 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284415960 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284487963 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284508944 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284533024 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284537077 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284554958 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284573078 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284588099 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284600019 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284617901 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284631968 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284636021 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284653902 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284666061 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284672976 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284693956 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284706116 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284712076 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284738064 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284749031 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284754038 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284780979 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284786940 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284800053 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284816980 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284821987 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284836054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284852982 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284863949 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284871101 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284897089 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284904957 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284915924 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284934044 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284946918 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.284950972 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.284971952 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285157919 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285185099 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285202980 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285208941 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285222054 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285248041 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285248995 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285267115 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285293102 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285295010 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285311937 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285339117 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285342932 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285356998 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285384893 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285389900 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285403013 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285419941 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285437107 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285438061 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285454988 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285473108 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285478115 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285490990 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285506010 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285520077 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285537958 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285543919 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285557032 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285583973 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285587072 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285602093 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285619974 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285634041 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285640001 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285657883 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285669088 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285677910 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285693884 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285707951 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285712957 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285732031 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285747051 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285748005 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285767078 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285783052 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285784960 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285804033 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285820007 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285825014 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285837889 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285845995 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285856962 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285883904 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.285974979 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.285996914 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286014080 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286020994 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286031961 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286050081 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286061049 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286067963 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286086082 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286101103 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286108017 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286118984 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286130905 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286138058 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286164045 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286448002 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286475897 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286494017 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286499977 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286510944 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286530018 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286540985 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286557913 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286576033 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286576033 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286595106 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286612034 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286623955 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286631107 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286648035 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286670923 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286675930 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286689997 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286694050 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286712885 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286730051 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286739111 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286747932 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286766052 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286768913 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286784887 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286802053 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286808014 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286819935 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286834955 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286850929 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.286853075 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.286884069 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.288461924 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.292891026 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.292910099 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:12:28.292948961 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:28.338668108 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:12:34.186892986 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:34.186988115 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:34.187156916 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:35.407202959 CET	49723	80	192.168.2.4	199.232.210.172
Jan 10, 2025 07:12:35.412405968 CET	80	49723	199.232.210.172	192.168.2.4
Jan 10, 2025 07:12:35.412461042 CET	49723	80	192.168.2.4	199.232.210.172
Jan 10, 2025 07:12:35.871198893 CET	49738	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:12:35.871248007 CET	443	49738	142.250.185.100	192.168.2.4
Jan 10, 2025 07:12:50.195259094 CET	80	49724	84.201.210.22	192.168.2.4
Jan 10, 2025 07:12:50.195672035 CET	49724	80	192.168.2.4	84.201.210.22
Jan 10, 2025 07:12:50.195672035 CET	49724	80	192.168.2.4	84.201.210.22
Jan 10, 2025 07:12:50.200678110 CET	80	49724	84.201.210.22	192.168.2.4
Jan 10, 2025 07:13:10.337771893 CET	49742	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:13:10.342694998 CET	80	49742	45.125.67.168	192.168.2.4
Jan 10, 2025 07:13:13.311058998 CET	49741	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:13:13.315927029 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:13:23.667201042 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:23.667309999 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:23.667443037 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:23.667778015 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:23.667805910 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:24.304351091 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:24.304862022 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:24.304898977 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:24.305330038 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:24.305761099 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:24.305845022 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:24.352833986 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:25.870857000 CET	49742	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:13:25.875916004 CET	80	49742	45.125.67.168	192.168.2.4
Jan 10, 2025 07:13:25.875974894 CET	49742	80	192.168.2.4	45.125.67.168
Jan 10, 2025 07:13:34.384310007 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:34.384377956 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:34.384521008 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:35.870773077 CET	49812	443	192.168.2.4	142.250.185.100
Jan 10, 2025 07:13:35.870786905 CET	443	49812	142.250.185.100	192.168.2.4
Jan 10, 2025 07:13:42.390610933 CET	80	49741	45.125.67.168	192.168.2.4
Jan 10, 2025 07:13:42.390799999 CET	49741	80	192.168.2.4	45.125.67.168

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 07:12:19.616458893 CET	53	54361	1.1.1.1	192.168.2.4
Jan 10, 2025 07:12:19.617763996 CET	53	63185	1.1.1.1	192.168.2.4
Jan 10, 2025 07:12:20.722455025 CET	53	52724	1.1.1.1	192.168.2.4
Jan 10, 2025 07:12:23.604528904 CET	65102	53	192.168.2.4	1.1.1.1
Jan 10, 2025 07:12:23.604528904 CET	51269	53	192.168.2.4	1.1.1.1
Jan 10, 2025 07:12:23.612461090 CET	53	51269	1.1.1.1	192.168.2.4
Jan 10, 2025 07:12:23.612530947 CET	53	65102	1.1.1.1	192.168.2.4
Jan 10, 2025 07:12:36.361407995 CET	138	138	192.168.2.4	192.168.2.255
Jan 10, 2025 07:12:37.658777952 CET	53	57353	1.1.1.1	192.168.2.4
Jan 10, 2025 07:12:56.642641068 CET	53	64347	1.1.1.1	192.168.2.4
Jan 10, 2025 07:13:19.472815037 CET	53	51539	1.1.1.1	192.168.2.4
Jan 10, 2025 07:13:19.626087904 CET	53	60390	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 07:12:23.604528904 CET	192.168.2.4	1.1.1.1	0xf485	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 07:12:23.604528904 CET	192.168.2.4	1.1.1.1	0xbd41	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 07:12:23.612461090 CET	1.1.1.1	192.168.2.4	0xbd41	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 07:12:23.612530947 CET	1.1.1.1	192.168.2.4	0xf485	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

45.125.67.168

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49741	45.125.67.168	80	2908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 07:12:25.337389946 CET	444	OUT	GET /stelin/Crawl.exe HTTP/1.1 Host: 45.125.67.168 Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 07:12:27.239587069 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 10 Jan 2025 06:12:26 GMT Content-Type: application/octet-stream Content-Length: 892416 Last-Modified: Tue, 07 Jan 2025 07:22:06 GMT Connection: keep-alive ETag: "677cd61e-d9e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 86 7b 68 8b c2 1a 06 d8 c2 1a 06 d8 c2 1a 06 d8 b1 78 05 d9 d0 1a 06 d8 b1 78 03 d9 70 1a 06 d8 b1 78 02 d9 d5 1a 06 d8 90 6f 02 d9 d3 1a 06 d8 90 6f 05 d9 da 1a 06 d8 90 6f 03 d9 9d 1a 06 d8 08 6f 03 d9 eb 1a 06 d8 b1 78 00 d9 c3 1a 06 d8 b1 78 07 d9 cd 1a 06 d8 c2 1a 07 d8 70 1a 06 d8 08 6f 0f d9 c3 1a 06 d8 08 6f f9 d8 c3 1a 06 d8 c2 1a 91 d8 c3 1a 06 d8 08 6f 04 d9 c3 1a 06 d8 52 69 63 68 c2 1a 06 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1c d6 7c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 98 08 00 00 24 05 00 00 00 00 00 6a dc 05 00 00 10 00 00 00 b0 08 00 00 00 40 00 00 10 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.${hxxpxooooxxpoooRichPEL\|g$j@@Kq` bpcb@8.text4 `.rdata@@.datal`^F@.rsrcqr@@.reloc`@B
Jan 10, 2025 07:12:27.239640951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 8b ec 83 e4 f8 81 ec 98 01 00 00 a1 34 61 4b 00 33 c4 89 84 24 94 01 00 00 68 c0 9f 48 00 e8 b0 c9 05 00 Data Ascii: U4aK3$hHK@u$PjHK$3]Q6hHdY;)hHTK@Y)hHK Y(
Jan 10, 2025 07:12:27.239681959 CET	1236	IN	Data Raw: e8 29 c5 05 00 59 5f 5e c3 b9 31 cf 4b 00 e9 21 ad 05 00 b9 30 cf 4b 00 e8 4d aa 05 00 68 f8 a5 48 00 e8 07 c5 05 00 59 c3 68 0c a6 48 00 e8 fb c4 05 00 59 c3 68 02 a6 48 00 e8 ef c4 05 00 59 c3 b9 b0 d2 4b 00 e8 1f aa 05 00 68 20 a6 48 00 e8 d9 Data Ascii: )Y_^1K!0KMhHYhHYhHYKh HYhHYXKh*HYKUujRQp0]UQEPQj/sUY]Uu
Jan 10, 2025 07:12:27.239718914 CET	672	IN	Data Raw: cc cc cc cc cc cc 55 8b ec 8b 45 08 8b 55 0c 89 10 89 48 04 5d c2 08 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 01 8d 55 f8 83 ec 08 56 ff 75 08 52 ff 50 0c 8b 75 0c 8b 48 04 8b 56 04 8b 49 04 3b 4a 04 75 0f 8b 00 3b 06 75 09 b0 01 Data Ascii: UEUH]UUVuRPuHVI;Ju;u^]2^]UAVuV;Bu;Eu^]2^]UEM@jK]SUkl$jh/HdPSX4aK3EVWPEd
Jan 10, 2025 07:12:27.239754915 CET	1236	IN	Data Raw: f4 64 89 0d 00 00 00 00 59 5f 5e 8b 4d ec 33 cd e8 11 b9 05 00 8b e5 5d 8b e3 5b c2 0c 00 e8 b1 a7 06 00 e8 ac a7 06 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 56 8b f1 8d 46 04 c7 06 78 b3 48 00 50 e8 4c d2 05 00 83 c4 04 f6 45 08 01 Data Ascii: dY_^M3][UVFxHPLEtjVs^]UVuWWGPxHfFP HFNGO,H_^]UVuWWGPxHfFPZ HFNGO_^
Jan 10, 2025 07:12:27.239789963 CET	1236	IN	Data Raw: cc cc 55 8b ec 56 8b 75 08 57 8b 7d 0c 3b f7 74 19 53 8d 59 08 0f b6 06 53 50 e8 e2 ab 05 00 88 06 83 c4 08 46 3b f7 75 ec 5b 5f 8b c6 5e 5d c2 08 00 55 8b ec 8a 45 08 5d c2 04 00 cc cc cc cc cc cc 55 8b ec 8b 55 10 56 8b 75 08 57 8b 7d 0c 8b cf Data Ascii: UVuW};tSYSPF;u[_^]UE]UUVuW}+QVR_^]UE]UUVuW}+QVR_^]UVFLH~vyvvq<HEt
Jan 10, 2025 07:12:27.239825010 CET	1236	IN	Data Raw: 00 83 ff 01 75 0b 8b 45 0c 5f c6 00 00 5d c2 0c 00 ff 75 08 e8 b2 b3 06 00 8b c8 83 c4 04 85 c9 75 0a b8 e0 38 4a 00 5f 5d c2 0c 00 56 8b 75 0c 8d 47 ff 50 51 56 e8 33 9f 06 00 83 c4 0c c6 44 3e ff 00 8b c6 5e 5f 5d c2 0c 00 cc cc cc ff 31 ff 15 Data Ascii: uE_]uu8J_]VuGPQV3D>^_]1HUjh1HdP\|4aK3EVWPEd\|}jjE}PhVjhETHuKVh8JEj&P_MGQGA
Jan 10, 2025 07:12:27.239860058 CET	1236	IN	Data Raw: 00 8b c1 c6 41 04 01 c7 41 08 70 61 4a 00 c3 c7 01 04 00 00 00 8b c1 c6 41 04 01 c7 41 08 70 61 4a 00 c3 8d 82 e7 d8 ff ff 83 f8 38 0f 87 66 02 00 00 0f b6 80 04 2f 40 00 ff 24 85 88 2e 40 00 c7 01 0d 00 00 00 8b c1 c6 41 04 01 c7 41 08 70 61 4a Data Ascii: AApaJAApaJ8f/@$.@AApaJdAApaJeAApaJfAApaJgAApaJAApaJjAApaJkAApaJlAApaJ
Jan 10, 2025 07:12:27.239896059 CET	1236	IN	Data Raw: b2 f6 ff ff 8b 45 08 5d c2 08 00 cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 53 8b 5d 08 56 8b 75 0c 57 8b 7d 10 85 ff 74 7b 83 ff 01 75 0c 5f c6 06 00 8b c6 5e 5b 5d c2 0c 00 6a 00 57 56 68 00 04 00 00 53 6a 00 68 00 12 00 00 ff 15 b4 b0 48 00 85 Data Ascii: E]US]VuW}t{u_^[]jWVhSjhHuSh8JWV$_^[]~4fDL0tuH0_^[]t.uD0_^[]USVW]uEu$u dE
Jan 10, 2025 07:12:27.239932060 CET	1236	IN	Data Raw: 8b 40 04 85 c0 0f 45 c8 b8 4f 34 40 00 89 4d ec c3 8b 45 ec 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 5b 8b e5 5d c3 e8 85 8f 06 00 cc cc cc cc cc cc cc 6a 30 6a 00 51 e8 36 c3 05 00 83 c4 0c c2 04 00 55 8b ec 6a ff 68 cd 31 48 00 64 a1 00 00 00 00 Data Ascii: @EO4@MEMdY_^[]j0jQ6Ujh1HdP44aK3EVWPEdQM~MGVfBME>mUjhJhEdPSVW4aK1E3PEdeEhQ
Jan 10, 2025 07:12:27.239979029 CET	1236	IN	Data Raw: 5d c2 08 00 ba 44 39 4a 00 8d 4d f0 e8 5d fb ff ff ba 58 39 4a 00 8d 4d f0 e8 50 fb ff ff ba 6c 39 4a 00 8d 4d f0 e8 43 fb ff ff cc cc cc 55 8b ec 6a ff 68 2d 32 48 00 64 a1 00 00 00 00 50 53 56 a1 34 61 4b 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 Data Ascii: ]D9JM]X9JMPl9JMCUjh-2HdPSV4aK3PEd]]EsdHPsjVdHjjH3MdY^[]U4aK3EVlHu)\HEWEaJfEEE
Jan 10, 2025 07:12:27.240156889 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 10 Jan 2025 06:12:26 GMT Content-Type: application/octet-stream Content-Length: 892416 Last-Modified: Tue, 07 Jan 2025 07:22:06 GMT Connection: keep-alive ETag: "677cd61e-d9e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 86 7b 68 8b c2 1a 06 d8 c2 1a 06 d8 c2 1a 06 d8 b1 78 05 d9 d0 1a 06 d8 b1 78 03 d9 70 1a 06 d8 b1 78 02 d9 d5 1a 06 d8 90 6f 02 d9 d3 1a 06 d8 90 6f 05 d9 da 1a 06 d8 90 6f 03 d9 9d 1a 06 d8 08 6f 03 d9 eb 1a 06 d8 b1 78 00 d9 c3 1a 06 d8 b1 78 07 d9 cd 1a 06 d8 c2 1a 07 d8 70 1a 06 d8 08 6f 0f d9 c3 1a 06 d8 08 6f f9 d8 c3 1a 06 d8 c2 1a 91 d8 c3 1a 06 d8 08 6f 04 d9 c3 1a 06 d8 52 69 63 68 c2 1a 06 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1c d6 7c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 98 08 00 00 24 05 00 00 00 00 00 6a dc 05 00 00 10 00 00 00 b0 08 00 00 00 40 00 00 10 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.${hxxpxooooxxpoooRichPEL\|g$j@@Kq` bpcb@8.text4 `.rdata@@.datal`^F@.rsrcqr@@.reloc`@B
Jan 10, 2025 07:12:27.241501093 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 10 Jan 2025 06:12:26 GMT Content-Type: application/octet-stream Content-Length: 892416 Last-Modified: Tue, 07 Jan 2025 07:22:06 GMT Connection: keep-alive ETag: "677cd61e-d9e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 86 7b 68 8b c2 1a 06 d8 c2 1a 06 d8 c2 1a 06 d8 b1 78 05 d9 d0 1a 06 d8 b1 78 03 d9 70 1a 06 d8 b1 78 02 d9 d5 1a 06 d8 90 6f 02 d9 d3 1a 06 d8 90 6f 05 d9 da 1a 06 d8 90 6f 03 d9 9d 1a 06 d8 08 6f 03 d9 eb 1a 06 d8 b1 78 00 d9 c3 1a 06 d8 b1 78 07 d9 cd 1a 06 d8 c2 1a 07 d8 70 1a 06 d8 08 6f 0f d9 c3 1a 06 d8 08 6f f9 d8 c3 1a 06 d8 c2 1a 91 d8 c3 1a 06 d8 08 6f 04 d9 c3 1a 06 d8 52 69 63 68 c2 1a 06 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1c d6 7c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 98 08 00 00 24 05 00 00 00 00 00 6a dc 05 00 00 10 00 00 00 b0 08 00 00 00 40 00 00 10 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.${hxxpxooooxxpoooRichPEL\|g$j@@Kq` bpcb@8.text4 `.rdata@@.datal`^F@.rsrcqr@@.reloc`@B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	45.125.67.168	80	2908	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 07:13:10.337771893 CET	6	OUT	Data Raw: 00 Data Ascii:

Target ID:	0
Start time:	01:12:13
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:12:17
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:12:24
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://45.125.67.168/stelin/Crawl.exe"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:12:26
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3128 --field-trial-handle=1996,i,7927740138211076431,17650769958776893248,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: C:\Users\user\Downloads\Unconfirmed 977607.crdownload	Avira: detection malicious, Label: HEUR/AGEN.1319254
Source: /opt/package/joesandbox/database/analysis/1587322/temp/droppedscan/chromecache_44	Avira: detection malicious, Label: HEUR/AGEN.1319254

Source: C:\Users\user\Downloads\Unconfirmed 977607.crdownload	ReversingLabs: Detection: 70%
Source: Chrome Cache Entry: 44	ReversingLabs: Detection: 70%

Source: C:\Users\user\Downloads\Unconfirmed 977607.crdownload	Joe Sandbox ML: detected
Source: /opt/package/joesandbox/database/analysis/1587322/temp/droppedscan/chromecache_44	Joe Sandbox ML: detected

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0Date: Fri, 10 Jan 2025 06:12:26 GMTContent-Type: application/octet-streamContent-Length: 892416Last-Modified: Tue, 07 Jan 2025 07:22:06 GMTConnection: keep-aliveETag: "677cd61e-d9e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 86 7b 68 8b c2 1a 06 d8 c2 1a 06 d8 c2 1a 06 d8 b1 78 05 d9 d0 1a 06 d8 b1 78 03 d9 70 1a 06 d8 b1 78 02 d9 d5 1a 06 d8 90 6f 02 d9 d3 1a 06 d8 90 6f 05 d9 da 1a 06 d8 90 6f 03 d9 9d 1a 06 d8 08 6f 03 d9 eb 1a 06 d8 b1 78 00 d9 c3 1a 06 d8 b1 78 07 d9 cd 1a 06 d8 c2 1a 07 d8 70 1a 06 d8 08 6f 0f d9 c3 1a 06 d8 08 6f f9 d8 c3 1a 06 d8 c2 1a 91 d8 c3 1a 06 d8 08 6f 04 d9 c3 1a 06 d8 52 69 63 68 c2 1a 06 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1c d6 7c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 98 08 00 00 24 05 00 00 00 00 00 6a dc 05 00 00 10 00 00 00 b0 08 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0d 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 dc 4b 0b 00 a0 00 00 00 00 e0 0b 00 e0 71 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 0d 00 0c 87 00 00 20 62 0a 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 63 0a 00 18 00 00 00 90 62 0a 00 40 00 00 00 00 00 00 00 00 00 00 00 00 b0 08 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 34 96 08 00 00 10 00 00 00 98 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f8 a8 02 00 00 b0 08 00 00 aa 02 00 00 9c 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 7f 00 00 00 60 0b 00 00 5e 00 00 00 46 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e0 71 01 00 00 e0 0b 00 00 72 01 00 00 a4 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 87 00 00 00 60 0d 00 00 88 00 00 00 16 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0Date: Fri, 10 Jan 2025 06:12:26 GMTContent-Type: application/octet-streamContent-Length: 892416Last-Modified: Tue, 07 Jan 2025 07:22:06 GMTConnection: keep-aliveETag: "677cd61e-d9e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 86 7b 68 8b c2 1a 06 d8 c2 1a 06 d8 c2 1a 06 d8 b1 78 05 d9 d0 1a 06 d8 b1 78 03 d9 70 1a 06 d8 b1 78 02 d9 d5 1a 06 d8 90 6f 02 d9 d3 1a 06 d8 90 6f 05 d9 da 1a 06 d8 90 6f 03 d9 9d 1a 06 d8 08 6f 03 d9 eb 1a 06 d8 b1 78 00 d9 c3 1a 06 d8 b1 78 07 d9 cd 1a 06 d8 c2 1a 07 d8 70 1a 06 d8 08 6f 0f d9 c3 1a 06 d8 08 6f f9 d8 c3 1a 06 d8 c2 1a 91 d8 c3 1a 06 d8 08 6f 04 d9 c3 1a 06 d8 52 69 63 68 c2 1a 06 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1c d6 7c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 98 08 00 00 24 05 00 00 00 00 00 6a dc 05 00 00 10 00 00 00 b0 08 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0d 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 dc 4b 0b 00 a0 00 00 00 00 e0 0b 00 e0 71 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 0d 00 0c 87 00 00 20 62 0a 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 63 0a 00 18 00 00 00 90 62 0a 00 40 00 00 00 00 00 00 00 00 00 00 00 00 b0 08 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 34 96 08 00 00 10 00 00 00 98 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f8 a8 02 00 00 b0 08 00 00 aa 02 00 00 9c 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 7f 00 00 00 60 0b 00 00 5e 00 00 00 46 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e0 71 01 00 00 e0 0b 00 00 72 01 00 00 a4 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 87 00 00 00 60 0d 00 00 88 00 00 00 16 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0Date: Fri, 10 Jan 2025 06:12:26 GMTContent-Type: application/octet-streamContent-Length: 892416Last-Modified: Tue, 07 Jan 2025 07:22:06 GMTConnection: keep-aliveETag: "677cd61e-d9e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 86 7b 68 8b c2 1a 06 d8 c2 1a 06 d8 c2 1a 06 d8 b1 78 05 d9 d0 1a 06 d8 b1 78 03 d9 70 1a 06 d8 b1 78 02 d9 d5 1a 06 d8 90 6f 02 d9 d3 1a 06 d8 90 6f 05 d9 da 1a 06 d8 90 6f 03 d9 9d 1a 06 d8 08 6f 03 d9 eb 1a 06 d8 b1 78 00 d9 c3 1a 06 d8 b1 78 07 d9 cd 1a 06 d8 c2 1a 07 d8 70 1a 06 d8 08 6f 0f d9 c3 1a 06 d8 08 6f f9 d8 c3 1a 06 d8 c2 1a 91 d8 c3 1a 06 d8 08 6f 04 d9 c3 1a 06 d8 52 69 63 68 c2 1a 06 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1c d6 7c 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 98 08 00 00 24 05 00 00 00 00 00 6a dc 05 00 00 10 00 00 00 b0 08 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 0d 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 dc 4b 0b 00 a0 00 00 00 00 e0 0b 00 e0 71 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 0d 00 0c 87 00 00 20 62 0a 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 63 0a 00 18 00 00 00 90 62 0a 00 40 00 00 00 00 00 00 00 00 00 00 00 00 b0 08 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 34 96 08 00 00 10 00 00 00 98 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f8 a8 02 00 00 b0 08 00 00 aa 02 00 00 9c 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 7f 00 00 00 60 0b 00 00 5e 00 00 00 46 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e0 71 01 00 00 e0 0b 00 00 72 01 00 00 a4 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 87 00 00 00 60 0d 00 00 88 00 00 00 16 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168
Source: unknown	TCP traffic detected without corresponding DNS query: 45.125.67.168

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://45.125.67.168/stelin/Crawl.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\Downloads\735fac18-f9b9-4d91-968a-1bb264fc2711.tmp

C:\Users\user\Downloads\Unconfirmed 977607.crdownload

Chrome Cache Entry: 44

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5840, Parent PID: 5224

General

Chronological Activities

Analysis Process: chrome.exePID: 2908, Parent PID: 5840

General

Chronological Activities

Analysis Process: chrome.exePID: 6612, Parent PID: 5224

General

Chronological Activities

Windows Analysis Report
http://45.125.67.168/stelin/Crawl.exe